[Git][security-tracker-team/security-tracker][master] two PHP issues unimportant

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d06707b9 by Moritz Muehlenhoff at 2018-12-10T21:44:51Z
two PHP issues unimportant

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -83911,11 +83911,12 @@ CVE-2017-9122 (The quicktime_read_moov function in moov.c in libquicktime 1.2.4
 CVE-2017-9121
 	RESERVED
 CVE-2017-9120 (PHP 7.x through 7.1.5 allows remote attackers to cause a denial of ...)
-	- php7.2 <unfixed>
-	- php7.1 <removed>
-	- php7.0 <removed>
+	- php7.2 <unfixed> (unimportant)
+	- php7.1 <removed> (unimportant)
+	- php7.0 <removed> (unimportant)
 	- php5 <not-affected> (Not reproducible, vulnerable code not present.)
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=74544
+	NOTE: Not treated as a security issue by upstream
 CVE-2017-9119 (The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 ...)
 	- php7.1 <removed> (unimportant)
 	- php7.0 <removed> (unimportant)
@@ -83923,13 +83924,13 @@ CVE-2017-9119 (The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=74593
 	NOTE: Only triggerable by malicious script
 CVE-2017-9118 (PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a ...)
-	- php7.2 <unfixed>
-	- php7.1 <removed>
-	- php7.0 <removed>
-	- php5 <removed>
-	[jessie] - php5 <postponed> (not reproducible, most likely not affected)
+	- php7.2 <unfixed> (unimportant)
+	- php7.1 <removed> (unimportant)
+	- php7.0 <removed> (unimportant)
+	- php5 <removed> (unimportant)
 	NOTE: Check for Jessie again as soon as more information are available.
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=74604
+	NOTE: Not treated as a security issue by upstream
 CVE-2017-9117 (In LibTIFF 4.0.7, the program processes BMP images without verifying ...)
 	- tiff <unfixed> (unimportant)
 	- tiff3 <not-affected> (Does not ship libtiff-tools)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d06707b934a6aeb96938158e25bcd869a872ad1d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d06707b934a6aeb96938158e25bcd869a872ad1d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181210/64a22f16/attachment-0001.html>