1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 5179-1] php7.4 security update

    From Moritz Muehlenhoff@21:1/5 to All on Fri Jul 8 21:30:01 2022
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-5179-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff
    July 08, 2022 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : php7.4
    CVE ID : CVE-2022-31625 CVE-2022-31626

    Charles Fol discovered two security issues in PHP, a widely-used open
    source general purpose scripting language which could result an denial of service or potentially the execution of arbitrary code:

    CVE-2022-31625

    Incorrect memory handling in the pg_query_params() function.

    CVE-2022-31626

    A buffer overflow in the mysqld extension.

    For the stable distribution (bullseye), these problems have been fixed in version 7.4.30-1+deb11u1.

    We recommend that you upgrade your php7.4 packages.

    For the detailed security status of php7.4 please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/php7.4

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmLIhOUACgkQEMKTtsN8 TjZfBBAAwCko5ME/Zmw2mY5JwE8q5WjHRlI6n1alkDS9i3IDfCkWa5jdYRuHc2ma JrlRM7mg5/fBJHGQcbreajjXfSOumbVNyerfdKDw1+Z9Y07O8rl56d18hZDo1FtZ CmBmz63V+441JiO17FEi3EpnlH7Uj3WQHYo5lfFn16+CnYHkEtwmIzGZ0qX+zc8r UXLMQ8jR2bWB3+CcMU1nDH2whCI+htwJ1u5TEBhkw1/+a7qmXh/rxP3k1wiAT0FP lhdlOQwCwCuvCp6sWd5y5dS3Rl10XOlEzlMRisMulsWFPW3fgtF1zSGrliBfgZro D2dDVT93LEaE4OFBucRTcNKIyp/zr5ni92mIOFoFv/ex2635biHo8RzPETpj+/TC wbmQt6oIMvYf/kFw9HL856qheJZbDSxT4pSxlkeBzEhwQslqr9uljdD0CKCKYNQ8 Tf4tbHmfIaGpptc+Di1YuPjCJKB/cO1/7c6s6GQT1E/vZFPMJonDWnv6wPcBKVr0 /WqCET3F4VtFW5K9vG3s9paUz26ghAV7fOcMDebR1sryCLOo7hrC59o2TsC+xXra 7gUIvYfC7IGYt+Z2gnYGUM9PFnCUEpahaZLaYxL79CRXocjmKDcJZ6rwzlU7Uewm 5dDplQjXrPsxi2ctG2d8h0laylrxRhDephgBRGkVDjsBm3+w3aw=
    =I6lU
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)