php5 5.2.4-2ubuntu5.22 source package in Ubuntu

Changelog

php5 (5.2.4-2ubuntu5.22) hardy-security; urgency=low

  * SECURITY UPDATE: memory allocation failure denial of service
    - debian/patches/php5-CVE-2011-4153.patch: check result of
      zend_strdup() and calloc() for failed allocations
    - CVE-2011-4153
  * SECURITY UPDATE: predictable hash collision denial of service
    - debian/patches/php5-CVE-2011-4885.patch: add max_input_vars
      directive with default limit of 1000
    - ATTENTION: this update changes previous php5 behavior by
      limiting the number of external input variables to 1000.
      This may be increased by adding a "max_input_vars"
      directive to the php.ini configuration file. See
      http://www.php.net/manual/en/info.configuration.php#ini.max-input-vars
      for more information.
    - CVE-2011-4885
  * SECURITY UPDATE: remote code execution vulnerability introduced by
    the fix for CVE-2011-4885
    - debian/patches/php5-CVE-2012-0830.patch: return rather than
      continuing if max_input_vars limit is reached
    - CVE-2012-0830
  * SECURITY UPDATE: XSLT arbitrary file overwrite attack
    - debian/patches/php5-CVE-2012-0057.patch: add xsl.security_prefs
      ini option to define forbidden operations within XSLT stylesheets
    - CVE-2012-0057
  * SECURITY UPDATE: PDORow session denial of service
    - debian/patches/php5-CVE-2012-0788.patch: fail gracefully when
      attempting to serialize PDORow instances
    - CVE-2012-0788
  * SECURITY UPDATE: magic_quotes_gpc remote disable vulnerability
    - debian/patches/php5-CVE-2012-0831.patch: always restore
      magic_quote_gpc on request shutdown
    - CVE-2012-0831
 -- Steve Beattie <email address hidden>   Wed, 08 Feb 2012 17:31:25 -0800

Upload details

Uploaded by:
Steve Beattie on 2012-02-09
Uploaded to:
Hardy
Original maintainer:
Ubuntu Developers
Component:
main
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size MD5 Checksum
php5_5.2.4.orig.tar.gz 9.3 MiB 0826e231c3148b29fd039d7a8c893ad3
php5_5.2.4-2ubuntu5.22.diff.gz 194.5 KiB cab43846935ca4c439175729e1641c70
php5_5.2.4-2ubuntu5.22.dsc 2.5 KiB 5baa618053185ab8d9b48b08423de4f1

View changes file

Binary packages built by this source

libapache2-mod-php5: No summary available for libapache2-mod-php5 in ubuntu hardy.

No description available for libapache2-mod-php5 in ubuntu hardy.

php-pear: No summary available for php-pear in ubuntu hardy.

No description available for php-pear in ubuntu hardy.

php5: No summary available for php5 in ubuntu hardy.

No description available for php5 in ubuntu hardy.

php5-cgi: No summary available for php5-cgi in ubuntu hardy.

No description available for php5-cgi in ubuntu hardy.

php5-cli: No summary available for php5-cli in ubuntu hardy.

No description available for php5-cli in ubuntu hardy.

php5-common: No summary available for php5-common in ubuntu hardy.

No description available for php5-common in ubuntu hardy.

php5-curl: No summary available for php5-curl in ubuntu hardy.

No description available for php5-curl in ubuntu hardy.

php5-dev: No summary available for php5-dev in ubuntu hardy.

No description available for php5-dev in ubuntu hardy.

php5-gd: No summary available for php5-gd in ubuntu hardy.

No description available for php5-gd in ubuntu hardy.

php5-gmp: No summary available for php5-gmp in ubuntu hardy.

No description available for php5-gmp in ubuntu hardy.

php5-ldap: No summary available for php5-ldap in ubuntu hardy.

No description available for php5-ldap in ubuntu hardy.

php5-mhash: No summary available for php5-mhash in ubuntu hardy.

No description available for php5-mhash in ubuntu hardy.

php5-mysql: No summary available for php5-mysql in ubuntu hardy.

No description available for php5-mysql in ubuntu hardy.

php5-odbc: No summary available for php5-odbc in ubuntu hardy.

No description available for php5-odbc in ubuntu hardy.

php5-pgsql: No summary available for php5-pgsql in ubuntu hardy.

No description available for php5-pgsql in ubuntu hardy.

php5-pspell: No summary available for php5-pspell in ubuntu hardy.

No description available for php5-pspell in ubuntu hardy.

php5-recode: No summary available for php5-recode in ubuntu hardy.

No description available for php5-recode in ubuntu hardy.

php5-snmp: No summary available for php5-snmp in ubuntu hardy.

No description available for php5-snmp in ubuntu hardy.

php5-sqlite: No summary available for php5-sqlite in ubuntu hardy.

No description available for php5-sqlite in ubuntu hardy.

php5-sybase: No summary available for php5-sybase in ubuntu hardy.

No description available for php5-sybase in ubuntu hardy.

php5-tidy: No summary available for php5-tidy in ubuntu hardy.

No description available for php5-tidy in ubuntu hardy.

php5-xmlrpc: No summary available for php5-xmlrpc in ubuntu hardy.

No description available for php5-xmlrpc in ubuntu hardy.

php5-xsl: No summary available for php5-xsl in ubuntu hardy.

No description available for php5-xsl in ubuntu hardy.