Ubuntu Security Notice USN-5818-1 ≈ Packet Storm

Roger Wilco Alertes 23 janvier 2023 Affichages : 25

Home ^[1] Files ^[2] News ^[3] &[SERVICES_TAB] Contact ^[4] Add New ^[5]

Ubuntu Security Notice USN-5818-1^[6]: Authored by Ubuntu ^[7] | Site security.ubuntu.com ^[8]; Ubuntu Security Notice 5818-1 - It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code.; systems | linux ^[9], ubuntu ^[10]; advisories | CVE-2022-31631 ^[11]; SHA-256 | 5e3f991b525cb556d7f98923b6dc146a9a8e1bee769113d7ded701c12dd365aa; Download ^[12] | Favorite ^[13] | View ^[14]

        ==========================================================================
Ubuntu Security Notice USN-5818-1
January 23, 2023
php7.2, php7.4, php8.1 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
PHP could be made do crash or execute arbitrary code if it received
a specially crafted input.
Software Description:
- php8.1: HTML-embedded scripting language interpreter
- php7.4: HTML-embedded scripting language interpreter
- php7.2: HTML-embedded scripting language interpreter
Details:
It was discovered that PHP incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or
execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.10:
libapache2-mod-php7.4           8.1.7-1ubuntu3.2
libapache2-mod-php8.0           8.1.7-1ubuntu3.2
libapache2-mod-php8.1           8.1.7-1ubuntu3.2
php8.1                          8.1.7-1ubuntu3.2
php8.1-cgi                      8.1.7-1ubuntu3.2
php8.1-cli                      8.1.7-1ubuntu3.2
php8.1-sqlite3                  8.1.7-1ubuntu3.2
Ubuntu 22.04 LTS:
libapache2-mod-php7.4           8.1.2-1ubuntu2.10
libapache2-mod-php8.0           8.1.2-1ubuntu2.10
libapache2-mod-php8.1           8.1.2-1ubuntu2.10
php8.1                          8.1.2-1ubuntu2.10
php8.1-cgi                      8.1.2-1ubuntu2.10
php8.1-cli                      8.1.2-1ubuntu2.10
php8.1-sqlite3                  8.1.2-1ubuntu2.10
Ubuntu 20.04 LTS:
libapache2-mod-php7.4           7.4.3-4ubuntu2.17
php7.4                          7.4.3-4ubuntu2.17
php7.4-cgi                      7.4.3-4ubuntu2.17
php7.4-cli                      7.4.3-4ubuntu2.17
php7.4-sqlite3                  7.4.3-4ubuntu2.17
Ubuntu 18.04 LTS:
libapache2-mod-php7.2           7.2.24-0ubuntu0.18.04.16
php7.2                          7.2.24-0ubuntu0.18.04.16
php7.2-cgi                      7.2.24-0ubuntu0.18.04.16
php7.2-cli                      7.2.24-0ubuntu0.18.04.16
php7.2-sqlite3                  7.2.24-0ubuntu0.18.04.16
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5818-1
CVE-2022-31631
Package Information:
https://launchpad.net/ubuntu/+source/php8.1/8.1.7-1ubuntu3.2
https://launchpad.net/ubuntu/+source/php8.1/8.1.2-1ubuntu2.10
https://launchpad.net/ubuntu/+source/php7.4/7.4.3-4ubuntu2.17
https://launchpad.net/ubuntu/+source/php7.2/7.2.24-0ubuntu0.18.04.16