Markus Koschany pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
096ad330 by Markus Koschany at 2018-09-02T19:24:03Z
Revert "Let's try this syntax instead."
This reverts commit e80ddceb278cbbc06a8bd97f23f8ad062b5ec681.
- - - - -
996f06e9 by Markus Koschany at 2018-09-02T19:24:18Z
Revert "Mark some php5 issues as affecting/not affecting all suites
as"
This reverts commit 1dcb45420187d8cc2ea4b0812c778308726e5878.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -68992,7 +68992,8 @@ CVE-2017-9120 (PHP 7.x through 7.1.5 allows remote
attackers to cause a denial o
- php7.2 <unfixed>
- php7.1 <unfixed>
- php7.0 <unfixed>
- - php5 <not-affected> (Not reproducible, vulnerable code not present.)
+ - php5 <removed>
+ [jessie] - php5 <not-affected> (Not reproducible, vulnerable code not
present.)
NOTE: PHP Bug: https://bugs.php.net/bug.php?id=74544
CVE-2017-9119 (The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP
7.1.5 ...)
- php7.1 <unfixed> (unimportant)
@@ -69004,7 +69005,8 @@ CVE-2017-9118 (PHP 7.1.5 has an Out of bounds access in
php_pcre_replace_impl vi
- php7.2 <unfixed>
- php7.1 <unfixed>
- php7.0 <unfixed>
- - php5 <postponed> (not reproducible, most likely not affected)
+ - php5 <removed>
+ [jessie] - php5 <postponed> (not reproducible, most likely not affected)
NOTE: Check for Jessie again as soon as more information are available.
NOTE: PHP Bug: https://bugs.php.net/bug.php?id=74604
CVE-2017-9117 (In LibTIFF 4.0.7, the program processes BMP images without
verifying ...)
@@ -75006,7 +75008,8 @@ CVE-2017-7272 (PHP through 7.1.11 enables potential
SSRF in applications that ac
- php7.1 <unfixed>
- php7.0 <unfixed>
[stretch] - php7.0 <ignored> (Upstream patch breaks existing
applications, revisit if a new approach has been identified)
- - php5 <ignored> (Never applied to PHP 5 by upstream, breaks existing
applications)
+ - php5 <removed>
+ [jessie] - php5 <ignored> (Never applied to PHP 5 by upstream, breaks
existing applications)
NOTE:
https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595a
NOTE: https://bugs.php.net/bug.php?id=74216
NOTE: Fixed in 7.1.4 and 7.0.18, but were later reverted:
https://bugzilla.redhat.com/show_bug.cgi?id=1437837#c3
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/f214a693db7aa287e6e4e588fa3ee88f3b0e8e91...996f06e9a25ee11875dc91a7d73c387d7573e207
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/f214a693db7aa287e6e4e588fa3ee88f3b0e8e91...996f06e9a25ee11875dc91a7d73c387d7573e207
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
