tocsin

Alpine/php7: medium 5.4

In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of

Action: Upgrade php7 to 7.3.16-r0 or later.

Affected

introducedfixedlast affected
07.3.16-r0-

Fixed versions

7.3.16-r0

Sources

published · modified · JSON