Alpine/php7: critical 9.8
exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closin
Action: Upgrade php7 to 7.2.8-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.2.8-r0 | - |
Fixed versions
| 7.2.8-r0 |
Sources
published · modified · JSON