[Secure-testing-commits] r43015 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Jul 5 13:10:40 UTC 2016


Author: carnil
Date: 2016-07-05 13:10:40 +0000 (Tue, 05 Jul 2016)
New Revision: 43015

Modified:
   data/CVE/list
Log:
Update status for CVE-2016-5771/php7.0, not affected

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-07-05 13:10:11 UTC (rev 43014)
+++ data/CVE/list	2016-07-05 13:10:40 UTC (rev 43015)
@@ -978,12 +978,11 @@
 	NOTE: Fixed in 5.5.37, 5.6.23, 7.0.8
 CVE-2016-5771 [Use After Free Vulnerability in PHP's GC algorithm and unserialize]
 	RESERVED
-	- php7.0 <undetermined>
+	- php7.0 <not-affected> (Does not affect PHP 7.x)
 	- php5 5.6.23+dfsg-1
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=72433
 	NOTE: http://git.php.net/?p=php-src.git;a=commitdiff;h=a44c89e8af7c2410f4bfc5e097be2a5d0639a60c
-	NOTE: Fixed in 5.5.37, 5.6.23, 7.0.8
-	TODO: check if really affects 7.x, CVE assignment claims not
+	NOTE: Fixed in 5.5.37, 5.6.23
 CVE-2016-5770 [int/size_t confusion in SplFileObject::fread]
 	RESERVED
 	- php7.0 7.0.8-1




More information about the Secure-testing-commits mailing list