php7.4 7.4.3-4ubuntu2.10 source package in Ubuntu

Changelog

php7.4 (7.4.3-4ubuntu2.10) focal-security; urgency=medium

  * SECURITY UPDATE: DoS in zend_string_extend function
    - debian/patches/CVE-2017-8923.patch: fix integer Overflow when
      concatenating strings in Zend/zend_vm_def.h, Zend/zend_vm_execute.h.
    - CVE-2017-8923
  * SECURITY UPDATE: out of bounds access in php_pcre_replace_impl
    - debian/patches/CVE-2017-9118-pre1.patch: fix heap buffer overflow via
      str_repeat in Zend/zend_operators.c, Zend/zend_string.h.
    - debian/patches/CVE-2017-9118-pre2.patch: fix memory corruption in
      preg_replace/preg_replace_callback in ext/pcre/php_pcre.c,
      ext/pcre/tests/bug79188.phpt.
    - debian/patches/CVE-2017-9118-pre3.patch: fix too much memory is
      allocated for preg_replace() in ext/pcre/php_pcre.c,
      ext/pcre/tests/bug81243.phpt.
    - debian/patches/CVE-2017-9118.patch: fix out of bounds in
      php_pcre_replace_impl in Zend/zend_string.h, ext/pcre/php_pcre.c.
    - CVE-2017-9118
  * SECURITY UPDATE: DoS via memory consumption in i_zval_ptr_dtor
    - debian/patches/CVE-2017-9119.patch: handle memory limit error during
      string reallocation correctly in Zend/zend_string.h.
    - CVE-2017-9119
  * SECURITY UPDATE: DoS via integer overflow in mysqli_real_escape_string
    - debian/patches/CVE-2017-9120.patch: fix overflow in
      ext/mysqli/mysqli_api.c.
    - CVE-2017-9120
  * SECURITY UPDATE: filename truncation issue in XML parsing functions
    - debian/patches/CVE-2021-21707.patch: special character is breaking
      the path in xml function in ext/dom/domimplementation.c,
      ext/dom/tests/bug79971_2.phpt, ext/libxml/libxml.c,
      ext/simplexml/tests/bug79971_1.phpt,
      ext/simplexml/tests/bug79971_1.xml.
    - CVE-2021-21707

 -- Marc Deslauriers <email address hidden>  Wed, 02 Mar 2022 10:36:52 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
php
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
php7.4_7.4.3.orig.tar.xz 9.8 MiB cf1f856d877c268124ded1ede40c9fb6142b125fdaafdc54f855120b8bc6982a
php7.4_7.4.3-4ubuntu2.10.debian.tar.xz 90.7 KiB 16e834310947a7639265359324d8cb548f7edcc26d65ca0c38001f9f8535269d
php7.4_7.4.3-4ubuntu2.10.dsc 5.5 KiB 7d4632ce37150d456404c5381008c02b6e090063812639bec74e45d185748bde

View changes file

Binary packages built by this source

libapache2-mod-php7.4: server-side, HTML-embedded scripting language (Apache 2 module)

 This package provides the PHP module for the Apache 2 webserver (as
 found in the apache2-mpm-prefork package). Please note that this package
 ONLY works with Apache's prefork MPM, as it is not compiled thread-safe.
 .
 The following extensions are built in: Core date filter hash libxml openssl
 pcre Reflection session sodium SPL standard zlib.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

libapache2-mod-php7.4-dbgsym: debug symbols for libapache2-mod-php7.4
libphp7.4-embed: HTML-embedded scripting language (Embedded SAPI library)

 This package provides the library /usr/lib/libphp7.4.so which can
 be used by application developers to embed PHP scripting functionality.
 .
 The following extensions are built in: Core date filter hash libxml openssl
 pcntl pcre Reflection session sodium SPL standard zlib.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.
 .
 WARNING: The embed SAPI is experimental and there's no guarantee that
 the API/ABI will be kept compatible even between minor releases. You
 have been warned.

libphp7.4-embed-dbgsym: debug symbols for libphp7.4-embed
php7.4: server-side, HTML-embedded scripting language (metapackage)

 This package is a metapackage that, when installed, guarantees that you
 have at least one of the four server-side versions of the PHP interpreter
 installed. Removing this package won't remove PHP from your system, however
 it may remove other packages that depend on this one.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-bcmath: Bcmath module for PHP

 This package provides the Bcmath module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-bcmath-dbgsym: debug symbols for php7.4-bcmath
php7.4-bz2: bzip2 module for PHP

 This package provides the bzip2 module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-bz2-dbgsym: debug symbols for php7.4-bz2
php7.4-cgi: server-side, HTML-embedded scripting language (CGI binary)

 This package provides the /usr/lib/cgi-bin/php CGI interpreter built
 for use in Apache 2 with mod_actions, or any other CGI httpd that
 supports a similar mechanism. Note that MOST users probably
 want the php7.4-fpm package.
 .
 The following extensions are built in: Core date filter hash libxml openssl
 pcntl pcre Reflection session sodium SPL standard zlib.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-cgi-dbgsym: debug symbols for php7.4-cgi
php7.4-cli: command-line interpreter for the PHP scripting language

