This bug was fixed in the package php8.1 - 8.1.2-1ubuntu2.17 --------------- php8.1 (8.1.2-1ubuntu2.17) jammy-security; urgency=medium
* SECURITY UPDATE: Heap buffer-overflow - debian/patches/CVE-2022-4900.patch: prevent potential buffer overflow for large valye of php_cli_server_workers_max in sapi/cli/php_cli_server.c. - CVE-2022-4900 * SECURITY UPDATE: Cookie by pass - debian/patches/CVE-2024-2756.patch: adds more mangling rules in main/php_variable.c. - CVE-2024-2756 * SECURITY UPDATE: Account take over risk - debian/patches/CVE-2024-3096.patch: disallow null character in bcrypt password in ext/standard/password.c, ext/standard/tests/password_bcrypt_errors.phpt. - CVE-2024-3096 -- Leonidas Da Silva Barbosa <leo.barb...@canonical.com> Wed, 01 May 2024 07:10:07 -0300 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2057576 Title: php-fpm sometimes SIGSEGVs (signal 11) when running fpm_get_status To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs