HCE2-SA-2024-0165
An update for php is now available for HCE 2.0
Moderate
HCE 2.0
Security Fix(es):
In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.
(CVE-2024-3096)
Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim_x27;s browser which is treated as a __Host- or __Secure- cookie by PHP applications.
(CVE-2024-2756)
HCE 2.0
php-8.0.30-3.hce2.aarch64.rpm
php-bcmath-8.0.30-3.hce2.aarch64.rpm
php-cli-8.0.30-3.hce2.aarch64.rpm
php-common-8.0.30-3.hce2.aarch64.rpm
php-dba-8.0.30-3.hce2.aarch64.rpm
php-dbg-8.0.30-3.hce2.aarch64.rpm
php-devel-8.0.30-3.hce2.aarch64.rpm
php-embedded-8.0.30-3.hce2.aarch64.rpm
php-enchant-8.0.30-3.hce2.aarch64.rpm
php-ffi-8.0.30-3.hce2.aarch64.rpm
php-fpm-8.0.30-3.hce2.aarch64.rpm
php-gd-8.0.30-3.hce2.aarch64.rpm
php-gmp-8.0.30-3.hce2.aarch64.rpm
php-help-8.0.30-3.hce2.aarch64.rpm
php-intl-8.0.30-3.hce2.aarch64.rpm
php-ldap-8.0.30-3.hce2.aarch64.rpm
php-mbstring-8.0.30-3.hce2.aarch64.rpm
php-mysqlnd-8.0.30-3.hce2.aarch64.rpm
php-odbc-8.0.30-3.hce2.aarch64.rpm
php-opcache-8.0.30-3.hce2.aarch64.rpm
php-pdo-8.0.30-3.hce2.aarch64.rpm
php-pgsql-8.0.30-3.hce2.aarch64.rpm
php-process-8.0.30-3.hce2.aarch64.rpm
php-snmp-8.0.30-3.hce2.aarch64.rpm
php-soap-8.0.30-3.hce2.aarch64.rpm
php-tidy-8.0.30-3.hce2.aarch64.rpm
php-xml-8.0.30-3.hce2.aarch64.rpm
php-8.0.30-3.hce2.x86_64.rpm
php-bcmath-8.0.30-3.hce2.x86_64.rpm
php-cli-8.0.30-3.hce2.x86_64.rpm
php-common-8.0.30-3.hce2.x86_64.rpm
php-dba-8.0.30-3.hce2.x86_64.rpm
php-dbg-8.0.30-3.hce2.x86_64.rpm
php-devel-8.0.30-3.hce2.x86_64.rpm
php-embedded-8.0.30-3.hce2.x86_64.rpm
php-enchant-8.0.30-3.hce2.x86_64.rpm
php-ffi-8.0.30-3.hce2.x86_64.rpm
php-fpm-8.0.30-3.hce2.x86_64.rpm
php-gd-8.0.30-3.hce2.x86_64.rpm
php-gmp-8.0.30-3.hce2.x86_64.rpm
php-help-8.0.30-3.hce2.x86_64.rpm
php-intl-8.0.30-3.hce2.x86_64.rpm
php-ldap-8.0.30-3.hce2.x86_64.rpm
php-mbstring-8.0.30-3.hce2.x86_64.rpm
php-mysqlnd-8.0.30-3.hce2.x86_64.rpm
php-odbc-8.0.30-3.hce2.x86_64.rpm
php-opcache-8.0.30-3.hce2.x86_64.rpm
php-pdo-8.0.30-3.hce2.x86_64.rpm
php-pgsql-8.0.30-3.hce2.x86_64.rpm
php-process-8.0.30-3.hce2.x86_64.rpm
php-snmp-8.0.30-3.hce2.x86_64.rpm
php-soap-8.0.30-3.hce2.x86_64.rpm
php-tidy-8.0.30-3.hce2.x86_64.rpm
php-xml-8.0.30-3.hce2.x86_64.rpm