FlawAtlas
Search the atlas
SUSE-SU-2023:0074-1 Not scored

Security update for php8

This update for php8 fixes the following issues: - Updated to version 8.0.27: - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string (bsc#1206958). Non-security fixes: - Fixed a NULL pointer dereference with -w/-s options. - Fixed a crash in Generator when interrupted during argument evaluation with extra named params. - Fixed a crash in Generator when memory limit was exceeded during initialization. - Fixed a memory leak in Generator when interrupted during argument evaluation. - Fixed an issue in the DateTimeZone constructor where an extra null byte could be added to the input. - Fixed a hang in SaltStack when using php-fpm 8.1.11. - Fixed mysqli_query warnings being shown despite using silenced error mode. - Fixed a NULL pointer dereference when serializing a SOAP response call.

Exploit probability Not scored
Published January 11, 2023
Required by Not available
Last source change May 2, 2025

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 apache2-mod_php8
SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 php8
SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 php8-embed
SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 php8-fastcgi
SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 php8-fpm
SUSE:Linux Enterprise Module for Web and Scripting 15 SP4 php8-test
openSUSE:Leap 15.4 apache2-mod_php8
openSUSE:Leap 15.4 php8
openSUSE:Leap 15.4 php8-embed
openSUSE:Leap 15.4 php8-fastcgi
openSUSE:Leap 15.4 php8-fpm
openSUSE:Leap 15.4 php8-test

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2023:0074-1

This update for php8 fixes the following issues: - Updated to version 8.0.27: - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string (bsc#1206958). Non-security fixes: - Fixed a NULL pointer dereference with -w/-s options. - Fixed a crash in Generator when interrupted during argument evaluation with extra named params. - Fixed a crash in Generator when memory limit was exceeded during initialization. - Fixed a memory leak in Generator when interrupted during argument evaluation. - Fixed an issue in the DateTimeZone constructor where an extra null byte could be added to the input. - Fixed a hang in SaltStack when using php-fpm 8.1.11. - Fixed mysqli_query warnings being shown despite using silenced error mode. - Fixed a NULL pointer dereference when serializing a SOAP response call.

View original source

05 / REFERENCES

Further evidence