Ubuntu alert USN-7530-1 (libphp-adodb)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7530-1] ADOdb vulnerability
Date:
             
 
Fri, 30 May 2025 15:21:05 +0000
Message-ID:
             
 
<E1uL1Xd-0008PU-9b@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7530-1
May 29, 2025

libphp-adodb vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04
- Ubuntu 24.10

Summary:

ADOdb could be made to crash or run programs if it received
specially crafted input.

Software Description:
- libphp-adodb: PHP database abstraction layer library

Details:

It was discovered that ADOdb incorrectly handled SQL input. A remote
attacker could use this issue to execute arbitrary SQL commands.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  libphp-adodb                    5.22.8-0.1ubuntu0.1

Ubuntu 24.10
  libphp-adodb                    5.22.7-0.1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7530-1
  CVE-2025-46337

Package Information:
  https://launchpad.net/ubuntu/+source/libphp-adodb/5.22.8-...
  https://launchpad.net/ubuntu/+source/libphp-adodb/5.22.7-...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmg4a8oACgkQcpJm3tlz
hgFMUxAAmrE2sbrn6cQHZwZaBY6D/Lf85s8qBnsrYAeEpUdbZOsY0j7vL8V1v1/5
9eXzJm70JCXL3+m+yDjApFOWzOzOAyxrX3jzL3Cc8+m/A6421J3dc+ho7vjlL9Az
VYRfPiKOBN8cfe6FfHJjt5bLeNvFIT2J2+6x43ARV6LmnIHSAUklQpYVwxINsFf0
KQDgiFCtsX5cCcaUEa+VEspR0KlaQENhDu1pLx/iL5kWJR/dxpgHRY+wEXP38PYJ
7FonEFAPEg4QkW9E0f4qNB8G4Hn1SPqMNtqnhFtT00QxHV7LJzUdkOTwnnjgjOqy
Vhj6sd7nXa9x1hSKpL9SLiWJ1nkGzLYCOy5Y0D2wjmNMs0O0gkSoISGAtFbiB5JP
35NbsOHMXvHl0HlFHMoSJImFOAIPoH1ald+jQ40DxnN6tD5icudMcYEN232TaL5z
LLekm9lZjkhNfh4adoVT1MtXKuVYs+aIV9+w2MJe9nMPJ6EEawcHkwcBvAZ7xg6i
PeSIA28wpf16gHNZZ3DSy/Xq1cD7R5d2Cyj6rq6CD1z6K8CHjAhM4jVO4aiJKv9B
whaDKvHjwb7RxUb+2vZAV7ZLEc2XLz7k7DV/VblRSeatgT+S+0vMyhqMolQp27mu
Nzozj2wdCHlQwpiUon2Nplbbq2IJ1P6pJU56ZQH1SxbcftYwUu8=
=bEDG
-----END PGP SIGNATURE-----


Attachment: None (type=text/plain)