From ${URL}: Hello, I'd like to request a CVEs for the below issues fixed in PHP 5.5.27 and 5.4.43 (5.6.x was not affected by those it looks like): Segfault in Phar::convertToData on invalid file https://bugs.php.net/bug.php?id=69958 http://git.php.net/?p=php-src.git;a=commit;h=bf58162ddf970f63502837f366930e44d6a992cf Buffer overflow and stack smashing error in phar_fix_filepath https://bugs.php.net/bug.php?id=69923 http://git.php.net/?p=php-src.git;a=commit;h=6dedeb40db13971af45276f80b5375030aa7e76f Thanks. -- Vasyl Kaigorodov | Red Hat Product Security PGP: 0xABB6E828 A7E0 87FF 5AB5 48EB 47D0 2868 217B F9FC ABB6 E828 Free/Busy status: https://url.corp.redhat.com/vk-free-busy-status # @maintainers, since the unaffected versions are already in tree, is 5.4.43 and 5.5.27 ready for stabilization?
Added to existing GLSA.
This issue was resolved and addressed in GLSA 201606-10 at https://security.gentoo.org/glsa/201606-10 by GLSA coordinator Kristian Fiskerstrand (K_F).