File _patchinfo of Package patchinfo.27342
<patchinfo incident="27342">
<issue tracker="bnc" id="1206958">VUL-0: CVE-2022-31631: php53,php7,php72,php74,php8,php5: Due to an integer overflow PDO:quote() may return unquoted string</issue>
<issue tracker="cve" id="2022-31631"/>
<packager>pgajdos</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for php8</summary>
<description>This update for php8 fixes the following issues:
- Updated to version 8.0.27:
- CVE-2022-31631: Fixed an issue where PDO::quote would return an
unquoted string (bsc#1206958).
Non-security fixes:
- Fixed a NULL pointer dereference with -w/-s options.
- Fixed a crash in Generator when interrupted during argument
evaluation with extra named params.
- Fixed a crash in Generator when memory limit was exceeded during
initialization.
- Fixed a memory leak in Generator when interrupted during argument
evaluation.
- Fixed an issue in the DateTimeZone constructor where an extra null
byte could be added to the input.
- Fixed a hang in SaltStack when using php-fpm 8.1.11.
- Fixed mysqli_query warnings being shown despite using silenced
error mode.
- Fixed a NULL pointer dereference when serializing a SOAP response
call.
</description>
</patchinfo>