FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-19 19:12:13 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
b6402385-533b-11e6-a7bd-14dae9d210b8	php -- multiple vulnerabilities PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) Fixed bug #72479 (Use After Free Vulnerability in SNMP with GC and unserialize()). Fixed bug #72512 (gdImageTrueColorToPaletteBody allows arbitrary write/read access). Fixed bug #72519 (imagegif/output out-of-bounds access). Fixed bug #72520 (Stack-based buffer overflow vulnerability in php_stream_zip_opener). Fixed bug #72533 (locale_accept_from_http out-of-bounds access). Fixed bug #72541 (size_t overflow lead to heap corruption). Fixed bug #72551, bug #72552 (Incorrect casting from size_t to int lead to heap overflow in mdecrypt_generic). Fixed bug #72558 (Integer overflow error within _gdContributionsAlloc()). Fixed bug #72573 (HTTP_PROXY is improperly trusted by some PHP libraries and applications). Fixed bug #72603 (Out of bound read in exif_process_IFD_in_MAKERNOTE). Fixed bug #72606 (heap-buffer-overflow (write) simplestring_addn simplestring.c). Fixed bug #72613 (Inadequate error handling in bzread()). Fixed bug #72618 (NULL Pointer Dereference in exif_process_user_comment). Discovery 2016-07-21 Entry 2016-07-26 php55 < 5.5.38 php56 < 5.6.24 php70 < 7.0.9 php70-curl < 7.0.9 php55-bz2 < 5.5.38 php56-bz2 < 5.6.24 php70-bz2 < 7.0.9 php55-exif < 5.5.38 php56-exif < 5.6.24 php70-exif < 7.0.9 php55-gd < 5.5.38 php56-gd < 5.6.24 php70-gd < 7.0.9 php70-mcrypt < 7.0.9 php55-odbc < 5.5.38 php56-odbc < 5.6.24 php70-odbc < 7.0.9 php55-snmp < 5.5.38 php56-snmp < 5.6.24 php70-snmp < 7.0.9 php55-xmlrpc < 5.5.38 php56-xmlrpc < 5.6.24 php70-xmlrpc < 7.0.9 php55-zip < 5.5.38 php56-zip < 5.6.24 php70-zip < 7.0.9 http://www.php.net/ChangeLog-5.php#5.5.38 http://www.php.net/ChangeLog-5.php#5.6.24 http://www.php.net/ChangeLog-7.php#7.0.8 http://seclists.org/oss-sec/2016/q3/121 CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292 CVE-2016-6294 CVE-2016-6295 CVE-2016-6296 CVE-2016-6297
66d77c58-3b1d-11e6-8e82-002590263bf5	php -- multiple vulnerabilities The PHP Group reports: Please reference CVE/URL list for details Discovery 2016-06-23 Entry 2016-06-25 php55 php55-gd php55-mbstring php55-wddx php55-zip < 5.5.37 php56 php56-gd php56-mbstring php56-phar php56-wddx php56-zip < 5.6.23 php70 php70-gd php70-mbstring php70-phar php70-wddx php70-zip < 7.0.8 CVE-2015-8874 CVE-2016-5766 CVE-2016-5767 CVE-2016-5768 CVE-2016-5769 CVE-2016-5770 CVE-2016-5771 CVE-2016-5772 CVE-2016-5773 ports/210491 ports/210502 http://php.net/ChangeLog-5.php#5.5.37 http://php.net/ChangeLog-5.php#5.6.23 http://php.net/ChangeLog-7.php#7.0.8

VuXML ID

Description

b6402385-533b-11e6-a7bd-14dae9d210b8

php -- multiple vulnerabilities

PHP reports:

Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns)

Fixed bug #72479 (Use After Free Vulnerability in SNMP with GC and unserialize()).

Fixed bug #72512 (gdImageTrueColorToPaletteBody allows arbitrary write/read access).

Fixed bug #72519 (imagegif/output out-of-bounds access).

Fixed bug #72520 (Stack-based buffer overflow vulnerability in php_stream_zip_opener).

Fixed bug #72533 (locale_accept_from_http out-of-bounds access).

Fixed bug #72541 (size_t overflow lead to heap corruption).

Fixed bug #72551, bug #72552 (Incorrect casting from size_t to int lead to heap overflow in mdecrypt_generic).

Fixed bug #72558 (Integer overflow error within _gdContributionsAlloc()).

Fixed bug #72573 (HTTP_PROXY is improperly trusted by some PHP libraries and applications).

Fixed bug #72603 (Out of bound read in exif_process_IFD_in_MAKERNOTE).

Fixed bug #72606 (heap-buffer-overflow (write) simplestring_addn simplestring.c).

Fixed bug #72613 (Inadequate error handling in bzread()).

Fixed bug #72618 (NULL Pointer Dereference in exif_process_user_comment).

Discovery 2016-07-21
Entry 2016-07-26
php55

< 5.5.38

php56

< 5.6.24

php70

< 7.0.9

php70-curl

< 7.0.9

php55-bz2

< 5.5.38

php56-bz2

< 5.6.24

php70-bz2

< 7.0.9

php55-exif

< 5.5.38

php56-exif

< 5.6.24

php70-exif

< 7.0.9

php55-gd

< 5.5.38

php56-gd

< 5.6.24

php70-gd

< 7.0.9

php70-mcrypt

< 7.0.9

php55-odbc

< 5.5.38

php56-odbc

< 5.6.24

php70-odbc

< 7.0.9

php55-snmp

< 5.5.38

php56-snmp

< 5.6.24

php70-snmp

< 7.0.9

php55-xmlrpc

< 5.5.38

php56-xmlrpc

< 5.6.24

php70-xmlrpc

< 7.0.9

php55-zip

< 5.5.38

php56-zip

< 5.6.24

php70-zip

< 7.0.9

http://www.php.net/ChangeLog-5.php#5.5.38
http://www.php.net/ChangeLog-5.php#5.6.24
http://www.php.net/ChangeLog-7.php#7.0.8
http://seclists.org/oss-sec/2016/q3/121
CVE-2015-8879
CVE-2016-5385
CVE-2016-5399
CVE-2016-6288
CVE-2016-6289
CVE-2016-6290
CVE-2016-6291
CVE-2016-6292
CVE-2016-6294
CVE-2016-6295
CVE-2016-6296
CVE-2016-6297

66d77c58-3b1d-11e6-8e82-002590263bf5

php -- multiple vulnerabilities

The PHP Group reports:

Please reference CVE/URL list for details

Discovery 2016-06-23
Entry 2016-06-25
php55
php55-gd
php55-mbstring
php55-wddx
php55-zip

< 5.5.37

php56
php56-gd
php56-mbstring
php56-phar
php56-wddx
php56-zip

< 5.6.23

php70
php70-gd
php70-mbstring
php70-phar
php70-wddx
php70-zip

< 7.0.8

CVE-2015-8874
CVE-2016-5766
CVE-2016-5767
CVE-2016-5768
CVE-2016-5769
CVE-2016-5770
CVE-2016-5771
CVE-2016-5772
CVE-2016-5773
ports/210491
ports/210502
http://php.net/ChangeLog-5.php#5.5.37
http://php.net/ChangeLog-5.php#5.6.23
http://php.net/ChangeLog-7.php#7.0.8