简体中文(ZH-CN) English(EN) 繁体中文(ZH-TW) 日本語(JA) 한국어(KO) Melayu(MS) Français(FR) Deutsch(DE)
How to fix php vulnerability without upgrading PHP version
九夜
九夜 2017-09-06 17:33:44
0
1
1379

【1】PHP 'xml_utf8_encode' function integer overflow vulnerability (CVE-2016-4344)

【2】PHP 'php_filter_encode_url' function integer overflow vulnerability (CVE-2016-4345)

【3】PHP 'str_pad' function integer overflow vulnerability (CVE-2016-4346)

etc.

九夜
九夜

reply all (1)
ringa_lee
ringa_lee2017-09-07 09:28:10 1 floor

In response to your problems, the official has released corresponding patches.
It is recommended that you go to the official website of PHP to download the corresponding patch.


http://php.net/ChangeLog-5.php
https://bugs.php.net/72520
http://php.net/ChangeLog-7.php
http://git.php.net/?p=php-src.git;a=commit;h=81406c0c1d45f75fcc7972ed974d2597abb0b9e9



Like+0
Add Reply
  • reply How to use these patches after downloading them? I've never done this before, so I don't know where to start. Could you help me clarify my doubts?
    九夜 author 2017-09-08 14:33:32
Popular Topics
More>
Popular Articles
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template
About us Disclaimer Sitemap
php.cn：Public welfare online PHP training，Help PHP learners grow quickly！