From: Peter Korsgaard <peter@korsgaard.com>
To: buildroot@busybox.net
Subject: [Buildroot] [PATCH 1/1] php: security bump to 7.3.1
Date: Tue, 29 Jan 2019 17:27:25 +0100 [thread overview]
Message-ID: <878sz377ki.fsf@dell.be.48ers.dk> (raw)
In-Reply-To: <20190119212934.85216-1-aduskett@gmail.com> (aduskett@gmail.com's message of "Sat, 19 Jan 2019 16:29:34 -0500")
>>>>> "aduskett" == aduskett <aduskett@gmail.com> writes:
> From: Adam Duskett <Aduskett@gmail.com>
> Fixes the following security issue:
> - CVE-2018-19935: Allows remote attackers to cause a denial of service
> (NULL pointer dereference and application crash) via an empty string in the
> message argument to the imap_mail function.
> https://www.cvedetails.com/cve/CVE-2018-19935/
> Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Given the fallout from moving to 7.3.x, I have NOT applied this to
2018.02.x / 2018.11.x. Instead I have applied a patch to bump the
version to 7.2.14, which fixes the same CVE.
--
Bye, Peter Korsgaard
prev parent reply other threads:[~2019-01-29 16:27 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-01-19 21:29 [Buildroot] [PATCH 1/1] php: security bump to 7.3.1 aduskett at gmail.com
2019-01-19 21:36 ` Peter Korsgaard
2019-01-29 16:27 ` Peter Korsgaard [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=878sz377ki.fsf@dell.be.48ers.dk \
--to=peter@korsgaard.com \
--cc=buildroot@busybox.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.