Yue Tao 81aecee0ed modphp: Security Advisory - php - CVE-2014-5120 ...

gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before
5.5.16 does not ensure that pathnames lack %00 sequences, which might
allow remote attackers to overwrite arbitrary files via crafted input to
an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif,
(4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5120

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>

2014-10-30 09:00:07 +01:00

..

modphp

modphp: Security Advisory - php - CVE-2014-5120

2014-10-30 09:00:07 +01:00

phpmyadmin

phpmyadmin: add bash to RDEPENDS_phpmyadmin

2014-09-26 05:41:51 +02:00

xdebug

modphp, xdebug: blacklist because of conflict with php

2014-10-27 12:50:09 +01:00