Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: Roave/SecurityAdvisories
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: latest
Choose a base ref
...
head repository: terrafrost/SecurityAdvisories
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: latest
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 1 commit
  • 1 file changed
  • 1 contributor

Commits on Mar 6, 2023

  1. CVE-2023-27560's affected versions are wrong 

    Check out the description at GHSA-hm7p-r324-hhf3 :

> Math/PrimeField.php in phpseclib through 2.0.41 has an infinite loop with composite primefields.

That file does not exist in 2.0.41 nor has it _ever_ existed in any tag created off of the 2.0 branch:

https://github.com/phpseclib/phpseclib/tree/2.0.41/phpseclib/Math
https://github.com/phpseclib/phpseclib/tree/2.0/phpseclib/Math

That file, however, _does_ exist in the 3.0 branch:

https://github.com/phpseclib/phpseclib/blob/3.0/phpseclib/Math/PrimeField.php

The recent 3.0.19 release fixed this:

https://github.com/phpseclib/phpseclib/releases/tag/3.0.19
    @terrafrost
    terrafrost authored Mar 6, 2023
    Configuration menu
    Copy the full SHA
    78e12c7 View commit details
    Browse the repository at this point in the history
Loading