Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1c151079 by Moritz Muehlenhoff at 2023-02-15T09:06:23+01:00
add additional PHP references
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1856,12 +1856,13 @@ CVE-2023-25141 (Apache Sling JCR Base < 3.1.12 has a
critical injection vulne
NOT-FOR-US: Apache sling-org-apache-sling-jcr-base
CVE-2023-25140 (A vulnerability has been identified in Parasolid V34.0 (All
versions & ...)
NOT-FOR-US: Siemens
-CVE-2023-0662
+CVE-2023-0662 [PHP: DOS vulnerability when parsing multipart request body]
RESERVED
- php8.2 <unfixed>
- php7.4 <removed>
- php7.3 <removed>
NOTE: Fixed in: 8.2.3
+ NOTE:
https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgv
CVE-2023-0661 (Improper access control in Devolutions Server allows an
authenticated ...)
NOT-FOR-US: Devolutions
CVE-2023-0660
@@ -3179,20 +3180,21 @@ CVE-2023-0570 (A vulnerability, which was classified as
critical, was found in S
NOT-FOR-US: SourceCodester Online Tours & Travels Management System
CVE-2023-0569 (Weak Password Requirements in GitHub repository publify/publify
prior ...)
NOT-FOR-US: Publify
-CVE-2023-0568
+CVE-2023-0568 [PHP: 1-byte array overrun in common path resolve code]
RESERVED
- php8.2 <unfixed>
- php7.4 <removed>
- php7.3 <removed>
NOTE: PHP Bug: https://bugs.php.net/bug.php?id=81746
NOTE: Fixed in: 8.2.3
-CVE-2023-0567
+CVE-2023-0567 [PHP: Password_verify() always return true with some hash]
RESERVED
- php8.2 <unfixed>
- php7.4 <removed>
- php7.3 <removed>
NOTE: PHP Bug: https://bugs.php.net/bug.php?id=81744
NOTE: Fixed in 8.2.3
+ NOTE:
https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4
CVE-2022-48302 (The AMS module has a vulnerability of lacking permission
verification ...)
NOT-FOR-US: Huawei
CVE-2022-48301 (The bundle management module lacks permission verification in
some API ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1c151079c425689cd74ad011506ba4acf59a2980
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1c151079c425689cd74ad011506ba4acf59a2980
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
