ALASPHP8.1-2023-001

Amazon Linux 2 Security Advisory: ALASPHP8.1-2023-001
Advisory Release Date: 2023-08-04 20:34 Pacific
Advisory Updated Date: 2023-09-13 19:31 Pacific
Severity: Important
Issue Overview:

In PHP versions prior to 7.4.33, 8.0.25 and 8.2.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information. (CVE-2022-31630)

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface. (CVE-2022-37454)


Affected Packages:

php


Note:

This advisory is applicable to Amazon Linux 2 - Php8.1 Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
Run yum update php to update your system.

New Packages:
aarch64:
    php-8.1.12-1.amzn2.aarch64
    php-cli-8.1.12-1.amzn2.aarch64
    php-dbg-8.1.12-1.amzn2.aarch64
    php-fpm-8.1.12-1.amzn2.aarch64
    php-common-8.1.12-1.amzn2.aarch64
    php-devel-8.1.12-1.amzn2.aarch64
    php-opcache-8.1.12-1.amzn2.aarch64
    php-ldap-8.1.12-1.amzn2.aarch64
    php-pdo-8.1.12-1.amzn2.aarch64
    php-mysqlnd-8.1.12-1.amzn2.aarch64
    php-pgsql-8.1.12-1.amzn2.aarch64
    php-process-8.1.12-1.amzn2.aarch64
    php-odbc-8.1.12-1.amzn2.aarch64
    php-soap-8.1.12-1.amzn2.aarch64
    php-snmp-8.1.12-1.amzn2.aarch64
    php-xml-8.1.12-1.amzn2.aarch64
    php-mbstring-8.1.12-1.amzn2.aarch64
    php-gd-8.1.12-1.amzn2.aarch64
    php-bcmath-8.1.12-1.amzn2.aarch64
    php-gmp-8.1.12-1.amzn2.aarch64
    php-dba-8.1.12-1.amzn2.aarch64
    php-embedded-8.1.12-1.amzn2.aarch64
    php-pspell-8.1.12-1.amzn2.aarch64
    php-intl-8.1.12-1.amzn2.aarch64
    php-enchant-8.1.12-1.amzn2.aarch64
    php-sodium-8.1.12-1.amzn2.aarch64
    php-debuginfo-8.1.12-1.amzn2.aarch64

src:
    php-8.1.12-1.amzn2.src

x86_64:
    php-8.1.12-1.amzn2.x86_64
    php-cli-8.1.12-1.amzn2.x86_64
    php-dbg-8.1.12-1.amzn2.x86_64
    php-fpm-8.1.12-1.amzn2.x86_64
    php-common-8.1.12-1.amzn2.x86_64
    php-devel-8.1.12-1.amzn2.x86_64
    php-opcache-8.1.12-1.amzn2.x86_64
    php-ldap-8.1.12-1.amzn2.x86_64
    php-pdo-8.1.12-1.amzn2.x86_64
    php-mysqlnd-8.1.12-1.amzn2.x86_64
    php-pgsql-8.1.12-1.amzn2.x86_64
    php-process-8.1.12-1.amzn2.x86_64
    php-odbc-8.1.12-1.amzn2.x86_64
    php-soap-8.1.12-1.amzn2.x86_64
    php-snmp-8.1.12-1.amzn2.x86_64
    php-xml-8.1.12-1.amzn2.x86_64
    php-mbstring-8.1.12-1.amzn2.x86_64
    php-gd-8.1.12-1.amzn2.x86_64
    php-bcmath-8.1.12-1.amzn2.x86_64
    php-gmp-8.1.12-1.amzn2.x86_64
    php-dba-8.1.12-1.amzn2.x86_64
    php-embedded-8.1.12-1.amzn2.x86_64
    php-pspell-8.1.12-1.amzn2.x86_64
    php-intl-8.1.12-1.amzn2.x86_64
    php-enchant-8.1.12-1.amzn2.x86_64
    php-sodium-8.1.12-1.amzn2.x86_64
    php-debuginfo-8.1.12-1.amzn2.x86_64

Additional References

Red Hat: CVE-2022-31630, CVE-2022-37454

Mitre: CVE-2022-31630, CVE-2022-37454