tocsin

Debian/php8.2: medium 6.5

php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard name whose literal characters are togeth

Action: Upgrade php8.2 to 8.2.34-1~deb12u1 or later.

Affected

introducedfixedlast affected
08.2.34-1~deb12u1-

Fixed versions

8.2.34-1~deb12u1

Sources

published · modified · JSON