-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 07 Dec 2024 23:44:42 +0100
Source: php7.4
Architecture: source
Version: 7.4.33-1+deb11u7
Distribution: bullseye-security
Urgency: high
Maintainer: Debian PHP Maintainers <team+pkg-php@tracker.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Closes: 1088688
Changes:
php7.4 (7.4.33-1+deb11u7) bullseye-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* Fix CVE-2024-8929: Partial content leak of the heap through heap buffer
over-read in mysqlnd. (Closes: #1088688)
* Fix CVE-2024-8932: Out-of-bound write in ldap_escape(). (Closes: #1088688)
* Fix CVE-2024-11233: Single byte overread with
convert.quoted-printable-decode filter. (Closes: #1088688)
* Fix CVE-2024-11234: Configuring a proxy in a stream context might allow
for CRLF injection in URIs. (Closes: #1088688)
* Fix CVE-2024-11236: Out-of-bound writes in in the firebird and dblib
quoters due integer overflow. (Closes: #1088688)
* Fix GHSA-4w77-75f9-2c8w: Heap-Use-After-Free in sapi_read_post_data()
Processing in CLI SAPI Interface.
Checksums-Sha1:
deb2d7919650d44668038cbbcb1bc47c8fff435f 5698 php7.4_7.4.33-1+deb11u7.dsc
4f3e3bea8415cfdaefedc1a475921c3ffa15b3d4 105156 php7.4_7.4.33-1+deb11u7.debian.tar.xz
56972e9bab2a908d3ed2e2d9c8d5021dc66775fb 35542 php7.4_7.4.33-1+deb11u7_amd64.buildinfo
Checksums-Sha256:
461678b0292f35a104a1a4c5e8cc60a8a97dedce34072fcd8af371a7b8091695 5698 php7.4_7.4.33-1+deb11u7.dsc
37d4c35da951235acc523345671b637fb69d3fc270bb353b846fecfc08611b14 105156 php7.4_7.4.33-1+deb11u7.debian.tar.xz
58b6ec17656d8fa0d572f2bdee7de74c8f1c4aed9a304cfd62f10736b79e8f26 35542 php7.4_7.4.33-1+deb11u7_amd64.buildinfo
Files:
01267419c8fee174d5092965e284162c 5698 php optional php7.4_7.4.33-1+deb11u7.dsc
bf82af06afb6ac0934543c1dd30d3e69 105156 php optional php7.4_7.4.33-1+deb11u7.debian.tar.xz
40e174d19265302a4d2fb79d1464e201 35542 php optional php7.4_7.4.33-1+deb11u7_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=KCk/
-----END PGP SIGNATURE-----
Attachment:
pgpk0PqQgulZp.pgp
Description: PGP signature