Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d06707b9 by Moritz Muehlenhoff at 2018-12-10T21:44:51Z
two PHP issues unimportant
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -83911,11 +83911,12 @@ CVE-2017-9122 (The quicktime_read_moov function in
moov.c in libquicktime 1.2.4
CVE-2017-9121
RESERVED
CVE-2017-9120 (PHP 7.x through 7.1.5 allows remote attackers to cause a denial
of ...)
- - php7.2 <unfixed>
- - php7.1 <removed>
- - php7.0 <removed>
+ - php7.2 <unfixed> (unimportant)
+ - php7.1 <removed> (unimportant)
+ - php7.0 <removed> (unimportant)
- php5 <not-affected> (Not reproducible, vulnerable code not present.)
NOTE: PHP Bug: https://bugs.php.net/bug.php?id=74544
+ NOTE: Not treated as a security issue by upstream
CVE-2017-9119 (The i_zval_ptr_dtor function in Zend/zend_variables.h in PHP
7.1.5 ...)
- php7.1 <removed> (unimportant)
- php7.0 <removed> (unimportant)
@@ -83923,13 +83924,13 @@ CVE-2017-9119 (The i_zval_ptr_dtor function in
Zend/zend_variables.h in PHP 7.1.
NOTE: PHP Bug: https://bugs.php.net/bug.php?id=74593
NOTE: Only triggerable by malicious script
CVE-2017-9118 (PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl
via a ...)
- - php7.2 <unfixed>
- - php7.1 <removed>
- - php7.0 <removed>
- - php5 <removed>
- [jessie] - php5 <postponed> (not reproducible, most likely not affected)
+ - php7.2 <unfixed> (unimportant)
+ - php7.1 <removed> (unimportant)
+ - php7.0 <removed> (unimportant)
+ - php5 <removed> (unimportant)
NOTE: Check for Jessie again as soon as more information are available.
NOTE: PHP Bug: https://bugs.php.net/bug.php?id=74604
+ NOTE: Not treated as a security issue by upstream
CVE-2017-9117 (In LibTIFF 4.0.7, the program processes BMP images without
verifying ...)
- tiff <unfixed> (unimportant)
- tiff3 <not-affected> (Does not ship libtiff-tools)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d06707b934a6aeb96938158e25bcd869a872ad1d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d06707b934a6aeb96938158e25bcd869a872ad1d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
