Debian alert DLA-4177-1 (libphp-adodb)

From:
             
 
Adrian Bunk <bunk@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4177-1] libphp-adodb security update
Date:
             
 
Sat, 24 May 2025 23:55:00 +0300
Message-ID:
             
 
<aDIyJGsoD9LrqMuQ@localhost>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4177-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                          Adrian Bunk
May 24, 2025                                  https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : libphp-adodb
Version        : 5.20.19-1+deb11u2
CVE ID         : CVE-2025-46337
Debian Bug     : 1104548

SQL injection in the PostgreSQL driver has been fixed in the ADOdb
database access library for PHP.

For Debian 11 bullseye, this problem has been fixed in version
5.20.19-1+deb11u2.

We recommend that you upgrade your libphp-adodb packages.

For the detailed security status of libphp-adodb please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libphp-adodb

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=Tck9
-----END PGP SIGNATURE-----