In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-snmpUpgrade php-pecl-xdebugUpgrade php-xmlUpgrade php-mysqlndUpgrade libzip-develUpgrade php-develUpgrade php-ldapUpgrade php-bcmathUpgrade php-pgsqlUpgrade phpUpgrade php-commonUpgrade php-fpmUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-pdoUpgrade php-cliUpgrade php-opcacheUpgrade php-pearUpgrade php-ffiUpgrade php-processUpgrade php-gmpUpgrade php-embeddedUpgrade php-intlUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade apcu-panelUpgrade php-jsonUpgrade libzipUpgrade php-gdUpgrade php-enchantUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-dba | May 13, 2022 | Oct 2, 2020 |
| Alpine Linux | — | Upgrade php7 | Oct 1, 2024 | Oct 2, 2020 |
| Amazon_linux | — | Upgrade php72Upgrade php73 | Jul 17, 2021 | Oct 2, 2020 |
| Centos_linux | — | Upgrade php-pecl-rrd-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-pearUpgrade php-xmlrpcUpgrade php-mysqlnd-debuginfoUpgrade php-gd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-rrdUpgrade libzip-develUpgrade php-processUpgrade php-snmpUpgrade php-gdUpgrade php-develUpgrade php-fpmUpgrade php-opcache-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-embeddedUpgrade php-pecl-apcu-debuginfoUpgrade php-debugsourceUpgrade php-pdoUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-dbg-debuginfoUpgrade libzipUpgrade php-enchantUpgrade php-mbstringUpgrade php-cliUpgrade libzip-debuginfoUpgrade php-soapUpgrade php-mbstring-debuginfoUpgrade php-gmpUpgrade php-xml-debuginfoUpgrade php-odbc-debuginfoUpgrade php-ldap-debuginfoUpgrade php-debuginfoUpgrade phpUpgrade libzip-toolsUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debuginfoUpgrade php-odbcUpgrade php-json-debuginfoUpgrade php-dbgUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-soap-debuginfoUpgrade php-ldapUpgrade php-jsonUpgrade php-fpm-debuginfoUpgrade php-common-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-debugsourceUpgrade libzip-tools-debuginfoUpgrade apcu-panelUpgrade php-pecl-zipUpgrade php-gmp-debuginfoUpgrade php-enchant-debuginfoUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-intlUpgrade php-ffi-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-process-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-ffiUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbaUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-bcmathUpgrade php-xmlrpc-debuginfo | Nov 10, 2021 | Oct 2, 2020 |
| Debian | — | Upgrade php7.4 | Feb 19, 2021 | Oct 2, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Dec 29, 2020 | Oct 2, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-commonUpgrade php-ldapUpgrade phpUpgrade php-odbcUpgrade php-pdoUpgrade php-xmlUpgrade php-recodeUpgrade php-cliUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-processUpgrade php-gdUpgrade php-soap | Nov 3, 2020 | Oct 2, 2020 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.23-11.4.28.0.1.82.2 on Solaris 11.4Upgrade web/php-74 to version 7.4.11-11.4.28.0.1.82.2 on Solaris 11.4 | Jan 19, 2021 | Oct 2, 2020 |
| Oracle_linux | — | Upgrade libzip-develUpgrade php-cliUpgrade php-intlUpgrade php-opcacheUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade libzip-toolsUpgrade php-xmlUpgrade php-commonUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-mbstringUpgrade php-ffiUpgrade php-snmpUpgrade php-odbcUpgrade apcu-panelUpgrade php-fpmUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade php-dbaUpgrade libzipUpgrade php-pearUpgrade php-ldapUpgrade php-develUpgrade php-embeddedUpgrade php-gdUpgrade php-pdoUpgrade php-enchantUpgrade php-processUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-gmpUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade phpUpgrade php-bcmath | Nov 17, 2021 | May 15, 2020 |
