[Git][security-tracker-team/security-tracker][master] CVE-2022-4900/php7.4: not-affected

Sylvain Beucler (@beuc) beuc at debian.org
Sat Oct 7 15:23:33 BST 2023



Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
49920c85 by Sylvain Beucler at 2023-10-07T16:23:04+02:00
CVE-2022-4900/php7.4: not-affected

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -39369,10 +39369,11 @@ CVE-2022-4900
 	- php8.2 <not-affected> (Fixed before initial upload)
 	- php7.4 <removed>
 	[bullseye] - php7.4 <postponed> (Minor issue, fix along in future update)
-	- php7.3 <removed>
+	- php7.3 <not-affected>
 	NOTE: https://github.com/php/php-src/issues/8989
 	NOTE: https://github.com/php/php-src/pull/9000
 	NOTE: https://github.com/php/php-src/commit/789a37f14405e2d1a05a76c9fb4ed2d49d4580d5 (php-8.0.22RC1)
+	NOTE: Introduced by: https://github.com/php/php-src/commit/82effb3fc7bcab0efcc343b3e03355f5f2f663c9 (php-7.4.0RC1)
 CVE-2022-4899 (A vulnerability was found in zstd v1.4.10, where an attacker can suppl ...)
 	- libzstd 1.5.4+dfsg2-1
 	[bullseye] - libzstd <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/49920c858f8d13f428870e55d4b8e579894f0b3a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/49920c858f8d13f428870e55d4b8e579894f0b3a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231007/b0bb9c70/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list