[SECURITY] [DLA 2794-1] php7.0 security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2794-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Sylvain Beucler
October 27, 2021 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : php7.0
Version : 7.0.33-0+deb9u12
CVE ID : CVE-2021-21703
Debian Bug : 997003
An out-of-bounds read and write flaw was discovered in the PHP-FPM code,
which could result in escalation of privileges from local unprivileged
user to the root user.
For Debian 9 stretch, this problem has been fixed in version
7.0.33-0+deb9u12.
We recommend that you upgrade your php7.0 packages.
For the detailed security status of php7.0 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/php7.0
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=jgHy
-----END PGP SIGNATURE-----
Reply to: