Debian-LTS has issued an advisory today (February 6): https://www.debian.org/lts/security/2022/dla-2912 The issue is fixed upstream in 5.20.21. Mageia 8 is also affected.
Whiteboard: (none) => MGA8TOOStatus comment: (none) => Fixed upstream in 5.20.21
Looks good for assigning to MarcK, maintainer of this package.
Assignee: bugsquad => mageia
CC: (none) => mageiaWhiteboard: MGA8TOO => (none)Version: Cauldron => 8
patch added in mga8/9 src: - php-adodb-5.20.18-1.1.mga8
Status comment: Fixed upstream in 5.20.21 => (none)Assignee: mageia => qa-bugsCC: (none) => mageia
@Nico: why not update. Is it worth to do patching?! Pecl libs do not change that much. In most cases the new release has just the patch in it.
Assignee: qa-bugs => mageia
Updated php-adodb to fix a critical vulnerability: Security hotfix release addressing a critical vulnerability in PostgreSQL connections Additional fixes: - Fix usage of get_magic_* functions #619 #657 - Fix PHP warning in _rs2rs() function #679 - pdo: Fix Fatal error in _query() #666 - pdo: Fix undefined variable #678 - pgsql: Fix Fatal error in _close() method (PHP8) #666 - pgsql: fix deprecated function aliases (PHP8) #667 - text: fix Cannot pass parameter by reference #668 - Add support for persistent connections in PDO driver #650 - Connect to SQL Server database on a specified port. #624 - DSN database connection with password containing # fails #651 - Metacolumns returns wrong type for integer fields in Mysql 8 #642 - Uninitialized Variable access in mssqlnative ErrorNo() method #637 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3850 https://github.com/ADOdb/ADOdb/releases/tag/v5.20.21 Updated packages in core/updates_testing: ======================== php-adodb-5.20.21-1.mga8.noarch SRPM: php-adodb-5.20.21-1.mga8.src.rpm
Assignee: mageia => qa-bugs
MGA8-64 Plasma on Lenovo B50 in Dutch No installation issues. Ref bug 19307: I do not see any proof (strace or something that this library is actually used in the example. And # urpmq --whatrequires php-adodb php-adodb # urpmq --whatrequires-recursive php-adodb php-adodb I don't like spending time on a developer's library, and will OK it on clean install as we usually do with such libraries.
CC: (none) => herman.viaeneWhiteboard: (none) => MGA8-64-OK
Validating. Advisory in Comment 4.
Keywords: (none) => validated_updateCC: (none) => andrewsfarm, sysadmin-bugs
CC: (none) => davidwhodginsKeywords: (none) => advisory
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2022-0056.html
Status: NEW => RESOLVEDResolution: (none) => FIXED