Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-36582

PHP 8.3 Rebase

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • rhel-10.0.beta
    • rhel-10.0.beta, CentOS Stream 10
    • php
    • Rebase
    • sst_cs_infra_services
    • ssg_core_services
    • 2
    • False
    • Hide

      None

      Show
      None
    • Red Hat Enterprise Linux

      Rebase to 8.3.7

      So fix low CVEs

      • CVE-2024-2756 _Host-/_Secure- cookie bypass due to partial CVE-2022-31629 fix
      • CVE-2024-3096 password_verify can erroneously return true,
        opening ATO risk
      • CVE-2024-2757 mb_encode_mimeheader runs endlessly for some inputs

      And add backport for ARGON2 support from OpenSSL 3.2 (from 8.4)

            rcollet@redhat.com Remi Collet
            rcollet@redhat.com Remi Collet
            Remi Collet Remi Collet
            Iveta Cesalova Iveta Cesalova
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: