[Secure-testing-commits] r41980 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-05-24 04:26:54 +0000 (Tue, 24 May 2016)
New Revision: 41980

Modified:
   data/CVE/list
Log:
Add CVE-2015-8878

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-24 04:26:44 UTC (rev 41979)
+++ data/CVE/list	2016-05-24 04:26:54 UTC (rev 41980)
@@ -15,7 +15,10 @@
 CVE-2015-8879 (The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 ...)
 	TODO: check
 CVE-2015-8878 (main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before ...)
-	TODO: check
+	- php5 5.6.12+dfsg-1
+	[jessie] - php5 5.6.12+dfsg-0+deb8u1
+	NOTE: Fixed in PHP 5.6.12, 5.5.28
+	NOTE: PHP bug: https://bugs.php.net/bug.php?id=70002
 CVE-2015-8877 (The gdImageScaleTwoPass function in gd_interpolation.c in the GD ...)
 	- libgd2 2.2.1-1
 	NOTE: https://github.com/libgd/libgd/commit/4751b606fa38edc456d627140898a7ec679fcc24