[Secure-testing-commits] r40995 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Tue Apr 19 14:20:50 UTC 2016
Author: carnil
Date: 2016-04-19 14:20:50 +0000 (Tue, 19 Apr 2016)
New Revision: 40995
Modified:
data/CVE/list
Log:
Some php5 issues fixed in unstable
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-04-19 13:09:25 UTC (rev 40994)
+++ data/CVE/list 2016-04-19 14:20:50 UTC (rev 40995)
@@ -240,28 +240,28 @@
NOTE: http://www.openwall.com/lists/oss-security/2016/04/09/6
CVE-2016-XXXX [Integer overflow in php_raw_url_encode]
- php7.0 7.0.5-1
- - php5 <unfixed>
+ - php5 5.6.20+dfsg-1
NOTE: Fixed in 7.0.5, 5.6.20, 5.5.34
NOTE: https://bugs.php.net/bug.php?id=71798
NOTE: https://git.php.net/?p=php-src.git;a=commit;h=95433e8e339dbb6b5d5541473c1661db6ba2c451
NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/04/11/7
CVE-2016-XXXX [Format string vulnerability in php_snmp_error()]
- php7.0 7.0.5-1
- - php5 <unfixed>
+ - php5 5.6.20+dfsg-1
NOTE: Fixed in 7.0.5, 5.6.20, 5.5.34
NOTE: https://bugs.php.net/bug.php?id=71704
NOTE: https://git.php.net/?p=php-src.git;a=commit;h=6e25966544fb1d2f3d7596e060ce9c9269bbdcf8
NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/04/11/7
CVE-2016-XXXX [Invalid memory write in phar on filename containing \0 inside name]
- php7.0 7.0.5-1
- - php5 <unfixed>
+ - php5 5.6.20+dfsg-1
NOTE: Fixed in 7.0.5, 5.6.20, 5.5.34
NOTE: https://bugs.php.net/bug.php?id=71860
NOTE: https://gist.github.com/smalyshev/80b5c2909832872f2ba2
NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/04/11/7
CVE-2016-XXXX [Negative size parameter in memcpy]
- php7.0 7.0.5-1
- - php5 <unfixed>
+ - php5 5.6.20+dfsg-1
NOTE: Fixed in 7.0.5, 5.6.20, 5.5.34
NOTE: https://bugs.php.net/bug.php?id=71906
NOTE: https://gist.github.com/smalyshev/d8355c96a657cc5dba70
@@ -385,7 +385,7 @@
TODO: check
CVE-2016-XXXX [Buffer over-write in finfo_open with malformed magic file]
- php7.0 7.0.5-1
- - php5 <unfixed>
+ - php5 5.6.20+dfsg-1
- file 1:5.24-1
NOTE: http://bugs.gw.com/view.php?id=522
NOTE: https://bugs.php.net/bug.php?id=71527
More information about the Secure-testing-commits
mailing list