[Git][security-tracker-team/security-tracker][master] Reference blog article for CVE-2024-4577
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Jun 15 07:51:18 BST 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1dd9254b by Salvatore Bonaccorso at 2024-06-15T08:50:40+02:00
Reference blog article for CVE-2024-4577
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -22617,6 +22617,7 @@ CVE-2024-4577 (In PHP versions8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* be
NOTE: Fixed in 8.3.8, 8.2.20, 8.1.29
NOTE: https://github.com/php/php-src/security/advisories/GHSA-3qgc-jrrr-25jv
NOTE: https://github.com/php/php-src/commit/938267314835de3c2ed1a3da4f2959f1d2709468
+ NOTE: https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en/
CVE-2024-1874 (In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before ...)
- php8.2 <not-affected> (Windows-specific)
- php7.4 <not-affected> (Windows-specific)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1dd9254bd8edc81befa96943ba7646635c7a9530
--
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1dd9254bd8edc81befa96943ba7646635c7a9530
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240615/7eadd318/attachment.htm>
More information about the debian-security-tracker-commits
mailing list