[ubuntu/bionic-updates] php7.2 7.2.24-0ubuntu0.18.04.10 (Accepted)

[Ubuntu Archive Robot]

php7.2 (7.2.24-0ubuntu0.18.04.10) bionic-security; urgency=medium

  * SECURITY UPDATE: Out of bounds read/write
    - debian/patches/CVE-2021-21703.patch: The main change is to
      store scoreboard procs directly to the variable sized
      array rather than indirectly through the pointer in
      sapi/fpm/fpm/fpm_children.c, sapi/fpm/fpm/fpm_request.c,
      sapi/fpm/fpm/fpm_scoreboard.c, sapi/fpm/fpm/fpm_scoreboard.h,
      sapi/fpm/fpm/fpm_status.c, sapi/fpm/fpm/fpm_worker_pool.c.
    - CVE-2021-21703

Date: 2021-10-26 15:39:16.403991+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/php7.2/7.2.24-0ubuntu0.18.04.10
-------------- next part --------------
Sorry, changesfile not available.