[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for php issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2b3890c3 by Salvatore Bonaccorso at 2026-07-31T07:09:15+02:00
Add Debian bug reference for php issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -327,19 +327,19 @@ CVE-2026-9672
 	- php7.4 <removed> (unimportant)
 	NOTE: Fixed by: https://github.com/php/php-src/commit/b590f0380fda26ed180874a0255f0be078434315 (php-8.4.24)
 CVE-2026-17544 (Attacker-provided inputs to bccomp() could lead to an out-of-bounds wr ...)
-	- php8.4 <unfixed>
+	- php8.4 <unfixed> (bug #1143153)
 	- php8.2 <removed>
 	- php7.4 <removed>
 	NOTE: https://github.com/php/php-src/security/advisories/GHSA-x692-q9x7-8c3f
 	NOTE: Fixed by: https://github.com/php/php-src/commit/fa18dab73f9340448c0d5c0a1d75d3fec844b358 (php-8.4.24)
 CVE-2026-17543 (Improper escaping of backslashes in attacker-provided parameters would ...)
-	- php8.4 <unfixed>
+	- php8.4 <unfixed> (bug #1143153)
 	- php8.2 <removed>
 	- php7.4 <removed>
 	NOTE: https://github.com/php/php-src/security/advisories/GHSA-7qpv-r5mr-78m4
 	NOTE: Fixed by: https://github.com/php/php-src/commit/53ac7025451c6481d44cf1835bb8385299a6a3a3 (php-8.4.24)
 CVE-2026-7260 (Circular symbolic links in phar archives could lead to unbounded recur ...)
-	- php8.4 <unfixed>
+	- php8.4 <unfixed> (bug #1143153)
 	- php8.2 <removed>
 	- php7.4 <removed>
 	NOTE: https://github.com/php/php-src/security/advisories/GHSA-vc5h-9ppw-p5f3



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2b3890c3a4b5d169db97b8e85f43073596d3a553

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2b3890c3a4b5d169db97b8e85f43073596d3a553
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260731/0ac629ef/attachment.htm>