tocsin

Alpine/php84: critical 9.8

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Action: Upgrade php84 to 8.4.24-r0 or later.

Affected

introducedfixedlast affected
08.4.24-r0-

Fixed versions

8.4.24-r0

Sources

published · modified · JSON