Debian/php8.2: medium 5.9
The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default), is vulnerable to the Marvin Attack unless it is used with an OpenSSL version that i
Action: Upgrade php8.2 to 8.2.18-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.2.18-1 | - |
Fixed versions
| 8.2.18-1 |
Sources
published · modified · JSON