Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: ce62ea7d by Salvatore Bonaccorso at 2025-07-04T22:24:34+02:00 Add new CVEs for php - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,21 @@ +CVE-2025-6491 [NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix] + - php8.4 8.4.10-1 + - php8.2 <removed> + - php7.4 <removed> + NOTE: https://github.com/php/php-src/security/advisories/GHSA-453j-q27h-5p8x + NOTE: Fixed by: https://github.com/php/php-src/commit/9cb3d8d200f0c822b17bda35a2a67a97b039d3e1 (php-8.1.33) +CVE-2025-1220 [Null byte termination in hostnames] + - php8.4 8.4.10-1 + - php8.2 <removed> + - php7.4 <removed> + NOTE: https://github.com/php/php-src/security/advisories/GHSA-3cr5-j632-f35r + NOTE: Fixed by: https://github.com/php/php-src/commit/cac8f7f1cf4939f55f06b68120040f057682d89c (php-8.1.33) +CVE-2025-1735 [pgsql extension does not check for errors during escaping] + - php8.4 8.4.10-1 + - php8.2 <removed> + - php7.4 <removed> + NOTE: https://github.com/php/php-src/security/advisories/GHSA-hrwm-9436-5mv3 + NOTE: Fixed by: https://github.com/php/php-src/commit/9376aeef9f8ff81f2705b8016237ec3e30bdee44 (php-8.1.33) CVE-2025-7067 (A vulnerability classified as problematic was found in HDF5 1.14.6. Th ...) - hdf5 <unfixed> NOTE: https://github.com/HDFGroup/hdf5/issues/5577 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ce62ea7d8c60874614429359d4171e777d159de9 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ce62ea7d8c60874614429359d4171e777d159de9 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
