Package: php7.0-imap; Maintainer for php7.0-imap is (unknown);
Reported by: rhns <vulns@rhns.eu>
Date: Thu, 15 Nov 2018 02:18:01 UTC
Severity: grave
Tags: security, upstream
Found in version php7.0/7.0.30-0+deb9u1
Fixed in versions 7.0.33-0+deb9u1, 7.0.32-1+rm
Done: Andreas Beckmann <anbe@debian.org>
Bug is archived. No further changes may be made.
Forwarded to https://bugs.php.net/bug.php?id=76428
View this report as an mbox folder, status mbox, maintainer mbox
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Bug reassigned from package 'php-imap' to 'php7.3-imap'.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Thu, 15 Nov 2018 20:51:05 GMT) (full text, mbox, link).
No longer marked as found in versions php-defaults/49.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Thu, 15 Nov 2018 20:51:06 GMT) (full text, mbox, link).
Marked as found in versions php7.3/7.3.0~rc5-2.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Thu, 15 Nov 2018 20:51:06 GMT) (full text, mbox, link).
Changed Bug title to 'php7.3-imap: imap_open() function command injection' from 'php-imap: imap_open() function command injection'.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Thu, 15 Nov 2018 20:51:07 GMT) (full text, mbox, link).
Bug 913775 cloned as bugs 913835, 913836
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Thu, 15 Nov 2018 20:51:08 GMT) (full text, mbox, link).
Bug reassigned from package 'php7.3-imap' to 'php7.0-imap'.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Thu, 15 Nov 2018 20:51:11 GMT) (full text, mbox, link).
No longer marked as found in versions php7.3/7.3.0~rc5-2.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Thu, 15 Nov 2018 20:51:12 GMT) (full text, mbox, link).
Marked as found in versions php7.0/7.0.30-0+deb9u1.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Thu, 15 Nov 2018 20:51:13 GMT) (full text, mbox, link).
Changed Bug title to 'php7.0-imap: imap_open() function command injection' from 'php7.3-imap: imap_open() function command injection'.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Thu, 15 Nov 2018 20:51:13 GMT) (full text, mbox, link).
Added tag(s) upstream.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Thu, 15 Nov 2018 20:51:15 GMT) (full text, mbox, link).
Set Bug forwarded-to-address to 'https://bugs.php.net/bug.php?id=76428'.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Thu, 22 Nov 2018 21:57:04 GMT) (full text, mbox, link).
Changed Bug title to 'php7.0-imap: CVE-2018-19518: imap_open() function command injection' from 'php7.0-imap: imap_open() function command injection'.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Sun, 25 Nov 2018 13:27:03 GMT) (full text, mbox, link).
Marked as fixed in versions 7.0.33-0+deb9u1.
Request was from Salvatore Bonaccorso <carnil@debian.org>
to control@bugs.debian.org.
(Fri, 07 Dec 2018 20:48:05 GMT) (full text, mbox, link).
Reply sent
to Andreas Beckmann <anbe@debian.org>:
You have taken responsibility.
(Fri, 28 Apr 2023 07:42:03 GMT) (full text, mbox, link).
Message #36 received at 913836-done@bugs.debian.org (full text, mbox, reply):
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Sat, 27 May 2023 07:27:02 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.