Ubuntu

“php5” 5.1.2-1ubuntu3.10 source package in Ubuntu

Changelog

php5 (5.1.2-1ubuntu3.10) dapper-security; urgency=low

  * SECURITY UPDATE: multiple vulnerabilities.  Thanks to Sean Finney for
    help locating upstream fixes.
  * Add 200-string-wordwrap.patch: wordwrap function can be made to crash.
    Backported upstream fixes (CVE-2007-3998).
  * Add 201-strspn-oob-read.patch: memory reading, possible crash via strspn.
    chunk_split.  Backported upstream fixes (CVE-2007-4657).
  * Add 202-money-format-abuse.patch: money_format format string vulnerable.
    Backported upstream fixes (CVE-2007-4658).
  * Add 203-openssl_make_REQ-overflow.patch: overflow in openssl_make_REQ.
    Applied and corrected upstream fixes (CVE-2007-4662).
  * Add 204-start-session-cookies.patch: overwrite cookie values.
    Applied upstream fixes (CVE-2007-3799).
  * Add 206-chunk_split-fixes.patch: memory reading, possible crash via
    chunk_split.  Merged various upstream fixes (CVE-2007-2872, CVE-2007-4660,
    CVE-2007-4661).
  * Add 206-cookie-nesting-fix.patch: corruption/crashes via deeply nested
    variables.  Backported upstream fixes (CVE-2007-1285, CVE-2007-4670).
  * Add 207-htmlentity-utf8-fix.patch: don't accept partial utf8 sequences.
    Backported upstream fixes (CVE-2007-5898).
  * Add 208-session-id-leak.patch: don't send session id to remote forms.
    Backported upstream fixes (CVE-2007-5899).
  * References
    http://www.php.net/releases/5_2_4.php
    http://www.php.net/releases/5_2_5.php

 -- Kees Cook <email address hidden>   Fri, 19 Oct 2007 12:58:34 -0700

Upload details

Uploaded by:
Kees Cook on 2007-11-29
Uploaded to:
Dapper
Original maintainer:
Debian PHP Maintainers
Component:
main
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size MD5 Checksum
php5_5.1.2.orig.tar.gz 7.7 MiB b5b6564e8c6a0d5bc1d2b4787480d792
php5_5.1.2-1ubuntu3.10.diff.gz 120.1 KiB ba8af2e72aaa0a9d3494e95a0e5cc52b
php5_5.1.2-1ubuntu3.10.dsc 1.7 KiB 21252de5bcac69fe00a62e7ae5479fbf

Binary packages built by this source

libapache2-mod-php5: No summary available for libapache2-mod-php5 in ubuntu dapper.

No description available for libapache2-mod-php5 in ubuntu dapper.

php-pear: No summary available for php-pear in ubuntu dapper.

No description available for php-pear in ubuntu dapper.

php5: No summary available for php5 in ubuntu dapper.

No description available for php5 in ubuntu dapper.

php5-cgi: No summary available for php5-cgi in ubuntu dapper.

No description available for php5-cgi in ubuntu dapper.

php5-cli: No summary available for php5-cli in ubuntu dapper.

No description available for php5-cli in ubuntu dapper.

php5-common: No summary available for php5-common in ubuntu dapper.

No description available for php5-common in ubuntu dapper.

php5-curl: No summary available for php5-curl in ubuntu dapper.

No description available for php5-curl in ubuntu dapper.

php5-dev: No summary available for php5-dev in ubuntu dapper.

No description available for php5-dev in ubuntu dapper.

php5-gd: No summary available for php5-gd in ubuntu dapper.

No description available for php5-gd in ubuntu dapper.

php5-ldap: No summary available for php5-ldap in ubuntu dapper.

No description available for php5-ldap in ubuntu dapper.

php5-mhash: No summary available for php5-mhash in ubuntu dapper.

No description available for php5-mhash in ubuntu dapper.

php5-mysql: No summary available for php5-mysql in ubuntu dapper.

No description available for php5-mysql in ubuntu dapper.

php5-mysqli: No summary available for php5-mysqli in ubuntu dapper.

No description available for php5-mysqli in ubuntu dapper.

php5-odbc: No summary available for php5-odbc in ubuntu dapper.

No description available for php5-odbc in ubuntu dapper.

php5-pgsql: No summary available for php5-pgsql in ubuntu dapper.

No description available for php5-pgsql in ubuntu dapper.

php5-recode: No summary available for php5-recode in ubuntu dapper.

No description available for php5-recode in ubuntu dapper.

php5-snmp: No summary available for php5-snmp in ubuntu dapper.

No description available for php5-snmp in ubuntu dapper.

php5-sqlite: No summary available for php5-sqlite in ubuntu dapper.

No description available for php5-sqlite in ubuntu dapper.

php5-sybase: No summary available for php5-sybase in ubuntu dapper.

No description available for php5-sybase in ubuntu dapper.

php5-xmlrpc: No summary available for php5-xmlrpc in ubuntu dapper.

No description available for php5-xmlrpc in ubuntu dapper.

php5-xsl: No summary available for php5-xsl in ubuntu dapper.

No description available for php5-xsl in ubuntu dapper.