Software 42495 Published by

Gabriel Caruso has announced the release of PHP 8.0.28 with three security updates.



php-8.0.28

- Core:
. Fixed bug #81744 (Password_verify() always return true with some hash). (CVE-2023-0567). (Tim Düsterhus)
. Fixed bug #81746 (1-byte array overrun in common path resolve code). (CVE-2023-0568). (Niels Dossche)

- SAPI:
. Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662) (Jakub Zelenka)



Release php-8.0.28 · php/php-src