diff options
| author | zi <zi@FreeBSD.org> | 2012-05-13 05:35:10 +0800 |
|---|---|---|
| committer | zi <zi@FreeBSD.org> | 2012-05-13 05:35:10 +0800 |
| commit | d2e27f08b2641a72b532f425945c076ed7e1f99e (patch) | |
| tree | 27dcca0f1312e3351b76dc68b5e5e8f1cda6d7c1 /security | |
| parent | 30a0eaa97958304991136cccb81f82a8b2a7881a (diff) | |
| download | freebsd-ports-gnome-d2e27f08b2641a72b532f425945c076ed7e1f99e.tar.gz freebsd-ports-gnome-d2e27f08b2641a72b532f425945c076ed7e1f99e.tar.zst freebsd-ports-gnome-d2e27f08b2641a72b532f425945c076ed7e1f99e.zip | |
- Document recent vulnerabilities in PHP (CVE-2012-2311 and CVE-2012-2329)
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index ddf523d51981..4f47b4b8bd4e 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -52,6 +52,43 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="59b68b1e-9c78-11e1-b5e0-000c299b62e1"> + <topic>php -- multiple vulnerabilities</topic> + <affects> + <package> + <name>php5</name> + <range><gt>5.4</gt><lt>5.4.3</lt></range> + <range><lt>5.3.13</lt></range> + </package> + <package> + <name>php53</name> + <range><lt>5.3.13</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP Development Team reports:</p> + <blockquote cite="http://www.php.net/archive/2012.php#id2012-05-08-1"> + <p>The release of PHP 5.4.13 and 5.4.3 complete a fix for the + vulnerability in CGI-based setups as originally described in + CVE-2012-1823. (CVE-2012-2311)</p> + <p>Note: mod_php and php-fqm are not vulnerable to this attack.</p> + <p>PHP 5.4.3 fixes a buffer overflow vulnerability in the + apache_request_headers() (CVE-2012-2329).</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2012-1823</cvename> + <cvename>CVE-2012-2311</cvename> + <cvename>CVE-2012-2329</cvename> + </references> + <dates> + <discovery>2012-05-08</discovery> + <entry>2012-05-12</entry> + </dates> + </vuln> + <vuln vid="64f8b72d-9c4e-11e1-9c94-000bcdf0a03b"> <topic>libpurple -- Invalid memory dereference in the XMPP protocol plug-in by processing serie of specially-crafted file transfer requests</topic> <affects> |