| Summary: | <dev-lang/php-{7.3.28,7.4.19,8.0.6}: multiple vulnerabilities | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Thomas Deutschmann (RETIRED) <whissi> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | minor | CC: | mjo, php-bugs |
| Priority: | Normal | Flags: | nattka:
sanity-check+
|
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | B3 [glsa+ cve] | ||
| Package list: |
dev-lang/php-7.3.28
dev-lang/php-7.4.19
|
Runtime testing required: | --- |
x86 done arm done arm64 done sparc stable amd64 stable ppc/ppc64 stable Please cleanup. New GLSA request filed. This issue was resolved and addressed in GLSA 202105-23 at https://security.gentoo.org/glsa/202105-23 by GLSA coordinator Thomas Deutschmann (whissi). The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1d329eaf47fc8fd13e8077b4032de290600f6219 commit 1d329eaf47fc8fd13e8077b4032de290600f6219 Author: Thomas Deutschmann <whissi@gentoo.org> AuthorDate: 2021-05-26 09:50:30 +0000 Commit: Thomas Deutschmann <whissi@gentoo.org> CommitDate: 2021-05-26 09:50:30 +0000 dev-lang/php: security cleanup Bug: https://bugs.gentoo.org/788892 Package-Manager: Portage-3.0.18, Repoman-3.0.3 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org> dev-lang/php/Manifest | 4 - dev-lang/php/php-7.3.27-r1.ebuild | 760 ------------------------------------- dev-lang/php/php-7.3.27.ebuild | 761 -------------------------------------- dev-lang/php/php-7.4.15.ebuild | 753 ------------------------------------- dev-lang/php/php-7.4.16.ebuild | 752 ------------------------------------- dev-lang/php/php-8.0.3.ebuild | 750 ------------------------------------- 6 files changed, 3780 deletions(-) |
7.3: Fixed bug http://bugs.php.net/80710 (imap_mail_compose() header injection). 7.4/8.0: Fixed bug https://bugs.php.net/bug.php?id=66783 (UAF when appending DOMDocument to element).