-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2794-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 27, 2021 https://wiki.debian.org/LTS - -------------------------------------------------------------------------
Package : php7.0 Version : 7.0.33-0+deb9u12 CVE ID : CVE-2021-21703 Debian Bug : 997003 An out-of-bounds read and write flaw was discovered in the PHP-FPM code, which could result in escalation of privileges from local unprivileged user to the root user. For Debian 9 stretch, this problem has been fixed in version 7.0.33-0+deb9u12. We recommend that you upgrade your php7.0 packages. For the detailed security status of php7.0 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/php7.0 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE1vEOfV7HXWKqBieIDTl9HeUlXjAFAmF5LdoACgkQDTl9HeUl XjB0zg/8DjOW1TMljqJdXr0q56ZPsAMajHHk1bawjY74ppSEjlNX4Fg/wUwe/NMM mksqcKRAZDZ42pBt4S4tBQCd2nBzPTkSKVU1ZgsYeIjtBHcdzo8KTV/pNEAUe/ZU zGi81OviALt3iENpBbOPxzIJSnA4beYG51hLomxGHFGoEAXwwuU4ZgIKmtEvg7El RNyz8U75YyHo0g40ar8JQj2EHdjbr62mB3z2f0T6IMzFLPPuzrZqYMgA/ljacthY R2nP908EKFy3HVeOxVqBEuXxeU93X/GqAY8E/bJLpzbD/r5Cz7MO+uTMjCzQ4xa+ 3HVo1whjPRT/loYrzlBjHAMhQASQ5L4rVy1TkIffLFEEIGXnHe1iFlzbtC7kG/QZ Jp4oikGYZgClrMOqNl9VkQGWhaQk0ikAfk8OZjrLvh/mJ6ymg06JJPAZLExLNkRO gPOwTqBehGZSCJZSpVdMfdKGGEQIRb2P6IDvP1c/XZM3G9FBCp31A3MlAgz60gWI dtmYC+NgC44O1V1rcw8bnl9IjNPwvqbLg62hkSt68/nrAFwh7mlFeNdpVIoDxGQL TMMjuzeCYAqbIiOrd6yZLlTEHcNsfHEKnwxFDAJeNtJpXiJ2Nd+s39oUhKCeVZQY OMvpepRJyjbXnKEgsL6TZ9bBJurVTWytPsZ+XSXdXd0VXdXW19Q= =jgHy -----END PGP SIGNATURE-----
