[Git][security-tracker-team/security-tracker][master] PHP DSAs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Mon Apr 15 20:11:07 BST 2024



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fe4699e6 by Moritz Mühlenhoff at 2024-04-15T21:09:43+02:00
PHP DSAs

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -49369,7 +49369,6 @@ CVE-2023-3824 (In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.
 	- php8.2 8.2.10-1 (bug #1043477)
 	[bookworm] - php8.2 <postponed> (Fix along in future update)
 	- php7.4 <removed>
-	[bullseye] - php7.4 <postponed> (Fix along in future update)
 	- php7.3 <removed>
 	NOTE: https://github.com/php/php-src/security/advisories/GHSA-jqcx-ccgc-xwhv
 	NOTE: https://github.com/php/php-src/commit/80316123f3e9dcce8ac419bd9dd43546e2ccb5ef (php-8.0.30)
@@ -49379,7 +49378,6 @@ CVE-2023-3823 (In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2
 	- php8.2 8.2.10-1 (bug #1043477)
 	[bookworm] - php8.2 <postponed> (Fix along in future update)
 	- php7.4 <removed>
-	[bullseye] - php7.4 <postponed> (Fix along in future update)
 	- php7.3 <removed>
 	NOTE: https://github.com/php/php-src/security/advisories/GHSA-3qrf-m4j2-pcrr
 	NOTE: https://github.com/php/php-src/commit/c283c3ab0ba45d21b2b8745c1f9c7cbfe771c975 (php-8.0.30)


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,9 @@
+[15 Apr 2024] DSA-5661-1 php8.2 - security update
+	{CVE-2022-31629 CVE-2024-1874 CVE-2024-2756 CVE-2024-3096}
+	[bookworm] - php8.2 8.2.18-1~deb12u1
+[15 Apr 2024] DSA-5660-1 php7.4 - security update
+	{CVE-2022-31629 CVE-2023-3823 CVE-2023-3824 CVE-2024-1874 CVE-2024-2756 CVE-2024-3096}
+	[bullseye] - php7.4 7.4.33-1+deb11u5
 [14 Apr 2024] DSA-5659-1 trafficserver - security update
 	{CVE-2024-31309}
 	[bullseye] - trafficserver 8.1.10+ds-1~deb11u1


=====================================
data/dsa-needed.txt
=====================================
@@ -52,10 +52,6 @@ opennds/stable
 --
 org-mode
 --
-php7.4 (jmm)
---
-php8.2 (jmm)
---
 php-cas/oldstable
 --
 php-horde-mime-viewer/oldstable



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe4699e6cb3213c53b8e9fcd91d45673c8a88b14

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe4699e6cb3213c53b8e9fcd91d45673c8a88b14
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240415/e949e176/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list