View | Details | Raw Unified | Return to bug 198739 | Differences between
and this patch

Collapse All | Expand All

(-)vuln.xml (+43 lines)
Lines 57-62 Link Here
57
57
58
-->
58
-->
59
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
59
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
60
  <vuln vid="742563d4-d776-11e4-b595-4061861086c1">
61
    <topic>Several vulnerabilities found in PHP</topic>
62
    <affects>
63
      <package>
64
	<name>php53</name>
65
	<range><le>5.3.29_5</le></range>
66
      </package>
67
      <package>
68
	<name>php5</name>
69
	<range><lt>5.4.39</lt></range>
70
      </package>
71
      <package>
72
	<name>php55</name>
73
	<range><lt>5.5.23</lt></range>
74
      </package>
75
      <package>
76
	<name>php56</name>
77
	<range><lt>5.6.7</lt></range>
78
      </package>
79
    </affects>
80
    <description>
81
      <body xmlns="http://www.w3.org/1999/xhtml">
82
	<p>The PHP project reports:</p>
83
	<blockquote cite="http://php.net/archive/2015.php#id2015-03-20-2">
84
	  <p>The PHP development team announces the immediate availability of PHP 5.6.7. Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.6 users are encouraged to upgrade to this version.</p>
85
	  <p>The PHP development team announces the immediate availability of PHP 5.5.23. Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.5 users are encouraged to upgrade to this version.</p>
86
	  <p>The PHP development team announces the immediate availability of PHP 5.4.39. Six security-related bugs were fixed in this release, including CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.4 users are encouraged to upgrade to this version.</p>
87
	</blockquote>
88
      </body>
89
    </description>
90
    <references>
91
      <url>http://php.net/archive/2015.php#id2015-03-20-2</url>
92
      <cvename>CVE-2015-0231</cvename>
93
      <cvename>CVE-2015-2305</cvename>
94
      <cvename>CVE-2015-2311</cvename>
95
      <freebsdpr>ports/198739</freebsdpr>
96
    </references>
97
    <dates>
98
      <discovery>2015-03-19</discovery>
99
      <entry>2015-03-31</entry>
100
    </dates>
101
  </vuln>
102
60
  <vuln vid="264749ae-d565-11e4-b545-00269ee29e57">
103
  <vuln vid="264749ae-d565-11e4-b545-00269ee29e57">
61
    <topic>libzip -- integer overflow</topic>
104
    <topic>libzip -- integer overflow</topic>
62
    <affects>
105
    <affects>

Return to bug 198739