ELA-775-1 php7.0 security update

multiple vulnerabilities

2023-01-24
Packagephp7.0
Version7.0.33-0+deb9u13 (stretch)
Related CVEs CVE-2021-21707 CVE-2022-31625 CVE-2022-31626 CVE-2022-31628 CVE-2022-31629


Multiple security issues were discovered in PHP, a widely-used open source general purpose scripting language which could result in denial of service, information disclosure, insecure cookie handling or potentially the execution of arbitrary code.



For Debian 9 stretch, these problems have been fixed in version 7.0.33-0+deb9u13.

We recommend that you upgrade your php7.0 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.