Zum Inhalt springen.
Sympa Menü

it-securitynotifies - [IT-SecNots] [SECURITY] [DSA 5082-1] php7.4 security update

it-securitynotifies AT lists.piratenpartei.de

Betreff: Sicherheitsankündigungen

Listenarchiv

[IT-SecNots] [SECURITY] [DSA 5082-1] php7.4 security update


Chronologisch Thread 
  • From: Moritz Muehlenhoff <jmm AT debian.org>
  • To: debian-security-announce AT lists.debian.org
  • Subject: [IT-SecNots] [SECURITY] [DSA 5082-1] php7.4 security update
  • Date: Fri, 18 Feb 2022 19:09:20 +0000
  • List-archive: https://lists.debian.org/msgid-search/20220218190920.GC19601 AT seger.debian.org
  • List-id: <debian-security-announce.lists.debian.org>
  • List-url: <http://lists.debian.org/debian-security-announce/>
  • Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From: Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=3pEw8g+eIHt0nbmOIeX5NDtadaKTQQt3+z3PDhy2liQ=; b=KU Y1aQK9LZ6rbV3+mo7u8jrAHFzZDiy2B75xP0BQEfpbPKeVovUH9yENKeK9jS7I5SJHbpS0r0NYuPH e5v4vGI7LataSpmCjAGRf7XoeIYAd1PJXkY7yiPMQpyO9rz32OsctmrXeYx+5GGW+owla162PCoAQ WagvpT/+xdDtHCQsEB7ULCaEWf2wUQ5DIofPEYYLeHW7gKPq5WNCW7ohsQmC7HiCVSb1/HIlXfA6V Z5niv8OwjJOy0iTn0ojYdTl+W9E0fnUg+zY4DlceZwLrhHHmiLuK79XTJBn4p+6R716WGk4omiQi0 xF50FM2babudR4qV9u1HrBSNYmnpQe0g==;
  • Old-return-path: <jmm AT seger.debian.org>
  • Priority: urgent
  • Resent-date: Fri, 18 Feb 2022 19:09:39 +0000 (UTC)
  • Resent-from: debian-security-announce AT lists.debian.org
  • Resent-message-id: <TpIINaQMMo.A.f3H.y7-DiB@bendel>
  • Resent-sender: debian-security-announce-request AT lists.debian.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5082-1 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
February 18, 2022 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : php7.4
CVE ID : CVE-2021-21707 CVE-2021-21708

Two security issues were found in PHP, a widely-used open source general
purpose scripting language which could result in information disclosure
or denial of service.

For the stable distribution (bullseye), these problems have been fixed in
version 7.4.28-1+deb11u1.

We recommend that you upgrade your php7.4 packages.

For the detailed security status of php7.4 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/php7.4

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=/o8M
-----END PGP SIGNATURE-----



  • [IT-SecNots] [SECURITY] [DSA 5082-1] php7.4 security update, Moritz Muehlenhoff, 18.02.2022

Archiv bereitgestellt durch MHonArc 2.6.24.

Seitenanfang