Format: 1.7 Date: Fri, 19 Oct 2007 12:58:34 -0700 Source: php5 Binary: libapache2-mod-php5 php-pear php5 php5-cgi php5-cli php5-common php5-curl php5-dev php5-gd php5-ldap php5-mhash php5-mysql php5-odbc php5-pgsql php5-pspell php5-recode php5-snmp php5-sqlite php5-sybase php5-tidy php5-xmlrpc php5-xsl Architecture: amd64_translations amd64 hppa_translations hppa i386_translations all i386 ia64_translations ia64 lpia_translations lpia powerpc_translations powerpc source sparc_translations sparc Version: 5.2.3-1ubuntu6.1 Distribution: gutsy-security Urgency: low Maintainer: Ubuntu Core Developers Changed-By: Kees Cook Description: libapache2-mod-php5 - server-side, HTML-embedded scripting language (apache 2 module) php5-cgi - server-side, HTML-embedded scripting language (CGI binary) php5-cli - command-line interpreter for the php5 scripting language php5-common - Common files for packages built from the php5 source php5-curl - CURL module for php5 php5-dev - Files for PHP5 module development php5-gd - GD module for php5 php5-ldap - LDAP module for php5 php5-mhash - MHASH module for php5 php5-mysql - MySQL module for php5 php5-odbc - ODBC module for php5 php5-pgsql - PostgreSQL module for php5 php5-pspell - pspell module for php5 php5-recode - recode module for php5 php5-snmp - SNMP module for php5 php5-sqlite - SQLite module for php5 php5-sybase - Sybase / MS SQL Server module for php5 php5-tidy - tidy module for php5 php5-xmlrpc - XML-RPC module for php5 php5-xsl - XSL module for php5 php-pear - PEAR - PHP Extension and Application Repository php5 - server-side, HTML-embedded scripting language (meta-package) Changes: php5 (5.2.3-1ubuntu6.1) gutsy-security; urgency=low . * SECURITY UPDATE: multiple vulnerabilities. Thanks to Sean Finney for help locating upstream fixes. * Add 200-string-wordwrap.patch: wordwrap function can be made to crash. Backported upstream fixes (CVE-2007-3998). * Add 201-strspn-oob-read.patch: memory reading, possible crash via strspn. chunk_split. Backported upstream fixes (CVE-2007-4657). * Add 202-money-format-abuse.patch: money_format format string vulnerable. Backported upstream fixes (CVE-2007-4658). * Add 203-openssl_make_REQ-overflow.patch: overflow in openssl_make_REQ. Applied and corrected upstream fixes (CVE-2007-4662). * Add 204-start-session-cookies.patch: overwrite cookie values. Applied upstream fixes (CVE-2007-3799). * Add 206-chunk_split-fixes.patch: memory reading, possible crash via chunk_split. Merged various upstream fixes (CVE-2007-2872, CVE-2007-4660, CVE-2007-4661). * Add 206-cookie-nesting-fix.patch: corruption/crashes via deeply nested variables. Backported upstream fixes (CVE-2007-1285, CVE-2007-4670). * Add 207-htmlentity-utf8-fix.patch: don't accept partial utf8 sequences. Backported