it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Moritz Muehlenhoff <jmm AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 5277-1] php7.4 security update
- Date: Sun, 13 Nov 2022 18:52:43 +0000
- Authentication-results: mail.piratenpartei.de; dkim=none; dmarc=none; spf=none (mail.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 2001:41b8:202:deb:216:36ff:fe40:4002) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"
- List-archive: https://lists.debian.org/msgid-search/Y3E8+0l0MNKu6SCi AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From:Date :Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=P2Gw55Wr6ttLynX0JhwSa1auUHo/dFFgPl/tliA9RT0=; b=uF Gci9P0+FfbMfaOmE7TTurdZvLCmLRTZ6EJ6QA2rG2M+stl5AKFTz2EQMdrq3ekGo5kY1gXgN0JWkw 6BcllPzWZrqG3a/VIvjLxqiPTWiQlICrSeY44xp6+dvx5WTQVVNMDL8CUaXCOu+vYV8E4DQxFe/kc m8H7f7np5/nhYtVX4X41g6hc8wgI2MvEsSNVE6dvNTDppI3CkWVkTaLPsbC6yvEz3f9LAflWQTZh2 XyrM7wszZS0YRWJs+DHyH+eBPhGVVKRFFZsCSh2XlxTozLfZdlBPftFDFXRReLp5wGOdSLOh52yTP BLj7qU9tdELWf1YetHRkfhqxoqB0OTtA==;
- Old-return-path: <jmm AT seger.debian.org>
- Priority: urgent
- Resent-date: Sun, 13 Nov 2022 18:53:11 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <ZQCXzrpyPuG.A.ohE.X0TcjB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5277-1 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
November 13, 2022 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : php7.4
CVE ID : CVE-2022-31630 CVE-2022-37454 CVE-2022-31629 CVE-2022-31628
Multiple security issues were discovered in PHP, a widely-used open
source general purpose scripting language which could result an denial
of service, information disclosure, insecure cooking handling or
potentially the execution of arbitrary code.
For the stable distribution (bullseye), these problems have been fixed in
version 7.4.33-1+deb11u1.
We recommend that you upgrade your php7.4 packages.
For the detailed security status of php7.4 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/php7.4
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmNxOm0ACgkQEMKTtsN8
TjYZ7xAAspdPvtpc+Sq8l2NsZlKUew50JSsTb0UbwAYH0G8prnYzEQK898syuP2e
aZsbPHec/aqClyvFfrhnWsrGyWUAwHtQIHmG0lIPXAZuCMawbud95MY3sFY7lidK
+6UvTFxBCx3hbYaZE/Xz+3Zsx6qX3L+eSQSEdVKy4lV4CbZtVBM3iVlg+lB+EXZq
FjdZZsoDSbK5K8pYRD2HQBMa7RMFau/zYc7ZZpcwRjcojUvrLB+2xQHitcCZLxNt
J4IpNqKr3BmDfIe+h9mzY9q22sdTC5H29u9p+s2XssYgNfkS9h6IxBfYbYQAwxZL
fBIDJ3inbmAnHz/OBTEcmt/OufdaBUt0V4otddaZHT/6nhaY/0Hhdd9f5F40ohKG
R4R4nv5zFKVLB9/fONxPjKARj7X81PsBhB7GFzKbrdQtpK+tTek/sxDJTW5TSvN+
tvRtAPBTxzEbvzl+duscIZr7eVlIqfd/tLuspnc/iaeOxBWup1ekx8Eu5voHcC3S
FnLJCFeSdqfA9/qiG8Gj/FYA4a8/S2D7mWH+xQlT1aWVU33b9bgJkzdg1WYj79Dv
6K9Yg64T22CIy0w8EOpQXSJcKlILd6gP6cdz3P5WfCt/51VhBQAJb/+qd4w98c5L
Ahoet75dSWVIbynja1asPTMZ1RhJvIWpYud3LmfOAO8Q/NFGYtc=
=MMQt
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 5277-1] php7.4 security update, Moritz Muehlenhoff, 13.11.2022
Archiv bereitgestellt durch MHonArc 2.6.24.