| Php | — | Upgrade to PHP version 7.2.34Upgrade to PHP version 7.4.11Upgrade to PHP version 7.3.23 | Oct 20, 2020 | Oct 2, 2020 |
| Redhat_linux | — | Upgrade php-intlUpgrade php-pecl-xdebug-debugsourceUpgrade php-snmpUpgrade libzip-debugsourceUpgrade php-commonUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-xmlUpgrade libzip-develUpgrade php-mysqlnd-debuginfoUpgrade php-odbcUpgrade php-opcacheUpgrade php-intl-debuginfoUpgrade php-cli-debuginfoUpgrade php-xmlrpcUpgrade php-ldap-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dbaUpgrade php-processUpgrade php-pecl-apcu-debuginfoUpgrade php-process-debuginfoUpgrade libzip-toolsUpgrade php-soap-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-dba-debuginfoUpgrade php-pgsqlUpgrade php-pecl-rrd-debuginfoUpgrade php-mbstringUpgrade php-debuginfoUpgrade apcu-panelUpgrade php-pecl-rrdUpgrade php-mysqlndUpgrade php-common-debuginfoUpgrade php-snmp-debuginfoUpgrade php-ffiUpgrade php-xml-debuginfoUpgrade php-opcache-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-debuginfoUpgrade php-cliUpgrade php-pdo-debuginfoUpgrade php-json-debuginfoUpgrade php-embedded-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchant-debuginfoUpgrade php-fpmUpgrade php-pecl-apcuUpgrade php-gdUpgrade php-ffi-debuginfoUpgrade php-odbc-debuginfoUpgrade php-soapUpgrade php-embeddedUpgrade php-mbstring-debuginfoUpgrade php-pecl-zipUpgrade php-ldapNo solution existsUpgrade php-bcmathUpgrade php-develUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-debugsourceUpgrade php-gmp-debuginfoUpgrade php-enchantUpgrade libzip-tools-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-debugsourceUpgrade php-pearUpgrade php-pecl-apcu-develUpgrade php-pecl-zip-debuginfoUpgrade phpUpgrade php-gmpUpgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade libzip | Nov 10, 2021 | Oct 2, 2020 |
| Rocky_linux | — | Upgrade php-bcmath-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-ldap-debuginfoUpgrade php-bcmathUpgrade php-embeddedUpgrade php-mbstring-debuginfoUpgrade php-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dba-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-debuginfoUpgrade php-commonUpgrade php-json-debuginfoUpgrade php-gd-debuginfoUpgrade php-odbc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-soap-debuginfoUpgrade php-cli-debuginfoUpgrade php-dbgUpgrade phpUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-ffiUpgrade php-intlUpgrade php-opcacheUpgrade php-pecl-apcuUpgrade libzip-debugsourceUpgrade php-soapUpgrade libzipUpgrade php-pecl-apcu-debugsourceUpgrade php-common-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-xml-debuginfoUpgrade libzip-toolsUpgrade php-pdo-debuginfoUpgrade php-odbcUpgrade php-pecl-rrd-debugsourceUpgrade php-ldapUpgrade php-mbstringUpgrade php-pdoUpgrade libzip-develUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade php-jsonUpgrade php-pecl-zip-debugsourceUpgrade php-mysqlndUpgrade php-gmpUpgrade php-enchantUpgrade php-embedded-debuginfoUpgrade php-cliUpgrade php-xmlUpgrade php-fpmUpgrade php-pecl-rrd-debuginfoUpgrade php-snmpUpgrade php-pecl-zipUpgrade php-develUpgrade php-snmp-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-intl-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-xmlrpcUpgrade php-processUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebugUpgrade php-opcache-debuginfoUpgrade php-pecl-rrdUpgrade php-mysqlnd-debuginfo | Mar 12, 2024 | Oct 2, 2020 |
