In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-embeddedUpgrade php-jsonUpgrade php-ffiUpgrade php-enchantUpgrade php-soapUpgrade php-gdUpgrade apcu-panelUpgrade php-pecl-rrdUpgrade php-dbaUpgrade php-processUpgrade php-pecl-zipUpgrade php-mbstringUpgrade php-intlUpgrade php-xmlrpcUpgrade php-gmpUpgrade libzipUpgrade libzip-toolsUpgrade php-pecl-apcu-develUpgrade php-snmpUpgrade php-pearUpgrade php-opcacheUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-xmlUpgrade libzip-develUpgrade php-ldapUpgrade phpUpgrade php-commonUpgrade php-pdoUpgrade php-odbcUpgrade php-pgsqlUpgrade php-mysqlndUpgrade php-develUpgrade php-cliUpgrade php-bcmathUpgrade php-pecl-apcuUpgrade php-dbg | May 13, 2022 | Oct 2, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Oct 2, 2020 |
| Amazon_linux | — | Upgrade php73Upgrade php72 | Jul 17, 2021 | Oct 2, 2020 |
| Centos_linux | — | Upgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pdoUpgrade php-opcacheUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade libzipUpgrade php-gdUpgrade php-develUpgrade php-pecl-zip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-xmlrpcUpgrade php-mbstringUpgrade libzip-develUpgrade php-xmlUpgrade php-enchantUpgrade php-cliUpgrade php-debugsourceUpgrade php-processUpgrade php-snmpUpgrade php-pecl-rrdUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade php-fpmUpgrade php-mysqlndUpgrade php-pearUpgrade php-embedded-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-debuginfoUpgrade libzip-debuginfoUpgrade php-ffiUpgrade php-json-debuginfoUpgrade php-soapUpgrade php-xmlrpc-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbaUpgrade php-bcmathUpgrade php-pecl-zip-debuginfoUpgrade php-pgsql-debuginfoUpgrade apcu-panelUpgrade php-ldapUpgrade libzip-debugsourceUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-jsonUpgrade php-fpm-debuginfoUpgrade php-common-debuginfoUpgrade php-cli-debuginfoUpgrade php-gmp-debuginfoUpgrade php-dba-debuginfoUpgrade php-commonUpgrade libzip-tools-debuginfoUpgrade php-pdo-debuginfoUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-gmpUpgrade php-enchant-debuginfoUpgrade php-pecl-zipUpgrade php-xml-debuginfoUpgrade libzip-toolsUpgrade php-odbcUpgrade php-process-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-intlUpgrade php-ffi-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-develUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade phpUpgrade php-odbc-debuginfo | Nov 10, 2021 | Oct 2, 2020 |
| Debian | — | Upgrade php7.4 | Feb 19, 2021 | Oct 2, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Dec 29, 2020 | Oct 2, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pdoUpgrade php-commonUpgrade php-ldapUpgrade phpUpgrade php-odbcUpgrade php-cliUpgrade php-recodeUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-processUpgrade php-gdUpgrade php-xmlUpgrade php-soap | Nov 3, 2020 | Oct 2, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.11-11.4.28.0.1.82.2 on Solaris 11.4Upgrade web/php-73 to version 7.3.23-11.4.28.0.1.82.2 on Solaris 11.4 | Jan 19, 2021 | Oct 2, 2020 |
| Oracle_linux | — | Upgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-commonUpgrade php-ffiUpgrade php-snmpUpgrade php-odbcUpgrade php-dbgUpgrade libzip-develUpgrade php-cliUpgrade php-xmlUpgrade php-pecl-apcuUpgrade php-mbstringUpgrade php-opcacheUpgrade php-intlUpgrade apcu-panelUpgrade libzip-toolsUpgrade php-soapUpgrade php-pgsqlUpgrade php-pecl-zipUpgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-dbaUpgrade phpUpgrade php-develUpgrade php-bcmathUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-ldapUpgrade php-pearUpgrade php-gdUpgrade php-processUpgrade php-jsonUpgrade php-embeddedUpgrade php-pdoUpgrade php-gmpUpgrade libzip | Nov 17, 2021 | May 15, 2020 |
