[Secure-testing-commits] r41789 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-05-17 05:23:34 +0000 (Tue, 17 May 2016)
New Revision: 41789

Modified:
   data/CVE/list
Log:
Update CVE-2015-8873/php5

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-17 05:19:17 UTC (rev 41788)
+++ data/CVE/list	2016-05-17 05:23:34 UTC (rev 41789)
@@ -22,7 +22,11 @@
 	NOTE: Starting with 5.4.0-1 Debian uses the system copy of libgd
 	TODO: check libgd2
 CVE-2015-8873 (Stack consumption vulnerability in Zend/zend_exceptions.c in PHP ...)
-	TODO: check
+	- php5 5.6.12+dfsg-1
+	[jessie] - php5 5.6.12+dfsg-0+deb8u1
+	[wheezy] - php5 5.4.44-0+deb7u1
+	NOTE: Fixed in 5.6.12, 5.5.28, 5.4.44
+	NOTE: PHP bug: https://bugs.php.net/bug.php?id=69793
 CVE-2016-XXXX [moodle issues fixed in 2.7.14]
 	- moodle 2.7.14+dfsg-1
 CVE-2016-4805 [ppp: take reference on channels netns]