upstream fixes (CVE-2007-5898). * Add 208-session-id-leak.patch: don't send session id to remote forms. Backported upstream fixes (CVE-2007-5899). * References http://www.php.net/releases/5_2_4.php http://www.php.net/releases/5_2_5.php Files: 6d5bd288cdcb90318520183fadad9d4e 222368 web optional php5-common_5.2.3-1ubuntu6.1_amd64.deb 3ea4adce704085e1a4d96f277cd5f5a0 2669432 web optional libapache2-mod-php5_5.2.3-1ubuntu6.1_amd64.deb 1ad96d1ef3fba016fd4a9343b937ec21 5190782 web optional php5-cgi_5.2.3-1ubuntu6.1_amd64.deb 9a3c4309887781d3913618d77b6eed8f 2617922 web optional php5-cli_5.2.3-1ubuntu6.1_amd64.deb c22626ad4746dd929ac045a7c8abdb2c 355044 devel optional php5-dev_5.2.3-1ubuntu6.1_amd64.deb 1d785fc6c2d473d81ae1b18a8b2604dd 24776 web optional php5-curl_5.2.3-1ubuntu6.1_amd64.deb 4beae4ebd5bf3d475d2fa40d267746f0 37824 web optional php5-gd_5.2.3-1ubuntu6.1_amd64.deb f2b0f68f49e8bd75809395403de44d8c 19948 web optional php5-ldap_5.2.3-1ubuntu6.1_amd64.deb 87830c879cbdfb1c91f69c725cd83f18 5510 web optional php5-mhash_5.2.3-1ubuntu6.1_amd64.deb 7356182f0769ad939fd8731ae469cb91 73884 web optional php5-mysql_5.2.3-1ubuntu6.1_amd64.deb 7922c12d41a3b21ab70a28b1863ce9fc 37360 web optional php5-odbc_5.2.3-1ubuntu6.1_amd64.deb bc9c05710bd67e7a72d1bd53adfdb65c 55904 web optional php5-pgsql_5.2.3-1ubuntu6.1_amd64.deb 70046f15d14b12bd793049f9b8f827a9 9634 web optional php5-pspell_5.2.3-1ubuntu6.1_amd64.deb ff56593e7edd7f79aa4a223dc73a9f60 4992 web optional php5-recode_5.2.3-1ubuntu6.1_amd64.deb 05c480a86d08f6af46dd8f10160e0bc7 12348 web optional php5-snmp_5.2.3-1ubuntu6.1_amd64.deb b044849e507fe0728ed307fb9304abe3 39482 web optional php5-sqlite_5.2.3-1ubuntu6.1_amd64.deb 3c9f03d87d3d60532535a7863d815e04 19826 web optional php5-sybase_5.2.3-1ubuntu6.1_amd64.deb c5fe813a07bd42a3733010d8ee5defb0 17882 web optional php5-tidy_5.2.3-1ubuntu6.1_amd64.deb 9c834dcfe0e41f2c8d77c9cbdd0f7dea 40808 web optional php5-xmlrpc_5.2.3-1ubuntu6.1_amd64.deb b1d562c15704f58dbd91a001a9e72ff2 13366 web optional php5-xsl_5.2.3-1ubuntu6.1_amd64.deb d91b87b468b6a2859cd6a92b592744f1 541 raw-translations - php5_5.2.3-1ubuntu6.1_amd64_translations.tar.gz dd7c85c07b80cef0cfecb372ab368e1b 227908 web optional php5-common_5.2.3-1ubuntu6.1_hppa.deb c9ee4717c85cb35d08918679dd89e036 2860360 web optional libapache2-mod-php5_5.2.3-1ubuntu6.1_hppa.deb 0715545662a5f407a17866838059280e 5476696 web optional php5-cgi_5.2.3-1ubuntu6.1_hppa.deb 5fb61a59956888078469ef414891ff14 2757840 web optional php5-cli_5.2.3-1ubuntu6.1_hppa.deb 38cfeca4ba8c645dd34cef71e5403e0f 355212 devel optional php5-dev_5.2.3-1ubuntu6.1_hppa.deb debb4f25e88e8ce32513421fb9904b18 27990 web optional php5-curl_5.2.3-1ubuntu6.1_hppa.deb 1cfd1090229f3b82e60a5ca1c253437e 40322 web optional php5-gd_5.2.3-1ubuntu6.1_hppa.deb 