php5 5.3.6-13ubuntu3.8 source package in Ubuntu

Changelog

php5 (5.3.6-13ubuntu3.8) oneiric-security; urgency=low

  * SECURITY UPDATE: denial of service via invalid tidy objects
    - debian/patches/CVE-2012-0781.patch: track initialization in
      ext/tidy/tidy.c, added tests to ext/tidy/tests/004.phpt,
      ext/tidy/tests/bug54682.phpt.
    - CVE-2012-0781
  * SECURITY UPDATE: denial of service or possible directory traversal via
    invalid filename.
    - debian/patches/CVE-2012-1172.patch: ensure brackets get closed in
      main/rfc1867.c, add test to tests/basic/bug55500.phpt.
    - CVE-2012-1172
  * SECURITY UPDATE: password truncation via invalid byte
    - debian/patches/CVE-2012-2143.patch: improve logic in
      ext/standard/crypt_freesec.c, add test to
      ext/standard/tests/strings/crypt_chars.phpt.
    - CVE-2012-2143
  * SECURITY UPDATE: improve php5-cgi query string parameter parsing
    - debian/patches/CVE-2012-233x.patch: improve parsing in
      sapi/cgi/cgi_main.c.
    - CVE-2012-2335
    - CVE-2012-2336
  * SECURITY UPDATE: phar extension heap overflow
    - debian/patches/CVE-2012-2386.patch: check for overflow in
      ext/phar/tar.c.
    - CVE-2012-2386
 -- Marc Deslauriers <email address hidden>   Tue, 12 Jun 2012 15:31:43 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2012-06-13
Uploaded to:
Oneiric
Original maintainer:
Ubuntu Developers
Component:
main
Architectures:
any
Section:
php
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size MD5 Checksum
php5_5.3.6.orig.tar.gz 13.7 MiB 88a2b00047bc53afbbbdf10ebe28a57e
php5_5.3.6-13ubuntu3.8.diff.gz 876.4 KiB 7b70be813b600bc514c12605ceff297a
php5_5.3.6-13ubuntu3.8.dsc 3.2 KiB 2aa703aa91b23ad07d615d0a2328d736

View changes file

Binary packages built by this source

libapache2-mod-php5: No summary available for libapache2-mod-php5 in ubuntu oneiric.

No description available for libapache2-mod-php5 in ubuntu oneiric.

libapache2-mod-php5filter: No summary available for libapache2-mod-php5filter in ubuntu oneiric.

No description available for libapache2-mod-php5filter in ubuntu oneiric.

php-pear: No summary available for php-pear in ubuntu oneiric.

No description available for php-pear in ubuntu oneiric.

php5: No summary available for php5 in ubuntu oneiric.

No description available for php5 in ubuntu oneiric.

php5-cgi: No summary available for php5-cgi in ubuntu oneiric.

No description available for php5-cgi in ubuntu oneiric.

php5-cli: No summary available for php5-cli in ubuntu oneiric.

No description available for php5-cli in ubuntu oneiric.

php5-common: No summary available for php5-common in ubuntu oneiric.

No description available for php5-common in ubuntu oneiric.

php5-curl: No summary available for php5-curl in ubuntu oneiric.

No description available for php5-curl in ubuntu oneiric.

php5-dbg: No summary available for php5-dbg in ubuntu oneiric.

No description available for php5-dbg in ubuntu oneiric.

php5-dev: No summary available for php5-dev in ubuntu oneiric.

No description available for php5-dev in ubuntu oneiric.

php5-enchant: No summary available for php5-enchant in ubuntu oneiric.

No description available for php5-enchant in ubuntu oneiric.

php5-fpm: No summary available for php5-fpm in ubuntu oneiric.

No description available for php5-fpm in ubuntu oneiric.

php5-gd: No summary available for php5-gd in ubuntu oneiric.

No description available for php5-gd in ubuntu oneiric.

php5-gmp: No summary available for php5-gmp in ubuntu oneiric.

No description available for php5-gmp in ubuntu oneiric.

php5-intl: No summary available for php5-intl in ubuntu oneiric.

No description available for php5-intl in ubuntu oneiric.

php5-ldap: No summary available for php5-ldap in ubuntu oneiric.

No description available for php5-ldap in ubuntu oneiric.

php5-mysql: No summary available for php5-mysql in ubuntu oneiric.

No description available for php5-mysql in ubuntu oneiric.

php5-odbc: No summary available for php5-odbc in ubuntu oneiric.

No description available for php5-odbc in ubuntu oneiric.

php5-pgsql: No summary available for php5-pgsql in ubuntu oneiric.

No description available for php5-pgsql in ubuntu oneiric.

php5-pspell: No summary available for php5-pspell in ubuntu oneiric.

No description available for php5-pspell in ubuntu oneiric.

php5-recode: No summary available for php5-recode in ubuntu oneiric.

No description available for php5-recode in ubuntu oneiric.

php5-snmp: No summary available for php5-snmp in ubuntu oneiric.

No description available for php5-snmp in ubuntu oneiric.

php5-sqlite: No summary available for php5-sqlite in ubuntu oneiric.

No description available for php5-sqlite in ubuntu oneiric.

php5-sybase: No summary available for php5-sybase in ubuntu oneiric.

No description available for php5-sybase in ubuntu oneiric.

php5-tidy: No summary available for php5-tidy in ubuntu oneiric.

No description available for php5-tidy in ubuntu oneiric.

php5-xmlrpc: No summary available for php5-xmlrpc in ubuntu oneiric.

No description available for php5-xmlrpc in ubuntu oneiric.

php5-xsl: No summary available for php5-xsl in ubuntu oneiric.

No description available for php5-xsl in ubuntu oneiric.