[IT-SecNots] [SECURITY] [DSA 5179-1] php7.4 security update

[Moritz Muehlenhoff <jmm AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5179-1                   security AT debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
July 08, 2022                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : php7.4
CVE ID         : CVE-2022-31625 CVE-2022-31626

Charles Fol discovered two security issues in PHP, a widely-used open
source general purpose scripting language which could result an denial of
service or potentially the execution of arbitrary code:

CVE-2022-31625

    Incorrect memory handling in the pg_query_params() function.

CVE-2022-31626

    A buffer overflow in the mysqld extension.

For the stable distribution (bullseye), these problems have been fixed in
version 7.4.30-1+deb11u1.

We recommend that you upgrade your php7.4 packages.

For the detailed security status of php7.4 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/php7.4

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=I6lU
-----END PGP SIGNATURE-----