GNU bug report logs - #27808
PHP CVE-2017-11144, CVE-2017-11145, CVE-2017-11362

Previous Next

Package: guix;

Reported by: Leo Famulari <leo <at> famulari.name>

Date: Mon, 24 Jul 2017 18:58:01 UTC

Severity: normal

Tags: security

Done: Alex Sassmannshausen <alex <at> pompo.co>

Bug is archived. No further changes may be made.

Full log

View this message in rfc822 format

From: Leo Famulari <leo <at> famulari.name>
To: 27808 <at> debbugs.gnu.org
Subject: bug#27808: PHP CVE-2017-11144, CVE-2017-11145, CVE-2017-11362
Date: Mon, 24 Jul 2017 14:57:44 -0400

[Message part 1 (text/plain, inline)]
Apparently our PHP package is vulnerable to CVE-2017-11144,
CVE-2017-11145, and CVE-2017-11362:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11144
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11145

This one looks especially bad:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11362

Can someone please take a look at this?

[signature.asc (application/pgp-signature, inline)]
This bug report was last modified 7 years and 354 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.