[Secure-testing-commits] r40429 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-03-17 07:35:09 +0000 (Thu, 17 Mar 2016)
New Revision: 40429

Modified:
   data/CVE/list
Log:
Add CVE-2016-3185/php7.0, seems to not affect 5.6, double check

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-03-17 06:21:52 UTC (rev 40428)
+++ data/CVE/list	2016-03-17 07:35:09 UTC (rev 40429)
@@ -420,8 +420,13 @@
 	RESERVED
 CVE-2016-3186
 	RESERVED
-CVE-2016-3185
+CVE-2016-3185 [Type Confusion Vulnerability - SOAP / make_http_soap_request()]
 	RESERVED
+	- php7.0 7.0.4-1
+	NOTE: https://bugs.php.net/bug.php?id=71610
+	NOTE: https://git.php.net/?p=php-src.git;a=commit;h=eaf4e77190d402ea014207e9a7d5da1a4f3727ba
+	NOTE: http://php.net/ChangeLog-7.php#7.0.4
+	TODO: seems to not affect PHP 5, double check
 CVE-2016-3184
 	RESERVED
 CVE-2016-3180 [Signature verification bypass attack]