p PatchFirst

GHSA-qvgg-r6rq-vwfx

GHSA-qvgg-r6rq-vwfx · datadog/dd-trace Circumvents open_basedir INI directive

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

datadog/dd-trace versions 0.30.0 prior to 0.30.2 are affected by a security and stability issue outlined in PR [#579](https://github.com/DataDog/dd-trace-php/pull/579). This pull request ensures that the ddtrace.request_init_hook remains bound by the open_basedir INI directive, effectively addressing potential vulnerabilities related to open_basedir restrictions. The update introduces a sandboxing mechanism to isolate the request init hook from errors or exceptions during execution, enhancing the library's stability and preventing adverse impacts on the main script.

Correctif disponible

Publication
Mise à jour

Pile logicielle: php

Produits et versions concernés

  • datadog/dd-trace Packagist

    Versions du logiciel
    • 0.30.0
    • 0.30.1
    Plages de versions concernées
    • ECOSYSTEM: ≥ 0.30.0, < 0.30.2

    Mettez à jour vers 0.30.2

Sources originales

Vérifiez votre serveur →