| Php | — | Upgrade to PHP version 7.4.11Upgrade to PHP version 7.3.23Upgrade to PHP version 7.2.34 | Oct 20, 2020 | Oct 2, 2020 |
| Redhat_linux | — | Upgrade php-pecl-rrdUpgrade libzip-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-xmlUpgrade php-xml-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-opcache-debuginfoUpgrade php-ffiUpgrade php-fpm-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mysqlndUpgrade php-pgsqlUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade libzip-debugsourceUpgrade php-process-debuginfoUpgrade php-soap-debuginfoUpgrade php-mbstringUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-develUpgrade php-pdoUpgrade libzipUpgrade php-embedded-debuginfoUpgrade php-ffi-debuginfoUpgrade php-gmpUpgrade phpUpgrade php-jsonUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-apcuUpgrade php-enchant-debuginfoUpgrade php-gdNo solution existsUpgrade php-pecl-xdebug-debuginfoUpgrade php-ldapUpgrade php-fpmUpgrade php-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-embeddedUpgrade php-pdo-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-json-debuginfoUpgrade php-soapUpgrade php-gd-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debuginfoUpgrade php-pearUpgrade php-gmp-debuginfoUpgrade php-processUpgrade php-xmlrpcUpgrade php-common-debuginfoUpgrade php-cli-debuginfoUpgrade php-debuginfoUpgrade php-dbaUpgrade php-pecl-rrd-debuginfoUpgrade php-odbcUpgrade php-ldap-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-intlUpgrade libzip-develUpgrade libzip-toolsUpgrade php-cliUpgrade php-snmpUpgrade php-dbg-debuginfoUpgrade php-intl-debuginfoUpgrade apcu-panel | Nov 10, 2021 | Oct 2, 2020 |
| Rocky_linux | — | Upgrade php-jsonUpgrade php-xmlUpgrade php-pecl-rrdUpgrade libzip-develUpgrade php-pecl-zip-debugsourceUpgrade php-fpmUpgrade php-gmpUpgrade php-xmlrpc-debuginfoUpgrade php-mysqlndUpgrade php-mbstringUpgrade php-cliUpgrade php-pdoUpgrade php-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-processUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade php-xmlrpcUpgrade php-intl-debuginfoUpgrade php-embedded-debuginfoUpgrade php-dbg-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-gdUpgrade php-enchant-debuginfoUpgrade php-enchantUpgrade php-pecl-rrd-debuginfoUpgrade php-snmpUpgrade php-snmp-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade phpUpgrade php-fpm-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-debuginfoUpgrade php-odbcUpgrade php-pgsql-debuginfoUpgrade php-pgsqlUpgrade php-debugsourceUpgrade php-json-debuginfoUpgrade php-gd-debuginfoUpgrade php-ffi-debuginfoUpgrade libzip-toolsUpgrade php-process-debuginfoUpgrade php-opcacheUpgrade php-gmp-debuginfoUpgrade php-dbaUpgrade php-pecl-xdebug-debugsourceUpgrade php-intlUpgrade php-embeddedUpgrade php-ldap-debuginfoUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-mbstring-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pecl-apcuUpgrade libzip-debugsourceUpgrade php-cli-debuginfoUpgrade php-soap-debuginfoUpgrade php-ffiUpgrade php-common-debuginfoUpgrade php-xml-debuginfoUpgrade libzipUpgrade libzip-debuginfoUpgrade php-soapUpgrade php-pecl-rrd-debugsourceUpgrade php-pdo-debuginfoUpgrade php-dba-debuginfoUpgrade php-ldapUpgrade php-common | Mar 12, 2024 | Oct 2, 2020 |