| Suse | — | Upgrade php74-pdoUpgrade php74-pcntlUpgrade php74-jsonUpgrade php72-opcacheUpgrade php7-mysqlUpgrade php74-tokenizerUpgrade php72-sysvmsgUpgrade php74-exifUpgrade php7-snmpUpgrade php7-embedUpgrade php7-xmlwriterUpgrade php74-opcacheUpgrade php72-ldapUpgrade php74-curlUpgrade php74-fpmUpgrade php7-sysvsemUpgrade php7-enchantUpgrade php74-gdUpgrade php72Upgrade php7-wddxUpgrade php7-ftpUpgrade php7-sqliteUpgrade php7-zlibUpgrade php72-imapUpgrade php7-fastcgiUpgrade php7-pearUpgrade php7-soapUpgrade php7-exifUpgrade php72-ctypeUpgrade php72-soapUpgrade php72-curlUpgrade php72-jsonUpgrade php7-opcacheUpgrade php7-zipUpgrade php72-xmlwriterUpgrade php74-ftpUpgrade php72-mysqlUpgrade php72-shmopUpgrade php7-bcmathUpgrade php74-zipUpgrade php74-sysvshmUpgrade php72-enchantUpgrade php72-bcmathUpgrade php7-pharUpgrade php72-sodiumUpgrade php74-odbcUpgrade php74-xmlwriterUpgrade php72-fpmUpgrade php74-socketsUpgrade php72-readlineUpgrade php74-fastcgiUpgrade php7-tokenizerUpgrade php72-gmpUpgrade php7-posixUpgrade php74-xslUpgrade php74-shmopUpgrade php7-curlUpgrade php7-sysvmsgUpgrade php7-iconvUpgrade php7-ctypeUpgrade php74-readlineUpgrade php74-sysvmsgUpgrade php7-intlUpgrade php72-domUpgrade php72-posixUpgrade php72-snmpUpgrade php74-mysqlUpgrade php72-odbcUpgrade php72-xmlreaderUpgrade php74-enchantUpgrade php72-pspellUpgrade php7-pdoUpgrade php74-ctypeUpgrade php74-snmpUpgrade php7-testUpgrade php74-xmlrpcUpgrade php7-socketsUpgrade apache2-mod_php7Upgrade php74-bz2Upgrade php74-iconvUpgrade php72-pgsqlUpgrade php72-xmlrpcUpgrade php72-socketsUpgrade php74-develUpgrade php7-gettextUpgrade php74-gettextUpgrade php72-tokenizerUpgrade php72-zlibUpgrade php7-pgsqlUpgrade php72-fastcgiUpgrade php74-sqliteUpgrade php7-fpmUpgrade php72-bz2Upgrade php7-mbstringUpgrade php7-tidyUpgrade php72-exifUpgrade php7-xmlreaderUpgrade php72-wddxUpgrade php74-intlUpgrade php72-pdoUpgrade apache2-mod_php74Upgrade php72-fileinfoUpgrade php72-xslUpgrade php74-soapUpgrade php72-pear-archive_tarUpgrade php74-xmlreaderUpgrade php74-dbaUpgrade php72-pcntlUpgrade php72-opensslUpgrade php72-sysvshmUpgrade php72-sysvsemUpgrade php7-shmopUpgrade php7-ldapUpgrade php7Upgrade php74-posixUpgrade php72-dbaUpgrade php72-intlUpgrade php74-zlibUpgrade php72-calendarUpgrade php7-sodiumUpgrade php7-odbcUpgrade apache2-mod_php72Upgrade php74-ldapUpgrade php7-pcntlUpgrade php72-gettextUpgrade php72-pharUpgrade php74-mbstringUpgrade php74-pgsqlUpgrade php74-calendarUpgrade php7-jsonUpgrade php7-domUpgrade php7-readlineUpgrade php7-gdUpgrade php72-tidyUpgrade php7-develUpgrade php7-xslUpgrade php74-fileinfoUpgrade php7-sysvshmUpgrade php7-bz2Upgrade php7-fileinfoUpgrade php74-sodiumUpgrade php7-opensslUpgrade php74-pharUpgrade php72-mbstringUpgrade php74Upgrade php72-iconvUpgrade php7-calendarUpgrade php74-tidyUpgrade php7-dbaUpgrade php72-zipUpgrade php72-sqliteUpgrade php74-opensslUpgrade php72-develUpgrade php74-sysvsemUpgrade php72-pearUpgrade php7-firebirdUpgrade php7-xmlrpcUpgrade php74-gmpUpgrade php74-bcmathUpgrade php72-gdUpgrade php72-ftpUpgrade php7-pear-archive_tarUpgrade php74-domUpgrade php7-gmp | Feb 7, 2021 | Oct 2, 2020 |
| Ubuntu | — | Upgrade php7.4-fpmUpgrade php7.2-cgiUpgrade php7.2-curlUpgrade libapache2-mod-php7.2Upgrade libapache2-mod-php7.4Upgrade php7.4-curlUpgrade php7.4-cliUpgrade php7.2-fpmUpgrade php7.4-cgiUpgrade php7.2-cli | Mar 9, 2021 | Oct 2, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub