[Git][security-tracker-team/security-tracker][master] PHP updates
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Mon Apr 15 09:59:29 BST 2024
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
2647daed by Moritz Muehlenhoff at 2024-04-15T10:59:11+02:00
PHP updates
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -498,31 +498,34 @@ CVE-2023-44853 (\An issue was discovered in Cobham SAILOR VSAT Ku v.164B019, all
CVE-2023-44852 (Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.16 ...)
NOT-FOR-US: Cobham SAILOR VSAT Ku
CVE-2024-1874
- - php8.2 8.2.18-1 (unimportant)
- - php7.4 <removed> (unimportant)
- - php7.3 <removed> (unimportant)
+ - php8.2 <not-affected> (Windows-specific)
+ - php7.4 <not-affected> (Windows-specific)
+ - php7.3 <not-affected> (Windows-specific)
NOTE: Fixed in: 8.2.18, 8.1.28
NOTE: https://github.com/php/php-src/security/advisories/GHSA-pc52-254m-w9w7
NOTE: Only affects improper handling of command line arguments on Windows
+ NOTE: https://github.com/php/php-src/commit/e3c784f2bfb6029b49d27783b2efc87ee6923f79
CVE-2024-2756
- php8.2 8.2.18-1
- php7.4 <removed>
- php7.3 <removed>
NOTE: Fixed in: 8.2.18, 8.1.28
NOTE: https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4
+ NOTE: https://github.com/php/php-src/commit/093c08af25fb323efa0c8e6154aa9fdeae3d3b53
CVE-2024-3096
- php8.2 8.2.18-1
- php7.4 <removed>
- php7.3 <removed>
NOTE: Fixed in: 8.2.18, 8.1.28
NOTE: https://github.com/php/php-src/security/advisories/GHSA-h746-cjrr-wfmr
+ NOTE: https://github.com/php/php-src/commit/0ba5229a3f7572846e91c8f5382e87785f543826
CVE-2024-2757
- - php8.2 8.2.18-1
- - php7.4 <removed>
- - php7.3 <removed>
- NOTE: Fixed in: 8.2.18
+ - php8.2 <not-affected> (Only affects 8.2)
+ - php7.4 <not-affected> (Only affects 8.2)
+ - php7.3 <not-affected> (Only affects 8.2)
+ NOTE: Fixed in: 8.3.6
NOTE: https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq
- TODO: re-check, might be actually only in 8.3.y series.
+ NOTE: https://github.com/php/php-src/commit/3394efc63e52a017995f92d8da4ef28224247bb3
CVE-2024-27309 (While an Apache Kafka cluster is being migrated from ZooKeeper mode to ...)
- kafka <itp> (bug #786460)
CVE-2024-3344 (The Otter Blocks \u2013 Gutenberg Blocks, Page Builder for Gutenberg E ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2647daed399315c8e65167602d25dde13e3483c1
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2647daed399315c8e65167602d25dde13e3483c1
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240415/6e133c7a/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list