Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
71ea72ad by Salvatore Bonaccorso at 2024-08-24T09:49:04+02:00
Add explanations on not-affected
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -121488,7 +121488,7 @@ CVE-2022-4900 (A vulnerability was found in PHP where
setting the environment va
- php8.2 <not-affected> (Fixed before initial upload)
- php7.4 <removed>
[bullseye] - php7.4 <postponed> (Minor issue, fix along in future
update)
- - php7.3 <not-affected>
+ - php7.3 <not-affected> (Vulnerable code not present)
NOTE: https://github.com/php/php-src/issues/8989
NOTE: https://github.com/php/php-src/pull/9000
NOTE:
https://github.com/php/php-src/commit/789a37f14405e2d1a05a76c9fb4ed2d49d4580d5
(php-8.0.22RC1)
@@ -193412,11 +193412,10 @@ CVE-2022-27386 (MariaDB Server v10.7 and below was
discovered to contain a segme
- mariadb-10.5 <removed>
[bullseye] - mariadb-10.5 1:10.5.18-0+deb11u1
- mariadb-10.3 <removed>
- - mariadb-10.1 <not-affected>
+ - mariadb-10.1 <not-affected> (POC does not coredump and warn about not
supported default column)
NOTE: MariaDB bug: https://jira.mariadb.org/browse/MDEV-26406
NOTE: MariaDB main bug: https://jira.mariadb.org/browse/MDEV-21028
NOTE: MariaDB commit:
https://github.com/MariaDB/server/commit/5ba77222e9fe7af8ff403816b5338b18b342053c
(mariadb-10.3.35)
- NOTE: POC does not coredump for mariadb10.1 and warn about not
supported default column
CVE-2022-27385 (An issue in the component
Used_tables_and_const_cache::used_tables_and ...)
- mariadb-10.6 1:10.6.8-1
- mariadb-10.5 <removed>
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71ea72ad1f95fcc9a6ca15856a32dc7088e70dc4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71ea72ad1f95fcc9a6ca15856a32dc7088e70dc4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
