[Secure-testing-commits] r38476 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Dec 22 11:45:00 UTC 2015


Author: carnil
Date: 2015-12-22 11:45:00 +0000 (Tue, 22 Dec 2015)
New Revision: 38476

Modified:
   data/CVE/list
Log:
Add new issue in php7.0, does not affect php5, already fixed in 7.0.1

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-22 11:33:36 UTC (rev 38475)
+++ data/CVE/list	2015-12-22 11:45:00 UTC (rev 38476)
@@ -1,3 +1,7 @@
+CVE-2015-XXXX [Use after free in PHP Collator::sortWithSortKeys function]
+	- php7.0 7.0.1-1
+	NOTE: https://bugs.php.net/bug.php?id=71020
+	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/12/22/4
 CVE-2015-XXXX [Insecure use of temporary files]
 	- stalin <unfixed> (bug #808730)
 CVE-2015-8614 [no bounds checking on the output buffer in conv_jistoeuc, conv_euctojis, conv_sjistoeuc]




More information about the Secure-testing-commits mailing list