UbuntuUpdates.org

Package "php8.0"

Name: php8.0

Description:

server-side, HTML-embedded scripting language (metapackage)

Latest version: 8.0.8-1ubuntu0.1
Release: impish (21.10)
Level: security
Repository: main
Homepage: http://www.php.net/

Links


Download "php8.0"


Other versions of "php8.0" in Impish

Repository Area Version
base universe 8.0.8-1build1
security universe 8.0.8-1ubuntu0.1
updates universe 8.0.8-1ubuntu0.1
updates main 8.0.8-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 8.0.8-1ubuntu0.1 2021-10-28 00:06:31 UTC

  php8.0 (8.0.8-1ubuntu0.1) impish-security; urgency=medium

  * SECURITY UPDATE: Out of bounds read/write
    - debian/patches/CVE-2021-21703.patch: The main change is to
      store scoreboard procs directly to the variable sized
      array rather than indirectly through the pointer in
      sapi/fpm/fpm/fpm_children.c, sapi/fpm/fpm/fpm_request.c,
      sapi/fpm/fpm/fpm_scoreboard.c, sapi/fpm/fpm/fpm_scoreboard.h,
      sapi/fpm/fpm/fpm_status.c, sapi/fpm/fpm/fpm_worker_pool.c.
    - CVE-2021-21703

 -- Leonidas Da Silva Barbosa <email address hidden> Tue, 26 Oct 2021 08:42:42 -0300

CVE-2021-21703 In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process r



About   -   Send Feedback to @ubuntu_updates