Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
21d4129e by Salvatore Bonaccorso at 2024-09-26T07:19:06+02:00
Add new PHP issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -25999,6 +25999,30 @@ CVE-2024-30465 (Missing Authorization vulnerability in
Pagelayer Team PageLayer.
NOT-FOR-US: WordPress plugin
CVE-2024-30464 (Missing Authorization vulnerability in WPZOOM Social Icons
Widget & Bl ...)
NOT-FOR-US: WordPress plugin
+CVE-2024-8925 [Erroneous parsing of multipart form data]
+ - php8.2 <unfixed>
+ - php7.4 <removed>
+ NOTE: Fixed in 8.3.12, 8.2.24
+ NOTE:
https://github.com/php/php-src/security/advisories/GHSA-9pqp-7h25-4f32
+ NOTE:
https://github.com/php/php-src/commit/19b49258d0c5a61398d395d8afde1123e8d161e0
(PHP-8.2.24)
+CVE-2024-9026 [Logs from childrens may be altered]
+ - php8.2 <unfixed>
+ - php7.4 <removed>
+ NOTE: Fixed in 8.3.12, 8.2.24
+ NOTE:
https://github.com/php/php-src/security/advisories/GHSA-865w-9rf3-2wh5
+ NOTE:
https://github.com/php/php-src/commit/1f8e16172c7961045c2b0f34ba7613e3f21cdee8
(PHP-8.2.24)
+CVE-2024-8927 [cgi.force_redirect configuration is byppassible due to the
environment variable collision]
+ - php8.2 <unfixed>
+ - php7.4 <removed>
+ NOTE: Fixed in 8.3.12, 8.2.24
+ NOTE:
https://github.com/php/php-src/security/advisories/GHSA-94p6-54jq-9mwp
+ NOTE:
https://github.com/php/php-src/commit/48808d98f4fc2a05193cdcc1aedd6c66816450f1
(PHP-8.2.24)
+CVE-2024-8926 [Bypass of CVE-2024-4577, Parameter Injection Vulnerability]
+ - php8.2 <unfixed>
+ - php7.4 <removed>
+ NOTE: Fixed in 8.3.12, 8.2.24
+ NOTE:
https://github.com/php/php-src/security/advisories/GHSA-p99j-rfp4-xqvq
+ NOTE:
https://github.com/php/php-src/commit/abcfd980bfa03298792fd3aba051c78d52f10642
(PHP-8.2.24)
CVE-2024-2408 (The openssl_private_decrypt function in PHP, when using PKCS1
padding ...)
- php8.2 <unfixed>
[bookworm] - php8.2 <postponed> (Minor issue, revisit when fixed
upstream)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/21d4129ec969083055f3e6f962aa0ef1ce788598
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/21d4129ec969083055f3e6f962aa0ef1ce788598
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