182a17f17554c04137e3137a063d9acf 21566 web optional php5-ldap_5.2.3-1ubuntu6.1_hppa.deb 0f923aa9972a3ae0592842403c4d9465 5894 web optional php5-mhash_5.2.3-1ubuntu6.1_hppa.deb 7bc82423f5c7105c058ed0052720386b 77092 web optional php5-mysql_5.2.3-1ubuntu6.1_hppa.deb a2bad08851f5c07515346d6bd8c1540f 38338 web optional php5-odbc_5.2.3-1ubuntu6.1_hppa.deb 303b970e8e9ff6da21ec7f7a47d8c2f4 59778 web optional php5-pgsql_5.2.3-1ubuntu6.1_hppa.deb cf9ca65324aba7b3173a8f8cae1fa760 9806 web optional php5-pspell_5.2.3-1ubuntu6.1_hppa.deb 6f1f4a91ce33e6977d7930563343b6d6 5586 web optional php5-recode_5.2.3-1ubuntu6.1_hppa.deb 7b48fdc4696957fb3e6d98f35666b7aa 12844 web optional php5-snmp_5.2.3-1ubuntu6.1_hppa.deb 8eb42acac50e1893e62ce606447ab425 41478 web optional php5-sqlite_5.2.3-1ubuntu6.1_hppa.deb f8fd2c9660e146cb3e3cc4714ec846d5 21328 web optional php5-sybase_5.2.3-1ubuntu6.1_hppa.deb 09d93cb96fe7cceec09b5d4522c73b4c 19740 web optional php5-tidy_5.2.3-1ubuntu6.1_hppa.deb 03da9de03158d20fe69895232982dd67 42690 web optional php5-xmlrpc_5.2.3-1ubuntu6.1_hppa.deb 6bedbf5e7addc118b3941d26ab8e21b1 14202 web optional php5-xsl_5.2.3-1ubuntu6.1_hppa.deb 5ab226ed1a0ef0a33e3afbd41cc3f54a 540 raw-translations - php5_5.2.3-1ubuntu6.1_hppa_translations.tar.gz 636030c85dec82c329f74c8f67517591 218614 web optional php5-common_5.2.3-1ubuntu6.1_i386.deb ed3f3ec8fcf7f2ac08a116c496291a58 2542560 web optional libapache2-mod-php5_5.2.3-1ubuntu6.1_i386.deb 135dca30e879461e1368e1b3edb1dab0 5024782 web optional php5-cgi_5.2.3-1ubuntu6.1_i386.deb cf84aafba0e6cffabee54d22f60432a7 2530520 web optional php5-cli_5.2.3-1ubuntu6.1_i386.deb 8bb483287b7bbad110f541e21da9ef3a 355076 devel optional php5-dev_5.2.3-1ubuntu6.1_i386.deb 7e4184eda96d5672e8a2887025bd9067 23604 web optional php5-curl_5.2.3-1ubuntu6.1_i386.deb 25dc1fb7a2dda324a5d1595b8c5f95b0 33492 web optional php5-gd_5.2.3-1ubuntu6.1_i386.deb 19c63b8dc13e31edc5cc8b47f8c1efc9 17972 web optional php5-ldap_5.2.3-1ubuntu6.1_i386.deb b18919e7f01a3a596943f975bee4bd68 5198 web optional php5-mhash_5.2.3-1ubuntu6.1_i386.deb 0e7f8cefc013fa67764c8430b870916c 65218 web optional php5-mysql_5.2.3-1ubuntu6.1_i386.deb d995a5e813fa1f3d0e650845276bafed 34438 web optional php5-odbc_5.2.3-1ubuntu6.1_i386.deb ab61d651a96f1e4fcddec68950a8b5ed 51316 web optional php5-pgsql_5.2.3-1ubuntu6.1_i386.deb c80841fd318bfa03bbb4dea783e90eb3 8702 web optional php5-pspell_5.2.3-1ubuntu6.1_i386.deb 8a630a09d40517952723c384d17267ff 4778 web optional php5-recode_5.2.3-1ubuntu6.1_i386.deb 47f4274da673c8dab33edb1fbae11651 11568 web optional php5-snmp_5.2.3-1ubuntu6.1_i386.deb a7ceb5314d8966e9df03c5b386b891c9 34502 web optional php5-sqlite_5.2.3-1ubuntu6.1_i386.deb 73c4f011ea7fd8588040de7067b916cc 18144 web optional php5-sybase_5.2.3-1ubuntu6.1_i386.deb 