diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2024-04-12 19:08:59 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2024-04-13 13:30:41 +0200 |
| commit | 47084e3f2fe27127cb3cfd24bbfc23befa35417f (patch) | |
| tree | d633bf8527a143c0c3fdffb5ce6b381b7ed2c446 /patches/source/less/less.url | |
| parent | 971e161e46946c2fdd7ff8d84d3433ed812d685d (diff) | |
| download | current-47084e3f2fe27127cb3cfd24bbfc23befa35417f.tar.gz current-47084e3f2fe27127cb3cfd24bbfc23befa35417f.tar.xz | |
Fri Apr 12 19:08:59 UTC 202420240412190859_15.0
extra/php81/php81-8.1.28-x86_64-1_slack15.0.txz: Upgraded.
This update fixes security issues:
Command injection via array-ish $command parameter of proc_open.
__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix.
Password_verify can erroneously return true, opening ATO risk.
For more information, see:
https://www.php.net/ChangeLog-8.php#8.1.28
https://www.cve.org/CVERecord?id=CVE-2024-1874
https://www.cve.org/CVERecord?id=CVE-2024-2756
https://www.cve.org/CVERecord?id=CVE-2024-3096
(* Security fix *)
Diffstat (limited to 'patches/source/less/less.url')
0 files changed, 0 insertions, 0 deletions