7.3: Fixed bug http://bugs.php.net/80710 (imap_mail_compose() header injection). 7.4/8.0: Fixed bug https://bugs.php.net/bug.php?id=66783 (UAF when appending DOMDocument to element).
x86 done
arm done
arm64 done
sparc stable
amd64 stable
ppc/ppc64 stable
Please cleanup.
New GLSA request filed.
This issue was resolved and addressed in GLSA 202105-23 at https://security.gentoo.org/glsa/202105-23 by GLSA coordinator Thomas Deutschmann (whissi).
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1d329eaf47fc8fd13e8077b4032de290600f6219 commit 1d329eaf47fc8fd13e8077b4032de290600f6219 Author: Thomas Deutschmann <whissi@gentoo.org> AuthorDate: 2021-05-26 09:50:30 +0000 Commit: Thomas Deutschmann <whissi@gentoo.org> CommitDate: 2021-05-26 09:50:30 +0000 dev-lang/php: security cleanup Bug: https://bugs.gentoo.org/788892 Package-Manager: Portage-3.0.18, Repoman-3.0.3 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org> dev-lang/php/Manifest | 4 - dev-lang/php/php-7.3.27-r1.ebuild | 760 ------------------------------------- dev-lang/php/php-7.3.27.ebuild | 761 -------------------------------------- dev-lang/php/php-7.4.15.ebuild | 753 ------------------------------------- dev-lang/php/php-7.4.16.ebuild | 752 ------------------------------------- dev-lang/php/php-8.0.3.ebuild | 750 ------------------------------------- 6 files changed, 3780 deletions(-)