[Git][security-tracker-team/security-tracker][master] add additional PHP references

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1c151079 by Moritz Muehlenhoff at 2023-02-15T09:06:23+01:00
add additional PHP references

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1856,12 +1856,13 @@ CVE-2023-25141 (Apache Sling JCR Base < 3.1.12 has a critical injection vulne
 	NOT-FOR-US: Apache sling-org-apache-sling-jcr-base
 CVE-2023-25140 (A vulnerability has been identified in Parasolid V34.0 (All versions & ...)
 	NOT-FOR-US: Siemens
-CVE-2023-0662
+CVE-2023-0662 [PHP: DOS vulnerability when parsing multipart request body]
 	RESERVED
 	- php8.2 <unfixed>
 	- php7.4 <removed>
 	- php7.3 <removed>
 	NOTE: Fixed in: 8.2.3
+	NOTE: https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgv
 CVE-2023-0661 (Improper access control in Devolutions Server allows an authenticated  ...)
 	NOT-FOR-US: Devolutions
 CVE-2023-0660
@@ -3179,20 +3180,21 @@ CVE-2023-0570 (A vulnerability, which was classified as critical, was found in S
 	NOT-FOR-US: SourceCodester Online Tours & Travels Management System
 CVE-2023-0569 (Weak Password Requirements in GitHub repository publify/publify prior  ...)
 	NOT-FOR-US: Publify
-CVE-2023-0568
+CVE-2023-0568 [PHP: 1-byte array overrun in common path resolve code]
 	RESERVED
 	- php8.2 <unfixed>
 	- php7.4 <removed>
 	- php7.3 <removed>
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=81746
 	NOTE: Fixed in: 8.2.3
-CVE-2023-0567
+CVE-2023-0567 [PHP: Password_verify() always return true with some hash]
 	RESERVED
 	- php8.2 <unfixed>
 	- php7.4 <removed>
 	- php7.3 <removed>
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=81744
 	NOTE: Fixed in 8.2.3
+	NOTE: https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4
 CVE-2022-48302 (The AMS module has a vulnerability of lacking permission verification  ...)
 	NOT-FOR-US: Huawei
 CVE-2022-48301 (The bundle management module lacks permission verification in some API ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1c151079c425689cd74ad011506ba4acf59a2980

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1c151079c425689cd74ad011506ba4acf59a2980
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230215/87cc1e0e/attachment-0001.htm>