USN-7530-2: Security vulnerability
USN-7530-1 fixed a vulnerability in ADOdb. This update provides the corresponding updates for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. Original advisory details: It was discovered that ADOdb incorrectly handled SQL input. A remote attacker could use this issue to execute arbitrary SQL commands.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libphp-adodbto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ADOdbto a version that resolves this vulnerability.Patch USN-7530-1 - Upgrade
Upgrade
ADOdbto a version that resolves this vulnerability.Patch USN-7530-2
Frequently Asked Questions
Who is exposed to this issue?
Systems running the affected ADOdb packages on Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, or Ubuntu 24.04 LTS are covered by this update.
What could an attacker do if they exploit the vulnerability?
A remote attacker could execute arbitrary SQL commands due to incorrect handling of SQL input in ADOdb.