[Git][security-tracker-team/security-tracker][master] new PHP issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bb6ced35 by Moritz Muehlenhoff at 2021-07-02T12:48:38+02:00
new PHP issues

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -33875,10 +33875,23 @@ CVE-2021-21707
 	RESERVED
 CVE-2021-21706
 	RESERVED
-CVE-2021-21705
+CVE-2021-21705 [PHP: SSRF bypass in FILTER_VALIDATE_URL]
 	RESERVED
-CVE-2021-21704
+	- php8.0 <unfixed>
+	- php7.4 <unfixed>
+	- php7.3 <removed>
+	- php7.0 <removed>
+	NOTE: https://bugs.php.net/bug.php?id=81122
+CVE-2021-21704 [PHP: firebird issues]
 	RESERVED
+	- php8.0 <unfixed>
+	- php7.4 <unfixed>
+	- php7.3 <removed>
+	- php7.0 <removed>
+	NOTE: https://bugs.php.net/bug.php?id=76448
+	NOTE: https://bugs.php.net/bug.php?id=76449
+	NOTE: https://bugs.php.net/bug.php?id=76450
+	NOTE: https://bugs.php.net/bug.php?id=76452
 CVE-2021-21703
 	RESERVED
 CVE-2021-21702 (In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -29,6 +29,8 @@ ndpi
 --
 jetty9
 --
+php7.3 (jmm)
+--
 python-pysaml2 (jmm)
 --
 runc



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bb6ced35afceef2a81e2db0235df12f64d8d5c63

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bb6ced35afceef2a81e2db0235df12f64d8d5c63
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210702/ea9c8c12/attachment.htm>