[php-maint] Processed: php4 triage

Sat Sep 9 16:05:13 UTC 2006

Processing commands for control at bugs.debian.org:

> close 361855
Bug#361855: [CVE-2006-1494] tempnam() open_basedir bypass
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to Oliver Paulus <oliver at code-project.org>

> close 361856
Bug#361856: [CVE-2006-1608] copy() Safe Mode Bypass
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to Oliver Paulus <oliver at code-project.org>

> close 361853
Bug#361853: [CVE-2006-0996] phpinfo() Cross Site Scripting
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to Oliver Paulus <oliver at code-project.org>

> close 361854
Bug#361854: [CVE-2006-1549] PHP allows local users to cause a crash by defining and executing a recursive function.
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to Oliver Paulus <oliver at code-project.org>

> close 368592
Bug#368592: php4: CVE-2006-1014 and CVE-2006-1015: argument injection in mb_send_mail function
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to Alec Berryman <alec at thened.net>

> close 375643
Bug#375643: SECURITY: CVE-2006-3011: error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to Christian Hammers <ch at debian.org>

> close 382270
Bug#382270: CVE-2006-4023: php ip2long function incorrect address validation
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to Stefan Fritsch <sf at sfritsch.de>

> close 370166
Bug#370166: php4-curl: [CVE-2006-2563] PHP cURL Safe_Mode Bypass Vulnerability
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to SALVETTI Djoume <djoume at taket.org>

> close 349260
Bug#349260: still vulnerable to CVE-2002-1954
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to Joey Hess <joeyh at debian.org>

> close 354666
Bug#354666: CVE-2005-3388: XSS in PHPInfo
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to Geoff Crompton <geoff.crompton at strategicdata.com.au>

> close 354678
Bug#354678: PHP4 in Sarge appears vulnerable to CVE-2005-3391
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to "Nick Jenkins" <nickpj at gmail.com>

> close 354685
Bug#354685: PHP4 in Sarge may be vulnerable to CVE-2005-3054
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to "Nick Jenkins" <nickpj at gmail.com>

> close 364781
Bug#364781: php4: segfault in wordwrap() et al. (INFIGO-2006-04-02)
'close' is deprecated; see http://www.debian.org/Bugs/Developer#closing.
Bug closed, send any further explanations to Zoran Dzelajlija <jelly at srce.hr>

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)