9276ba95ce0e146d586c35a87447ab98 16352 web optional php5-tidy_5.2.3-1ubuntu6.1_i386.deb c88103973aec107d1197a398f0a4731e 37722 web optional php5-xmlrpc_5.2.3-1ubuntu6.1_i386.deb 2638cf07f85fd75e462ab74480ee288e 12402 web optional php5-xsl_5.2.3-1ubuntu6.1_i386.deb 4c35f7c4e455be27b5bde0c6ee715e61 540 raw-translations - php5_5.2.3-1ubuntu6.1_i386_translations.tar.gz 68d8b2ea8ee0346a67527d9f8f5c8d74 1082 web optional php5_5.2.3-1ubuntu6.1_all.deb 4900581fffc83ff03478da85a285f0d1 351454 web optional php-pear_5.2.3-1ubuntu6.1_all.deb b54dad9ddc8cfcd9206b1aee8b98133a 239502 web optional php5-common_5.2.3-1ubuntu6.1_ia64.deb 12ef09bcecddb2f1392534a73fa17852 3447062 web optional libapache2-mod-php5_5.2.3-1ubuntu6.1_ia64.deb d653d3a1c827f443a87346273e6801bb 6739660 web optional php5-cgi_5.2.3-1ubuntu6.1_ia64.deb 251022d5458f00ed26c5a1260badf0e9 3391076 web optional php5-cli_5.2.3-1ubuntu6.1_ia64.deb f21ec6bfbb74dc35430eb7fe3e14e4f9 355046 devel optional php5-dev_5.2.3-1ubuntu6.1_ia64.deb fcff901623c162821ff254709d64cb8d 33892 web optional php5-curl_5.2.3-1ubuntu6.1_ia64.deb b88072bec2e733686a5c733a67b84d0f 50926 web optional php5-gd_5.2.3-1ubuntu6.1_ia64.deb 8bc78de0f5d5cef3c52faf45f1f37ef5 26552 web optional php5-ldap_5.2.3-1ubuntu6.1_ia64.deb 049c32d466fb0dd8684dff9d8f35c7c6 6508 web optional php5-mhash_5.2.3-1ubuntu6.1_ia64.deb 6cfba911b4f0d15e3cdfa4f5c8ff4305 97262 web optional php5-mysql_5.2.3-1ubuntu6.1_ia64.deb 8cb32f92d3a759d85f7173edbcc6d34b 51326 web optional php5-odbc_5.2.3-1ubuntu6.1_ia64.deb d66f48cc5ff0d8e4170cdba264997432 78290 web optional php5-pgsql_5.2.3-1ubuntu6.1_ia64.deb 92f4d002534fee34742132976da85fb1 12052 web optional php5-pspell_5.2.3-1ubuntu6.1_ia64.deb 5af3f8e2f377b649394d2d0818076240 6194 web optional php5-recode_5.2.3-1ubuntu6.1_ia64.deb 78861788464fe67600a2ecf7053624bc 15710 web optional php5-snmp_5.2.3-1ubuntu6.1_ia64.deb 0d2e5562d192d8930617b6fc27191bfb 55746 web optional php5-sqlite_5.2.3-1ubuntu6.1_ia64.deb f2bb692fa9d7d7ed454281c5acfb928d 27306 web optional php5-sybase_5.2.3-1ubuntu6.1_ia64.deb cf0f97a0f1f6ba2ca951425f7d9de6bf 25384 web optional php5-tidy_5.2.3-1ubuntu6.1_ia64.deb b27d6f5c60ab168e1e195e3a30539229 56118 web optional php5-xmlrpc_5.2.3-1ubuntu6.1_ia64.deb 16b276f99e9af2dabe5a74c456dd75e1 17778 web optional php5-xsl_5.2.3-1ubuntu6.1_ia64.deb 4989ea4341f2b63452be555fa8464a00 542 raw-translations - php5_5.2.3-1ubuntu6.1_ia64_translations.tar.gz 5b1fcb873c5edcf3bf9b9961754abbab 218136 web optional php5-common_5.2.3-1ubuntu6.1_lpia.deb a214bc8f7cb08fa2fa7597ea6d187950 2514662 web optional libapache2-mod-php5_5.2.3-1ubuntu6.1_lpia.deb e55245d01fd91b014bb25d31d1a53ef5 4969886 web optional php5-cgi_5.2.3-1ubuntu6.1_lpia.deb 78561b4b41792b4d92eddeef2fa7942a 2502184 web optional php5-cli_5.2.3-1ubuntu6.1_lpia.deb 