tocsin

Debian/php7.4: low 3.6

In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which c

Action: Upgrade php7.4 to 7.4.9-1 or later.

Affected

introducedfixedlast affected
07.4.9-1-

Fixed versions

7.4.9-1

Sources

published · modified · JSON