[Secure-testing-commits] r45547 - in data: . CVE DSA

Salvatore Bonaccorso carnil at moszumanska.debian.org
Mon Oct 24 15:06:57 UTC 2016


Author: carnil
Date: 2016-10-24 15:06:56 +0000 (Mon, 24 Oct 2016)
New Revision: 45547

Modified:
   data/CVE/list
   data/DSA/list
   data/dsa-needed.txt
Log:
Reserve DSA number for php5 update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-24 14:47:06 UTC (rev 45546)
+++ data/CVE/list	2016-10-24 15:06:56 UTC (rev 45547)
@@ -86,6 +86,8 @@
 CVE-2016-XXXX [Use After Free in unserialize()]
 	- php7.0 7.0.12-1
 	- php5 <unfixed>
+	[jessie] - php5 5.6.27+dfsg-0+deb8u1
+	NOTE: Workaround entry for DSA-3698-1 until CVE assigned
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=73147
 	NOTE: http://git.php.net/?p=php-src.git;a=commit;h=0e6fe3a4c96be2d3e88389a5776f878021b4c59f
 	NOTE: NOTE: Fixed in 7.0.12, 5.6.27

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2016-10-24 14:47:06 UTC (rev 45546)
+++ data/DSA/list	2016-10-24 15:06:56 UTC (rev 45547)
@@ -1,3 +1,5 @@
+[24 Oct 2016] DSA-3698-1 php5 - security update
+	[jessie] - php5 5.6.27+dfsg-0+deb8u1
 [21 Oct 2016] DSA-3697-1 kdepimlibs - security update
 	{CVE-2016-7966}
 	[jessie] - kdepimlibs 4:4.14.2-2+deb8u2

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2016-10-24 14:47:06 UTC (rev 45546)
+++ data/dsa-needed.txt	2016-10-24 15:06:56 UTC (rev 45547)
@@ -37,9 +37,6 @@
 --
 openjdk-7
 --
-php5 (carnil)
-  Maintainer proposed an update
---
 qemu
   Maintainer asked to prepare updates
 --




More information about the Secure-testing-commits mailing list