tocsin

Alpine/php85: medium 6.5

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised a

Action: Upgrade php85 to 8.5.11-r0 or later.

Affected

introducedfixedlast affected
08.5.11-r0-

Fixed versions

8.5.11-r0

Sources

published · modified · JSON