85561b5f5ce74874e7435bfe5f5117d0 355092 devel optional php5-dev_5.2.3-1ubuntu6.1_lpia.deb 4b846b50817aa9fabc88e0a0221acaa4 23192 web optional php5-curl_5.2.3-1ubuntu6.1_lpia.deb 6e225e39c2a4ffe567ebf02e46b0741f 32842 web optional php5-gd_5.2.3-1ubuntu6.1_lpia.deb 63f0e51f1470e8f822320a98f2f9da75 17866 web optional php5-ldap_5.2.3-1ubuntu6.1_lpia.deb c47f730323169637063ea27e964f00b3 5090 web optional php5-mhash_5.2.3-1ubuntu6.1_lpia.deb 2d676d1b5d255c601d49a7c33d837cea 64042 web optional php5-mysql_5.2.3-1ubuntu6.1_lpia.deb 73a775c4b112f49f1e5c02c25413f7bf 33956 web optional php5-odbc_5.2.3-1ubuntu6.1_lpia.deb 800ddf445093f5a24f7596bba046b300 50766 web optional php5-pgsql_5.2.3-1ubuntu6.1_lpia.deb 55ede1cbb28ad8ab79f7ea5ab785124c 8640 web optional php5-pspell_5.2.3-1ubuntu6.1_lpia.deb 0f88830fc388462f53dc82b4835b4f64 4710 web optional php5-recode_5.2.3-1ubuntu6.1_lpia.deb c16ee33259a65d4566f5ebc086273c49 11500 web optional php5-snmp_5.2.3-1ubuntu6.1_lpia.deb 1554f7f53097d2b3cda4d4bd42714642 33728 web optional php5-sqlite_5.2.3-1ubuntu6.1_lpia.deb 3dab00d34258b9c077dc051ae65c2332 18068 web optional php5-sybase_5.2.3-1ubuntu6.1_lpia.deb ecf40d0448deac31eb64ad077d6815d9 16028 web optional php5-tidy_5.2.3-1ubuntu6.1_lpia.deb a5932371587b065753194aa7225b9cfe 36808 web optional php5-xmlrpc_5.2.3-1ubuntu6.1_lpia.deb 6b0375afb4f17effce61c2e70d9fdf1b 12218 web optional php5-xsl_5.2.3-1ubuntu6.1_lpia.deb 75cbba1e746b97877ba5b02cd2d48241 540 raw-translations - php5_5.2.3-1ubuntu6.1_lpia_translations.tar.gz 49c96201e491ba4b8673abb0598a422b 225732 web optional php5-common_5.2.3-1ubuntu6.1_powerpc.deb a9b23e0dcd5f50a2ffbc9c71eaea1ac8 2742570 web optional libapache2-mod-php5_5.2.3-1ubuntu6.1_powerpc.deb fe48c41c9a2b6a3fca3a72d46ef1d910 5270460 web optional php5-cgi_5.2.3-1ubuntu6.1_powerpc.deb 2d31efce60243b0fe3d5f4354704cf75 2654286 web optional php5-cli_5.2.3-1ubuntu6.1_powerpc.deb b93d73b53d981dc77e0785d4aa7bf8fd 355086 devel optional php5-dev_5.2.3-1ubuntu6.1_powerpc.deb 1d40f7609f68a3d72074ef21bcece62b 28064 web optional php5-curl_5.2.3-1ubuntu6.1_powerpc.deb 65279e4f18d3cf7bbc9377b1b30a6584 39114 web optional php5-gd_5.2.3-1ubuntu6.1_powerpc.deb 2f0a74a889f2877782caf65afdc9edc6 21730 web optional php5-ldap_5.2.3-1ubuntu6.1_powerpc.deb 21c102b687266ae15254c584750f4331 7640 web optional php5-mhash_5.2.3-1ubuntu6.1_powerpc.deb f508acecf0c21420a449982d50bcb082 78026 web optional php5-mysql_5.2.3-1ubuntu6.1_powerpc.deb 30f1bc53f922d49546d4c68c8fe11ca1 40974 web optional php5-odbc_5.2.3-1ubuntu6.1_powerpc.deb 38616b226591a00cf9977d3b4a629ee6 59572 web optional php5-pgsql_5.2.3-1ubuntu6.1_powerpc.deb 049f1585cbe69a08c6ee76ee68060052 11250 web optional php5-pspell_5.2.3-1ubuntu6.1_powerpc.deb 040c0673ae3f6e6d57cfe175746a717a 7164 web optional php5-recode_5.2.3-1ubuntu6.1_powerpc.deb