[Secure-testing-commits] r20975 - data/CVE

Henri Salo fgeek-guest at alioth.debian.org
Sat Jan 19 09:26:45 UTC 2013


Author: fgeek-guest
Date: 2013-01-19 09:26:45 +0000 (Sat, 19 Jan 2013)
New Revision: 20975

Modified:
   data/CVE/list
Log:
CVE-2012-6113 php issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-01-19 06:58:45 UTC (rev 20974)
+++ data/CVE/list	2013-01-19 09:26:45 UTC (rev 20975)
@@ -3537,8 +3537,13 @@
 	RESERVED
 CVE-2012-6114
 	RESERVED
-CVE-2012-6113
+CVE-2012-6113 [PHP openssl_encrypt memory disclosure]
 	RESERVED
+	TODO: check
+	NOTE: Introduced in http://git.php.net/?p=php-src.git;a=commitdiff;h=095cbc48a8f0090f3b0abc6155f2b61943c9eafb
+	NOTE: Fixed in 5.3.14 http://git.php.net/?p=php-src.git;a=commitdiff;h=270a406ac94b5fc5cc9ef59fc61e3b4b95648a3e
+	NOTE: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1099793
+	NOTE: https://bugs.php.net/bug.php?id=61413
 CVE-2012-6112
 	RESERVED
 	NOTE: http://www.tinymce.com/develop/changelog/?type=phpspell




More information about the Secure-testing-commits mailing list