[ubuntu/jammy-updates] php8.1 8.1.2-1ubuntu2.1 (Accepted)
Ubuntu Archive Robot
ubuntu-archive-robot at lists.canonical.com
Wed Jun 15 11:58:52 UTC 2022
php8.1 (8.1.2-1ubuntu2.1) jammy-security; urgency=medium
* SECURITY UPDATE: RCE via Uninitialized array in pg_query_params()
- debian/patches/CVE-2022-31625.patch: don't free parameters which
haven't initialized yet in ext/pgsql/pgsql.c,
ext/pgsql/tests/bug81720.phpt.
- CVE-2022-31625
* SECURITY UPDATE: RCE via mysqlnd/pdo password buffer overflow
- debian/patches/CVE-20022-31626.patch: properly calculate size in
ext/mysqlnd/mysqlnd_wireprotocol.c.
- CVE-2022-31626
Date: 2022-06-13 18:54:08.750741+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/php8.1/8.1.2-1ubuntu2.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the jammy-changes
mailing list