Поиск уязвимостей

ALT-PU-2024-18408: package `php8.2-soap` update to version 8.2.18-alt1

ALT-PU-2024-18310: package `php8.1-soap` update to version 8.1.28-alt1

ALT-PU-2024-18045: package `php8.1-soap` update to version 8.1.28-alt1

ALT-PU-2024-18035: package `php8.2-soap` update to version 8.2.18-alt1

ALT-PU-2024-6566: package `php8.1` update to version 8.1.28-alt1

ALT-PU-2024-6501: package `php8.2` update to version 8.2.18-alt1

ALT-PU-2024-6496: package `php8.1` update to version 8.1.28-alt1

ALT-PU-2024-6444: package `php8.2` update to version 8.2.18-alt1

ALT-PU-2024-18156: package `php8.3-soap` update to version 8.3.6-alt1

ALT-PU-2024-6442: package `php8.3` update to version 8.3.6-alt1

In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.

In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.

In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.

Command injection via array-ish $command parameter of proc_open()

In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before ...

In PHP  version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.

In PHP  version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.

In PHP  version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.

PHP function password_verify can erroneously return true when argument contains NUL

In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before ...