Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 42: FEDORA-2025-118f6569ff moderate: sql injection in php-adodb

fedora
Calendar Grey May 11, 2025
Dist Fedora Esm H88
Urgent notification regarding Fedora 42 concerning php-adodb with significant SQL injection vulnerability. Prompt measures strongly advised to safeguard database integrity.
5.22.9

Summary

ADOdb is an object oriented library written in PHP that abstracts database

operations for portability. It is modelled on Microsoft's ADO, but has many

improvements that make it unique (eg. pivot tables, Active Record support,

generating HTML for paging recordsets with next and previous links, cached

recordsets, HTML menu generation, etc).

ADOdb hides the differences between the different databases so you can easily

switch DBs without changing code.

Update Information:

5.22.9

Change Log

* Fri May 2 2025 Gwyn Ciesla - 5.22.9-1 - 5.22.9

References


[ 1 ] Bug #2363627 - CVE-2025-46337 php-adodb: SQL injection in ADOdb PostgreSQL driver pg_insert_id() method [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=2363627 [ 2 ] Bug #2363628 - CVE-2025-46337 php-adodb: SQL injection in ADOdb PostgreSQL driver pg_insert_id() method [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2363628 [ 3 ] Bug #2363629 - CVE-2025-46337 php-adodb: SQL injection in ADOdb PostgreSQL driver pg_insert_id() method [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2363629 [ 4 ] Bug #2363630 - CVE-2025-46337 php-adodb: SQL injection in ADOdb PostgreSQL driver pg_insert_id() method [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2363630

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-118f6569ff' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: php-adodb
Product: Fedora 42
Version: 5.22.9
Release: 1.fc42
Summary: Database abstraction layer for PHP

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here