Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.rc > #350762 > unrolled thread

Bug#1053004: CVE-2019-10784 and CVE-2023-40619

Back to article view | Back to linux.debian.bugs.rc

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#1053004: CVE-2019-10784 and CVE-2023-40619 Leandro Cunha <leandrocunha016@gmail.com> - 2023-11-11 19:00 +0100
    Bug#1053004: CVE-2019-10784 and CVE-2023-40619 Leandro Cunha <leandrocunha016@gmail.com> - 2024-03-06 04:40 +0100

#350762 — Bug#1053004: CVE-2019-10784 and CVE-2023-40619

Hi,

According to a survey carried out, it was found that the OpenSUSE
people resolved these CVEs and started distributing the fork
https://github.com/ReimuHakurei/phpPgAdmin. According to the links
below:
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/4YEBNCIRQOKETS4R7J5GXRP3TKF2YKFJ/
https://build.opensuse.org/request/show/1123216

I'm working on doing the same for Debian, currently testing and
reviewing the package. At the same time, the libphp-adodb package will
receive an NMU to be compatible with PHP 8.2 according to the website
https://adodb.org/dokuwiki/doku.php?id=v5:php_compatibility_status and
https://bugs.debian.org/ cgi-bin/bugreport.cgi?bug=1053525.

--
Cheers,
Leandro Cunha

[toc] | [next] | [standalone]

#358000

[Multipart message — attachments visible in raw view] — view raw

Hi,

On Sat, Nov 11, 2023 at 2:53 PM Leandro Cunha <leandrocunha016@gmail.com> wrote:
>
> Hi,
>
> According to a survey carried out, it was found that the OpenSUSE
> people resolved these CVEs and started distributing the fork
> https://github.com/ReimuHakurei/phpPgAdmin. According to the links
> below:
> https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/4YEBNCIRQOKETS4R7J5GXRP3TKF2YKFJ/
> https://build.opensuse.org/request/show/1123216
>
> I'm working on doing the same for Debian, currently testing and
> reviewing the package. At the same time, the libphp-adodb package will
> receive an NMU to be compatible with PHP 8.2 according to the website
> https://adodb.org/dokuwiki/doku.php?id=v5:php_compatibility_status and
> https://bugs.debian.org/ cgi-bin/bugreport.cgi?bug=1053525.
>
> --
> Cheers,
> Leandro Cunha

Just to add that in addition to OpenSUSE Tumbleweed and Leap
15.5/15.6, we have FreeBSD, AUR and Gentoo currently distributing this
package from the same source as can be seen in the links below. The
next job would be to make it available through backports and I would
choose to remove this package from stable. But I would only leave
bookworm backports due to other bugs found (this CVEs too) and fixed
in 7.14.7.
I have to search about the status of backports to oldstable. But I'm
also studying the possibility of working with patches for these two
versions.

[1] https://repology.org/project/phppgadmin/versions
[2] https://software.opensuse.org/package/phpPgAdmin
[3] https://build.opensuse.org/package/show/home%3Aecsos%3Aserver/phpPgAdmin
[4] https://build.opensuse.org/package/show/openSUSE%3AFactory/phpPgAdmin
[5] https://www.freshports.org/databases/phppgadmin
[6] https://packages.gentoo.org/packages/dev-db/phppgadmin

-- 
Cheers,
Leandro Cunha

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.rc

csiph-web