Bug#702221: [php-maint] Bug#702221: php5: CVE-2013-1635 CVE-2013-1643

2013-03-04 Thread Ondřej Surý
Argh, thanks for poke. Building for squeeze-security now. $ diffstat php5_5.3.3-7+squeeze15.debdiff debian/patches/CVE-2013-1635.patch | 48 + debian/patches/CVE-2013-1643.patch | 135 + php5-5.3.3/debian/changelog|7 + php5-5.3.3/de

Bug#702221: php5: CVE-2013-1635 CVE-2013-1643

2013-03-04 Thread Moritz Muehlenhoff
Package: php5 Severity: grave Tags: security Justification: user security hole Hi, two issues have been reported in php5. CVE-2013-1635 doesn't classify as a security issue per the Debian Security policy, but if the fix is non-intrusive we could include it nonetheless: CVE-2013-1643 http://git.p