summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2021-11-27 09:04:17 +0100
committerSalvatore Bonaccorso <carnil@debian.org>2021-11-27 09:04:17 +0100
commit064f17ffd666b0d1b4da7ea00e663e95b7a20cb0 (patch)
tree9f7d0b1a0c234e96cbbf05a4ece9ed737896ac85
parentffae387b7d099017540b57c56f3abcb4b1223008 (diff)
Add CVE-2021-21707/php*
-rw-r--r--data/CVE/2021.list10
1 files changed, 9 insertions, 1 deletions
diff --git a/data/CVE/2021.list b/data/CVE/2021.list
index f91ff9aa55..9a5e6987ea 100644
--- a/data/CVE/2021.list
+++ b/data/CVE/2021.list
@@ -53564,8 +53564,16 @@ CVE-2021-21709
RESERVED
CVE-2021-21708
RESERVED
-CVE-2021-21707
+CVE-2021-21707 [special character is breaking the path in xml function]
RESERVED
+ - php8.1 8.1.0-1
+ - php8.0 <unfixed>
+ - php7.4 <removed>
+ - php7.3 <removed>
+ - php7.0 <removed>
+ NOTE: Fixed in 8.1.0, 8.0.13, 7.4.26, 7.3.33
+ NOTE: PHP Bug: https://bugs.php.net/79971
+ NOTE: https://github.com/php/php-src/commit/f15f8fc573eb38c3c73e23e0930063a6f6409ed4
CVE-2021-21706 (In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below ...)
- php8.0 <not-affected> (Windows specific issue)
- php7.4 <not-affected> (Windows specific issue)

© 2014-2024 Faster IT GmbH | imprint | privacy policy