[Git][security-tracker-team/security-tracker][master] Mark some php5 issues as affecting/not affecting all suites as

[Markus Koschany]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1dcb4542 by Markus Koschany at 2018-09-02T19:14:34Z
Mark some php5 issues as affecting/not affecting all suites as

recommended by jmm. Technically src:php5 only exists in Jessie, so the specific
[jessie] prefix can be removed.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -68993,7 +68993,7 @@ CVE-2017-9120 (PHP 7.x through 7.1.5 allows remote attackers to cause a denial o
 	- php7.1 <unfixed>
 	- php7.0 <unfixed>
 	- php5 <removed>
-	[jessie] - php5 <not-affected> (Not reproducible, vulnerable code not present.)
+	php5 <not-affected> (Not reproducible, vulnerable code not present.)
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=74544
 CVE-2017-9119 (The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 ...)
 	- php7.1 <unfixed> (unimportant)
@@ -69006,7 +69006,7 @@ CVE-2017-9118 (PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl vi
 	- php7.1 <unfixed>
 	- php7.0 <unfixed>
 	- php5 <removed>
-	[jessie] - php5 <postponed> (not reproducible, most likely not affected)
+	php5 <postponed> (not reproducible, most likely not affected)
 	NOTE: Check for Jessie again as soon as more information are available.
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=74604
 CVE-2017-9117 (In LibTIFF 4.0.7, the program processes BMP images without verifying ...)
@@ -75009,7 +75009,7 @@ CVE-2017-7272 (PHP through 7.1.11 enables potential SSRF in applications that ac
 	- php7.0 <unfixed>
 	[stretch] - php7.0 <ignored> (Upstream patch breaks existing applications, revisit if a new approach has been identified)
 	- php5 <removed>
-	[jessie] - php5 <ignored> (Never applied to PHP 5 by upstream, breaks existing applications)
+	php5 <ignored> (Never applied to PHP 5 by upstream, breaks existing applications)
 	NOTE: https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595a
 	NOTE: https://bugs.php.net/bug.php?id=74216
 	NOTE: Fixed in 7.1.4 and 7.0.18, but were later reverted: https://bugzilla.redhat.com/show_bug.cgi?id=1437837#c3



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1dcb45420187d8cc2ea4b0812c778308726e5878

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1dcb45420187d8cc2ea4b0812c778308726e5878
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180902/0cf676a8/attachment.html>