[ubuntu/jammy-updates] php8.1 8.1.2-1ubuntu2.23 (Accepted)

[Ubuntu Archive Robot]

php8.1 (8.1.2-1ubuntu2.23) jammy-security; urgency=medium

  * SECURITY UPDATE: Heap buffer overflow in array_merge()
    - debian/patches/CVE-2025-14178.patch: check number of elements in
      ext/standard/array.c
    - CVE-2025-14178
  * SECURITY UPDATE: NULL pointer dereference in PDO quoting
    - debian/patches/CVE-2025-14180.patch: fix null pointer dereference in
      ext/pdo/pdo_sql_parser.re
    - CVE-2025-14180

Date: 2026-01-07 12:01:20.039870+00:00
Changed-By: Nishit Majithia <nishit.majithia at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/php8.1/8.1.2-1ubuntu2.23
-------------- next part --------------
Sorry, changesfile not available.