php5: CVE-2014-4049: heap-based buffer overflow in DNS TXT record parsing

Debian Bug report logs - #751364
php5: CVE-2014-4049: heap-based buffer overflow in DNS TXT record parsing

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: php5: heap-based buffer overflow in DNS TXT record parsing

Date: Thu, 12 Jun 2014 08:19:38 +0200

Source: php5
Severity: grave
Tags: security upstream

Hi

A heap-based buffer overflow was commited in [1], Red Hat Bugzilla
reference at [2].

 [1] https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468
 [2] https://bugzilla.redhat.com/show_bug.cgi?id=1108447

A CVE assignment is pending. Could you also mark affected versions for
the BTS? From a quick(!) look it seems that all versions have the
vulnerable code present.

Regards,
Salvatore

Message #12 received at 751364@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>

To: Salvatore Bonaccorso <carnil@debian.org>, 751364@bugs.debian.org

Subject: Re: [php-maint] Bug#751364: php5: heap-based buffer overflow in DNS TXT record parsing

Date: Fri, 13 Jun 2014 15:57:08 +0200

Hi Salvatore,

I have prepared versions for unstable (already uploaded) and for wheezy
(compiling right now) with patch from upstream.

I'll submit it to team@s.d.o after it finishes the compilation.

Whoever is doing squeeze LTS feel free to cherry-pick from git and
commit back to our git.

O.

On Thu, Jun 12, 2014, at 8:19, Salvatore Bonaccorso wrote:
> Source: php5
> Severity: grave
> Tags: security upstream
> 
> Hi
> 
> A heap-based buffer overflow was commited in [1], Red Hat Bugzilla
> reference at [2].
> 
>  [1]
>  https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468
>  [2] https://bugzilla.redhat.com/show_bug.cgi?id=1108447
> 
> A CVE assignment is pending. Could you also mark affected versions for
> the BTS? From a quick(!) look it seems that all versions have the
> vulnerable code present.
> 
> Regards,
> Salvatore
> 
> _______________________________________________
> pkg-php-maint mailing list
> pkg-php-maint@lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-php-maint


-- 
Ondřej Surý <ondrej@sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server

Message #23 received at 751364-submitter@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: control@bugs.debian.org

Cc: 751364-submitter@bugs.debian.org

Subject: closing 751364

Date: Sat, 14 Jun 2014 15:04:40 +0200

# mark as found in common ancenstor of oldstable, stable and unstable
found 751364 5.3.3-7
# fixed with the recent unstable upload
close 751364 5.6.0~beta4+dfsg-3
thanks

Updating the found/fixed information for #751364.

Send a report that this bug log contains spam.