| Suse | — | Upgrade php7-xmlwriterUpgrade php74-gdUpgrade php7-fpmUpgrade php72-odbcUpgrade php7-intlUpgrade php7-pgsqlUpgrade php72-sodiumUpgrade php7-posixUpgrade php74-fastcgiUpgrade php72-tokenizerUpgrade php7-sysvmsgUpgrade php74-ftpUpgrade php74-pcntlUpgrade php72-zlibUpgrade php74-socketsUpgrade php72-fastcgiUpgrade php7-tokenizerUpgrade php72-gmpUpgrade php7-ctypeUpgrade php7-pdoUpgrade php74-opcacheUpgrade php72-readlineUpgrade php7-curlUpgrade php72-mysqlUpgrade php72-posixUpgrade php72-domUpgrade php7-socketsUpgrade apache2-mod_php7Upgrade php74-xmlrpcUpgrade php74-develUpgrade php7-testUpgrade php72-xmlrpcUpgrade php74-enchantUpgrade php72-pgsqlUpgrade php74-iconvUpgrade php7-zipUpgrade php74-sqliteUpgrade php72-pspellUpgrade php7-sqliteUpgrade php7-bcmathUpgrade php7-zlibUpgrade php7-opcacheUpgrade php74-snmpUpgrade php74-bz2Upgrade php72-xmlreaderUpgrade php72-fpmUpgrade php7-mysqlUpgrade php72-socketsUpgrade php7-wddxUpgrade php74-ctypeUpgrade php7-sysvsemUpgrade php72-bz2Upgrade php74-exifUpgrade php74-fpmUpgrade php74-sysvmsgUpgrade php7-snmpUpgrade php74-xmlwriterUpgrade php74-readlineUpgrade php74-tokenizerUpgrade php72Upgrade php72-ldapUpgrade php7-embedUpgrade php72-enchantUpgrade php72-xmlwriterUpgrade php7-pharUpgrade php72-bcmathUpgrade php72-sysvmsgUpgrade php7-ftpUpgrade php7-iconvUpgrade php7-pearUpgrade php7-fastcgiUpgrade php72-curlUpgrade php74-zipUpgrade php74-shmopUpgrade php74-gettextUpgrade php72-soapUpgrade php72-opcacheUpgrade php74-xslUpgrade php74-pdoUpgrade php7-gettextUpgrade php74-sysvshmUpgrade php7-enchantUpgrade php7-exifUpgrade php74-mysqlUpgrade php72-ctypeUpgrade php7-soapUpgrade php72-imapUpgrade php74-odbcUpgrade php74-curlUpgrade php72-shmopUpgrade php72-jsonUpgrade php72-snmpUpgrade php74-jsonUpgrade php74-sysvsemUpgrade php72-pharUpgrade php74-pgsqlUpgrade php72-tidyUpgrade php7-readlineUpgrade php7-pcntlUpgrade php74-ldapUpgrade php7-opensslUpgrade php72-xslUpgrade php7-pear-archive_tarUpgrade php72-gdUpgrade php74-calendarUpgrade php74-gmpUpgrade php74-fileinfoUpgrade php7-develUpgrade php74-sodiumUpgrade php74-pharUpgrade php7-xslUpgrade php7-mbstringUpgrade php7-tidyUpgrade php72-opensslUpgrade php7Upgrade php7-ldapUpgrade php74-dbaUpgrade php72-sysvsemUpgrade php72-sysvshmUpgrade php74-opensslUpgrade php7-sodiumUpgrade php7-dbaUpgrade php72-calendarUpgrade php7-sysvshmUpgrade php7-fileinfoUpgrade php72-intlUpgrade php72-iconvUpgrade php72-dbaUpgrade php72-zipUpgrade php72-develUpgrade php74Upgrade php74-zlibUpgrade php7-calendarUpgrade php72-sqliteUpgrade php7-bz2Upgrade php72-pear-archive_tarUpgrade php7-odbcUpgrade php7-domUpgrade php72-ftpUpgrade php7-xmlrpcUpgrade php7-gmpUpgrade php72-pdoUpgrade php74-mbstringUpgrade apache2-mod_php74Upgrade php72-mbstringUpgrade php72-fileinfoUpgrade apache2-mod_php72Upgrade php7-firebirdUpgrade php74-soapUpgrade php72-gettextUpgrade php7-jsonUpgrade php74-intlUpgrade php7-xmlreaderUpgrade php74-domUpgrade php72-wddxUpgrade php7-shmopUpgrade php74-xmlreaderUpgrade php72-pcntlUpgrade php74-tidyUpgrade php72-exifUpgrade php74-posixUpgrade php72-pearUpgrade php74-bcmathUpgrade php7-gd | Feb 7, 2021 | Oct 2, 2020 |
| Ubuntu | — | Upgrade libapache2-mod-php7.4Upgrade php7.4-curlUpgrade php7.2-fpmUpgrade php7.4-cliUpgrade php7.2-cliUpgrade php7.4-cgiUpgrade php7.2-curlUpgrade php7.2-cgiUpgrade php7.4-fpmUpgrade libapache2-mod-php7.2 | Mar 9, 2021 | Oct 2, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub