Attachment 155051 Details for Bug 198739 – patch for vuln.xml

[patch] patch for vuln.xml

patch-vuln.xml-php5x-2015-03 (text/plain), 2.09 KB, created by Bernard Spil on 2015-03-31 07:44:12 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Bernard Spil

Created: 2015-03-31 07:44:12 UTC

Size: 2.09 KB

patch

obsolete

>--- /var/db/pkg/vuln.xml	2015-03-30 03:22:41.912151336 +0200
>+++ vuln.xml	2015-03-31 09:35:35.673644990 +0200
>@@ -57,6 +57,49 @@
> 
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
>+ <vuln vid="742563d4-d776-11e4-b595-4061861086c1">
>+ <topic>Several vulnerabilities found in PHP</topic>
>+ <affects>
>+ <package>
>+	<name>php53</name>
>+	<range><le>5.3.29_5</le></range>
>+ </package>
>+ <package>
>+	<name>php5</name>
>+	<range><lt>5.4.39</lt></range>
>+ </package>
>+ <package>
>+	<name>php55</name>
>+	<range><lt>5.5.23</lt></range>
>+ </package>
>+ <package>
>+	<name>php56</name>
>+	<range><lt>5.6.7</lt></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	The PHP project reports:
>+	<blockquote cite="http://php.net/archive/2015.php#id2015-03-20-2">
>+	 The PHP development team announces the immediate availability of PHP 5.6.7. Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.6 users are encouraged to upgrade to this version.
>+	 The PHP development team announces the immediate availability of PHP 5.5.23. Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.5 users are encouraged to upgrade to this version.
>+	 The PHP development team announces the immediate availability of PHP 5.4.39. Six security-related bugs were fixed in this release, including CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331. All PHP 5.4 users are encouraged to upgrade to this version.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>http://php.net/archive/2015.php#id2015-03-20-2</url>
>+ <cvename>CVE-2015-0231</cvename>
>+ <cvename>CVE-2015-2305</cvename>
>+ <cvename>CVE-2015-2311</cvename>
>+ <freebsdpr>ports/198739</freebsdpr>
>+ </references>
>+ <dates>
>+ <discovery>2015-03-19</discovery>
>+ <entry>2015-03-31</entry>
>+ </dates>
>+ </vuln>
>+
> <vuln vid="264749ae-d565-11e4-b545-00269ee29e57">
> <topic>libzip -- integer overflow</topic>
> <affects>

Actions: View | Diff

Attachments on bug 198739: 154576 | 154578 | 155051