Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3f86b172 by Salvatore Bonaccorso at 2024-06-08T11:07:45+02:00
Add new php issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -20041,6 +20041,24 @@ CVE-2023-44853 (\An issue was discovered in Cobham
SAILOR VSAT Ku v.164B019, all
NOT-FOR-US: Cobham SAILOR VSAT Ku
CVE-2023-44852 (Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT
Ku v.16 ...)
NOT-FOR-US: Cobham SAILOR VSAT Ku
+CVE-2024-5585 [Bypass of CVE-2024-1874]
+ - php8.2 <unfixed>
+ - php7.4 <removed>
+ - php7.3 <removed>
+ NOTE: Fixed in 8.3.8, 8.2.20, 8.1.29
+ NOTE:
https://github.com/php/php-src/security/advisories/GHSA-9fcc-425m-g385
+CVE-2024-5458 [Filter bypass in filter_var FILTER_VALIDATE_URL]
+ - php8.2 <unfixed>
+ - php7.4 <removed>
+ - php7.3 <removed>
+ NOTE: Fixed in 8.3.8, 8.2.20, 8.1.29
+ NOTE:
https://github.com/php/php-src/security/advisories/GHSA-w8qr-v226-r27w
+CVE-2024-4577 [Bypass of CVE-2012-1823, Argument Injection in PHP-CGI]
+ - php8.2 <unfixed>
+ - php7.4 <removed>
+ - php7.3 <removed>
+ NOTE: Fixed in 8.3.8, 8.2.20, 8.1.29
+ NOTE:
https://github.com/php/php-src/security/advisories/GHSA-3qgc-jrrr-25jv
CVE-2024-1874 (In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.*
before ...)
- php8.2 <not-affected> (Windows-specific)
- php7.4 <not-affected> (Windows-specific)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3f86b17242b9d02cf0eca1c13961c3010daad313
--
This project does not include diff previews in email notifications.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3f86b17242b9d02cf0eca1c13961c3010daad313
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
