php-pear 1:1.10.1+submodules+notgz-6ubuntu0.2 source package in Ubuntu
Changelog
php-pear (1:1.10.1+submodules+notgz-6ubuntu0.2) xenial-security; urgency=medium * SECURITY UPDATE: unserialization attack in Archive_Tar - debian/patches/CVE-2020-2894x.patch: catch additional malicious or crafted filenames in submodules/Archive_Tar/Archive/Tar.php. - CVE-2020-28948 - CVE-2020-28949 -- Marc Deslauriers <email address hidden> Mon, 30 Nov 2020 10:03:12 -0500
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Xenial
- Original maintainer:
- Ubuntu Developers
- Architectures:
- all
- Section:
- php
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
php-pear_1.10.1+submodules+notgz.orig.tar.gz | 2.1 MiB | a9ec24292beb2a8caf1b42c0ed801d0105afc63c7dcc57449f12e54caecc815c |
php-pear_1.10.1+submodules+notgz-6ubuntu0.2.debian.tar.xz | 6.3 KiB | 1f4f9b6a80b15e5b9346629146e1a08febe2f6da0c2ca57561fd9a8873288a69 |
php-pear_1.10.1+submodules+notgz-6ubuntu0.2.dsc | 2.1 KiB | c66b40200bcfb9bb4a68e7ff3e0bc68c3aeb68bf70e3c4e3fbb439a0698cd737 |
Available diffs
Binary packages built by this source
- php-pear: PEAR Base System
The PEAR package contains:
* the PEAR installer, for creating, distributing
and installing packages
* the PEAR_Exception PHP error handling mechanism
* the PEAR_ErrorStack advanced error handling mechanism
* the PEAR_Error error handling mechanism
* the OS_Guess class for retrieving info about the OS
where PHP is running on
* the System class for quick handling of common operations
with files and directories
* the PEAR base class
Features in a nutshell:
* full support for channels
* pre-download dependency validation
* new package.xml 2.0 format allows tremendous flexibility while maintaining
BC
* support for optional dependency groups and limited support for
sub-packaging
* robust dependency support
* full dependency validation on uninstall
* remote install for hosts with only ftp access - no more problems with
restricted host installation
* full support for mirroring
* support for bundling several packages into a single tarball
* support for static dependencies on a url-based package
* support for custom file roles and installation tasks