 This package provides the /usr/bin/php7.4 command interpreter, useful for
 testing PHP scripts from a shell or performing general shell scripting tasks.
 .
 The following extensions are built in: Core date filter hash libxml openssl
 pcntl pcre Reflection session sodium SPL standard zlib.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-cli-dbgsym: debug symbols for php7.4-cli
php7.4-common: documentation, examples and common module for PHP

 This package provides the documentation, examples and common module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-common-dbgsym: debug symbols for php7.4-common
php7.4-curl: CURL module for PHP

 This package provides the CURL module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-curl-dbgsym: debug symbols for php7.4-curl
php7.4-dba: DBA module for PHP

 This package provides the DBA module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-dba-dbgsym: debug symbols for php7.4-dba
php7.4-dev: Files for PHP7.4 module development

 This package provides the files from the PHP7.4 source needed for compiling
 additional modules.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-enchant: Enchant module for PHP

 This package provides the Enchant module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-enchant-dbgsym: debug symbols for php7.4-enchant
php7.4-fpm: server-side, HTML-embedded scripting language (FPM-CGI binary)

 This package provides the Fast Process Manager interpreter that runs
 as a daemon and receives Fast/CGI requests. Note that MOST Apache users
 probably want the libapache2-mod-php7.4 package.
 .
 The following extensions are built in: Core date filter hash libxml openssl
 pcre Reflection session sodium SPL standard zlib.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-fpm-dbgsym: debug symbols for php7.4-fpm
php7.4-gd: GD module for PHP

 This package provides the GD module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-gd-dbgsym: debug symbols for php7.4-gd
php7.4-gmp: GMP module for PHP

 This package provides the GMP module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-gmp-dbgsym: debug symbols for php7.4-gmp
php7.4-imap: IMAP module for PHP

 This package provides the IMAP module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-imap-dbgsym: debug symbols for php7.4-imap
php7.4-interbase: Interbase module for PHP

 This package provides the Interbase module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-interbase-dbgsym: debug symbols for php7.4-interbase
php7.4-intl: Internationalisation module for PHP

 This package provides the Internationalisation module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-intl-dbgsym: debug symbols for php7.4-intl
php7.4-json: JSON module for PHP

 This package provides the JSON module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-json-dbgsym: debug symbols for php7.4-json
php7.4-ldap: LDAP module for PHP

 This package provides the LDAP module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-ldap-dbgsym: debug symbols for php7.4-ldap
php7.4-mbstring: MBSTRING module for PHP

 This package provides the MBSTRING module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-mbstring-dbgsym: debug symbols for php7.4-mbstring
php7.4-mysql: MySQL module for PHP

 This package provides the MySQL module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-mysql-dbgsym: debug symbols for php7.4-mysql
php7.4-odbc: ODBC module for PHP

 This package provides the ODBC module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-odbc-dbgsym: debug symbols for php7.4-odbc
php7.4-opcache: Zend OpCache module for PHP

 This package provides the Zend OpCache module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-opcache-dbgsym: debug symbols for php7.4-opcache
php7.4-pgsql: PostgreSQL module for PHP

 This package provides the PostgreSQL module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-pgsql-dbgsym: debug symbols for php7.4-pgsql
php7.4-phpdbg: server-side, HTML-embedded scripting language (PHPDBG binary)

 This package provides the /usr/bin/phpdbg command interpreter, useful for
 stepthrough debugging of PHP code.
 .
 The following extensions are built in: Core date filter hash libxml openssl
 pcntl pcre Reflection session sodium SPL standard zlib.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-phpdbg-dbgsym: debug symbols for php7.4-phpdbg
php7.4-pspell: pspell module for PHP

 This package provides the pspell module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-pspell-dbgsym: debug symbols for php7.4-pspell
php7.4-readline: readline module for PHP

 This package provides the readline module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-readline-dbgsym: debug symbols for php7.4-readline
php7.4-snmp: SNMP module for PHP

 This package provides the SNMP module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-snmp-dbgsym: debug symbols for php7.4-snmp
php7.4-soap: SOAP module for PHP

 This package provides the SOAP module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-soap-dbgsym: debug symbols for php7.4-soap
php7.4-sqlite3: SQLite3 module for PHP

 This package provides the SQLite3 module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-sqlite3-dbgsym: debug symbols for php7.4-sqlite3
php7.4-sybase: Sybase module for PHP

 This package provides the Sybase module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-sybase-dbgsym: debug symbols for php7.4-sybase
php7.4-tidy: tidy module for PHP

 This package provides the tidy module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-tidy-dbgsym: debug symbols for php7.4-tidy
php7.4-xml: DOM, SimpleXML, XML, and XSL module for PHP

 This package provides the DOM, SimpleXML, XML, and XSL module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-xml-dbgsym: debug symbols for php7.4-xml
php7.4-xmlrpc: XMLRPC-EPI module for PHP

 This package provides the XMLRPC-EPI module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-xmlrpc-dbgsym: debug symbols for php7.4-xmlrpc
php7.4-xsl: XSL module for PHP (dummy)

 This package is a transitional dummy package and can be safely
 removed.

php7.4-zip: Zip module for PHP

 This package provides the Zip module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php7.4-zip-dbgsym: debug symbols for php7.4-zip