Alma Linux: CVE-2022-31631: Moderate: php:8.0 security update (Multiple Advisories)

Alma Linux: CVE-2022-31631: Moderate: php:8.0 security update (Multiple Advisories)

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

02/21/2023

Created

02/22/2023

Added

02/22/2023

Modified

02/14/2025

Description

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

Solution(s)

• alma-upgrade-apcu-panel
• alma-upgrade-libzip
• alma-upgrade-libzip-devel
• alma-upgrade-libzip-tools
• alma-upgrade-php
• alma-upgrade-php-bcmath
• alma-upgrade-php-cli
• alma-upgrade-php-common
• alma-upgrade-php-dba
• alma-upgrade-php-dbg
• alma-upgrade-php-devel
• alma-upgrade-php-embedded
• alma-upgrade-php-enchant
• alma-upgrade-php-ffi
• alma-upgrade-php-fpm
• alma-upgrade-php-gd
• alma-upgrade-php-gmp
• alma-upgrade-php-intl
• alma-upgrade-php-json
• alma-upgrade-php-ldap
• alma-upgrade-php-mbstring
• alma-upgrade-php-mysqlnd
• alma-upgrade-php-odbc
• alma-upgrade-php-opcache
• alma-upgrade-php-pdo
• alma-upgrade-php-pear
• alma-upgrade-php-pecl-apcu
• alma-upgrade-php-pecl-apcu-devel
• alma-upgrade-php-pecl-rrd
• alma-upgrade-php-pecl-xdebug
• alma-upgrade-php-pecl-xdebug3
• alma-upgrade-php-pecl-zip
• alma-upgrade-php-pgsql
• alma-upgrade-php-process
• alma-upgrade-php-snmp
• alma-upgrade-php-soap
• alma-upgrade-php-xml
• alma-upgrade-php-xmlrpc

References

• https://attackerkb.com/topics/cve-2022-31631
• CVE - 2022-31631
• https://errata.almalinux.org/8/ALSA-2023-0848.html
• https://errata.almalinux.org/8/ALSA-2023-2903.html
• https://errata.almalinux.org/9/ALSA-2023-0965.html
• https://errata.almalinux.org/9/ALSA-2023-2417.html