tocsin

Debian/php-gettext: critical 9.8

Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.

Action: Upgrade php-gettext to 1.0.12-1 or later.

Affected

introducedfixedlast affected
01.0.12-1-

Fixed versions

1.0.12-1

Sources

published · modified · JSON