Branch c9f2 update bulletin.

Package php8.1 updated to version 8.1.14-alt1 for branch c9f2 in task 313151.

Published: 2025-02-13
Modified: 2025-02-13

CVE-2022-31631

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

References:

https://bugs.php.net/bug.php?id=81740
https://bugs.php.net/bug.php?id=81740
https://security.netapp.com/advisory/ntap-20230223-0007/

Version: 2.1.0

Branch c9f2 update on 2023-01-24

ALT-BU-2023-2329-1

ALT-PU-2023-1112-1

Closed vulnerabilities

CVE-2022-31631