DSA-5277: -1 php7.4 -- security update
Published Nov 13, 2022
·Updated
Multiple security issues were discovered in PHP, a widely-used open source general purpose scripting language which could result in denial of service, information disclosure, insecure cookies handling or potentially the execution of arbitrary code.
Affected Software
2 affected components
debian/php7.4
debian/php7.4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
php7.4to a version that resolves this vulnerability.Patch DSA-5277-1
Event History
Nov 13, 2022
Advisory Published
12:00 AM
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
What kinds of impact are covered by this update?
The issues could lead to denial of service, information disclosure, insecure cookie handling, or potentially arbitrary code execution.
2
Which CVEs are associated with this advisory?
The advisory references CVE-2022-31630, CVE-2022-37454, and CVE-2022-31629.