Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
4ef0ef16 by Salvatore Bonaccorso at 2024-04-12T20:50:47+02:00
Update status for php issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -51,29 +51,31 @@ CVE-2023-44853 (\An issue was discovered in Cobham SAILOR 
VSAT Ku v.164B019, all
 CVE-2023-44852 (Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT 
Ku v.16 ...)
        NOT-FOR-US: Cobham SAILOR VSAT Ku
 CVE-2024-1874
-       - php8.2 8.2.18-1
-       - php7.4 <removed>
-       - php7.3 <removed>
-       NOTE: Fixed in: 8.2.18
-       TODO: fill in with GHSA security advisory references and further details
+       - php8.2 8.2.18-1 (unimportant)
+       - php7.4 <removed> (unimportant)
+       - php7.3 <removed> (unimportant)
+       NOTE: Fixed in: 8.2.18, 8.1.28
+       NOTE: 
https://github.com/php/php-src/security/advisories/GHSA-pc52-254m-w9w7
+       NOTE: Only affects improper handling of command line arguments on 
Windows
 CVE-2024-2756
        - php8.2 8.2.18-1
        - php7.4 <removed>
        - php7.3 <removed>
-       NOTE: Fixed in: 8.2.18
-       TODO: fill in with GHSA security advisory references and further details
+       NOTE: Fixed in: 8.2.18, 8.1.28
+       NOTE: 
https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4
 CVE-2024-3096
        - php8.2 8.2.18-1
        - php7.4 <removed>
        - php7.3 <removed>
-       NOTE: Fixed in: 8.2.18
-       TODO: fill in with GHSA security advisory references and further details
+       NOTE: Fixed in: 8.2.18, 8.1.28
+       NOTE: 
https://github.com/php/php-src/security/advisories/GHSA-h746-cjrr-wfmr
 CVE-2024-2757
        - php8.2 8.2.18-1
        - php7.4 <removed>
        - php7.3 <removed>
        NOTE: Fixed in: 8.2.18
-       TODO: fill in with GHSA security advisory references and further details
+       NOTE: 
https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq
+       TODO: re-check, might be actually only in 8.3.y series.
 CVE-2024-27309 (While an Apache Kafka cluster is being migrated from ZooKeeper 
mode to ...)
        - kafka <itp> (bug #786460)
 CVE-2024-3344 (The Otter Blocks \u2013 Gutenberg Blocks, Page Builder for 
Gutenberg E ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4ef0ef1632a15588c62648060162fadbbc1dac28

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4ef0ef1632a15588c62648060162fadbbc1dac28
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to