USN-6053-1: PHP vulnerability
It was discovered that PHP incorrectly handled certain invalid Blowfish
password hashes. An invalid password hash could possibly allow applications to
accept any password as valid, contrary to expectations.
Source: USN-6053-1: PHP vulnerability