ae6c1fd1176702f1dd483d4dafc7736d 14116 web optional php5-snmp_5.2.3-1ubuntu6.1_powerpc.deb c53061b35703e52c867ea1d387408bb1 42674 web optional php5-sqlite_5.2.3-1ubuntu6.1_powerpc.deb 7ad512a5c20b7d2accdd6d1b4e82ba4f 21862 web optional php5-sybase_5.2.3-1ubuntu6.1_powerpc.deb 4fc1be6245ac85392663f83cb00b04c4 20136 web optional php5-tidy_5.2.3-1ubuntu6.1_powerpc.deb a2b9573cf357dc37b2c86182cd67e3c5 43134 web optional php5-xmlrpc_5.2.3-1ubuntu6.1_powerpc.deb aacc4dc3b6c955e0129c5f487de0ca51 15468 web optional php5-xsl_5.2.3-1ubuntu6.1_powerpc.deb f2af76e0fdba1ab3ec6371fe92ea2df7 541 raw-translations - php5_5.2.3-1ubuntu6.1_powerpc_translations.tar.gz 24991aa3488be9bd17b36f4f3574a40b 1921 web optional php5_5.2.3-1ubuntu6.1.dsc 8e1044f63c4ee04b64729598ecd7a60d 126386 web optional php5_5.2.3-1ubuntu6.1.diff.gz 069f8140f908802751209f77666521d7 218582 web optional php5-common_5.2.3-1ubuntu6.1_sparc.deb ea6097d4309dd7e445d65f823e95ab88 2576836 web optional libapache2-mod-php5_5.2.3-1ubuntu6.1_sparc.deb 18b063242eb17b3365a6afe06ff81df9 5020882 web optional php5-cgi_5.2.3-1ubuntu6.1_sparc.deb 90fa85c8db713167dae471d4c2f2c1d4 2529358 web optional php5-cli_5.2.3-1ubuntu6.1_sparc.deb 6cb568e03753b07015ea39bfe44c5f96 355082 devel optional php5-dev_5.2.3-1ubuntu6.1_sparc.deb 88b696ea7869bcbf2521ae2ddd52e2d7 24480 web optional php5-curl_5.2.3-1ubuntu6.1_sparc.deb eda60fb696db0b02f341849dd3e47844 34324 web optional php5-gd_5.2.3-1ubuntu6.1_sparc.deb 01f82710d91ea5edf7ce434b192c2b72 17964 web optional php5-ldap_5.2.3-1ubuntu6.1_sparc.deb 3ffe32de1ab5a8697dd61ffac69d3c1c 5068 web optional php5-mhash_5.2.3-1ubuntu6.1_sparc.deb 4f5b97fb934fd812da877fcabed7d2f8 64742 web optional php5-mysql_5.2.3-1ubuntu6.1_sparc.deb c92f7e6e945a851fdf2e6f950e8e6789 32850 web optional php5-odbc_5.2.3-1ubuntu6.1_sparc.deb 01fc5022e38dc49033e20349865e12f5 50130 web optional php5-pgsql_5.2.3-1ubuntu6.1_sparc.deb 727c89c142b6fcfa7a036d6682711c72 8620 web optional php5-pspell_5.2.3-1ubuntu6.1_sparc.deb cd41c9b1eecbadac21ad8beb07f435db 4754 web optional php5-recode_5.2.3-1ubuntu6.1_sparc.deb 5fb0ecaa1f3f86162f6153bab654f5b9 11430 web optional php5-snmp_5.2.3-1ubuntu6.1_sparc.deb 9820260d50f6e76e2ddde0e77405f636 33260 web optional php5-sqlite_5.2.3-1ubuntu6.1_sparc.deb 2abd230367199111f8ddc5fe74a79a35 17920 web optional php5-sybase_5.2.3-1ubuntu6.1_sparc.deb 40b95764d22dee71f02a6709629fd2a1 16488 web optional php5-tidy_5.2.3-1ubuntu6.1_sparc.deb 8b514d026ba588e22cc4c90009d3ce0b 36572 web optional php5-xmlrpc_5.2.3-1ubuntu6.1_sparc.deb 041af7fb5cd4b2cc11de8265a6f0790b 11954 web optional php5-xsl_5.2.3-1ubuntu6.1_sparc.deb dac224d52d322dfd0a0312a983ae59e4 540 raw-translations - php5_5.2.3-1ubuntu6.1_sparc_translations.tar.gz Original-Maintainer: Debian PHP Maintainers