[Git][security-tracker-team/security-tracker][master] Add new PHP issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Feb 15 08:04:20 GMT 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d6de8cd8 by Salvatore Bonaccorso at 2023-02-15T09:02:14+01:00
Add new PHP issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1858,6 +1858,10 @@ CVE-2023-25140 (A vulnerability has been identified in Parasolid V34.0 (All vers
 	NOT-FOR-US: Siemens
 CVE-2023-0662
 	RESERVED
+	- php8.2 <unfixed>
+	- php7.4 <removed>
+	- php7.3 <removed>
+	NOTE: Fixed in: 8.2.3
 CVE-2023-0661 (Improper access control in Devolutions Server allows an authenticated  ...)
 	NOT-FOR-US: Devolutions
 CVE-2023-0660
@@ -3177,8 +3181,18 @@ CVE-2023-0569 (Weak Password Requirements in GitHub repository publify/publify p
 	NOT-FOR-US: Publify
 CVE-2023-0568
 	RESERVED
+	- php8.2 <unfixed>
+	- php7.4 <removed>
+	- php7.3 <removed>
+	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=81746
+	NOTE: Fixed in: 8.2.3
 CVE-2023-0567
 	RESERVED
+	- php8.2 <unfixed>
+	- php7.4 <removed>
+	- php7.3 <removed>
+	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=81744
+	NOTE: Fixed in 8.2.3
 CVE-2022-48302 (The AMS module has a vulnerability of lacking permission verification  ...)
 	NOT-FOR-US: Huawei
 CVE-2022-48301 (The bundle management module lacks permission verification in some API ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6de8cd85bc390c8fcb9220a4541ae0ec4198756

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6de8cd85bc390c8fcb9220a4541ae0ec4198756
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230215/f28589ee/attachment.htm>


More information about the debian-security-tracker-commits mailing list