ALT Linux Team

Package php8.0 update in sisyphus on 2023-01-09

ALT-PU-2023-1021-1

Package php8.0 updated to version 8.0.27-alt1 for branch sisyphus in task 313025.

Closed vulnerabilities

Published: 2025-02-13
Modified: 2025-02-13

CVE-2022-31631

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top