Details pending. Need to check if 7.2.x is affected (and then if 7.2.30 fixes).
I'll keep this in [upstream] for a few hours to let upstream publish details.
(In reply to Sam James (sec padawan) from comment #0) > Details pending. > Need to check if 7.2.x is affected (and then if 7.2.30 fixes). 7.2.x is affected and 7.2.30 fixes this: https://github.com/php/php-src/compare/php-7.2.29...php-7.2.30 @maintainer(s), please advise if ready for stabilisation, or call yourself
sparc stable
amd64 stable
arm64 stable
arm stable
x86 stable
ppc stable
ppc64 stable
hppa stable
@maintainer(s), pleas ecleanup
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1ea63d48145edb06c7d971047b174fc165e804a9 commit 1ea63d48145edb06c7d971047b174fc165e804a9 Author: Thomas Deutschmann <whissi@gentoo.org> AuthorDate: 2020-05-01 18:23:18 +0000 Commit: Thomas Deutschmann <whissi@gentoo.org> CommitDate: 2020-05-01 18:23:18 +0000 dev-lang/php: security cleanup Bug: https://bugs.gentoo.org/717710 Package-Manager: Portage-2.3.99, Repoman-2.3.22 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org> dev-lang/php/Manifest | 3 - dev-lang/php/php-7.2.29.ebuild | 755 ---------------------------------------- dev-lang/php/php-7.3.16.ebuild | 756 ----------------------------------------- dev-lang/php/php-7.4.4.ebuild | 746 ---------------------------------------- 4 files changed, 2260 deletions(-)
GLSA Vote: No Repository is clean, all done!