Ubuntu
php5 package

php5 5.6.11+dfsg-1ubuntu3 source package in Ubuntu

Changelog

php5 (5.6.11+dfsg-1ubuntu3) wily; urgency=medium

  * SECURITY UPDATE: multiple use-after-free issues in unserialize()
    - debian/patches/CVE-2015-6831-1.patch: fix SPLArrayObject in
      ext/spl/spl_array.c, added test to ext/spl/tests/bug70166.phpt.
    - debian/patches/CVE-2015-6831-2.patch: fix SplObjectStorage in
      ext/spl/spl_observer.c, added test to ext/spl/tests/bug70168.phpt.
    - debian/patches/CVE-2015-6831-3.patch: fix SplDoublyLinkedList in
      ext/spl/spl_dllist.c, added test to ext/spl/tests/bug70169.phpt.
    - CVE-2015-6831
  * SECURITY UPDATE: dangling pointer in the unserialization of ArrayObject
    items
    - debian/patches/CVE-2015-6832.patch: fix dangling pointer in
      ext/spl/spl_array.c, added test to ext/spl/tests/bug70068.phpt.
    - CVE-2015-6832
  * SECURITY UPDATE: phar files extracted outside of destination dir
    - debian/patches/CVE-2015-6833-1.patch: limit extracted files to given
      directory in ext/phar/phar_object.c.
    - debian/patches/CVE-2015-6833-2.patch: use emalloc in
      ext/phar/phar_object.c.
    - CVE-2015-6833
  * SECURITY UPDATE: multiple vulnerabilities in unserialize()
    - debian/patches/CVE-2015-6834-1.patch: fix use-after-free in
      ext/standard/var.c, ext/standard/var_unserializer.*.
    - debian/patches/CVE-2015-6834-2.patch: fix use-after-free in
      ext/spl/spl_observer.c, added test to ext/spl/tests/bug70365.phpt.
    - debian/patches/CVE-2015-6834-3.patch: fix use-after-free in
      ext/spl/spl_dllist.c, added test to ext/spl/tests/bug70366.phpt.
    - CVE-2015-6834
  * SECURITY UPDATE: use after free in session deserializer
    - debian/patches/CVE-2015-6835-1.patch: fix use after free in
      ext/session/session.c, ext/standard/var_unserializer.*
      fixed tests in ext/session/tests/session_decode_error2.phpt,
      ext/session/tests/session_decode_variation3.phpt.
    - debian/patches/CVE-2015-6835-2.patch: add more fixes to
      ext/session/session.c.
    - CVE-2015-6835
  * SECURITY UPDATE: SOAP serialize_function_call() type confusion
    - debian/patches/CVE-2015-6836.patch: check type in ext/soap/soap.c,
      added test to ext/soap/tests/bug70388.phpt.
    - CVE-2015-6836
  * SECURITY UPDATE: NULL pointer dereference in XSLTProcessor class
    - debian/patches/CVE-2015-6837-6838.patch: fix logic in
      ext/xsl/xsltprocessor.c.
    - CVE-2015-6837
    - CVE-2015-6838

 -- Marc Deslauriers <email address hidden>  Mon, 28 Sep 2015 07:26:44 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Wily
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
php
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
php5_5.6.11+dfsg.orig.tar.xz 11.0 MiB d3d0c57daa5d7111bccaef80d05c46c223ef98a559f4117d615cb4f310aea9a5
php5_5.6.11+dfsg-1ubuntu3.debian.tar.xz 137.5 KiB 58846dee6e30dbc2d0bfdad4a07352cc35c7d56d17df9be5cbcb3446abd34616
php5_5.6.11+dfsg-1ubuntu3.dsc 4.7 KiB 7e395cd71e0494a9a9a513e6ee1846ea571253a181698420eb89bb134cb9d5bf

View changes file

Binary packages built by this source

libapache2-mod-php5: No summary available for libapache2-mod-php5 in ubuntu wily.

No description available for libapache2-mod-php5 in ubuntu wily.

libapache2-mod-php5-dbgsym: No summary available for libapache2-mod-php5-dbgsym in ubuntu wily.

No description available for libapache2-mod-php5-dbgsym in ubuntu wily.

libapache2-mod-php5filter: No summary available for libapache2-mod-php5filter in ubuntu xenial.

No description available for libapache2-mod-php5filter in ubuntu xenial.

libapache2-mod-php5filter-dbgsym: No summary available for libapache2-mod-php5filter-dbgsym in ubuntu xenial.

No description available for libapache2-mod-php5filter-dbgsym in ubuntu xenial.

libphp5-embed: No summary available for libphp5-embed in ubuntu wily.

No description available for libphp5-embed in ubuntu wily.

libphp5-embed-dbgsym: No summary available for libphp5-embed-dbgsym in ubuntu xenial.

No description available for libphp5-embed-dbgsym in ubuntu xenial.

php-pear: PEAR Base System

 The PEAR package contains:
  * the PEAR installer, for creating, distributing
 and installing packages
  * the PEAR_Exception PHP error handling mechanism
  * the PEAR_ErrorStack advanced error handling mechanism
  * the PEAR_Error error handling mechanism
  * the OS_Guess class for retrieving info about the OS
 where PHP is running on
  * the System class for quick handling of common operations
 with files and directories
  * the PEAR base class
 Features in a nutshell:
  * full support for channels
  * pre-download dependency validation
  * new package.xml 2.0 format allows tremendous flexibility while maintaining
 BC
  * support for optional dependency groups and limited support for
 sub-packaging
  * robust dependency support
  * full dependency validation on uninstall
  * remote install for hosts with only ftp access - no more problems with
 restricted host installation
  * full support for mirroring
  * support for bundling several packages into a single tarball
  * support for static dependencies on a url-based package
  * support for custom file roles and installation tasks

php5: No summary available for php5 in ubuntu wily.

No description available for php5 in ubuntu wily.

php5-cgi: No summary available for php5-cgi in ubuntu wily.

No description available for php5-cgi in ubuntu wily.

php5-cgi-dbgsym: No summary available for php5-cgi-dbgsym in ubuntu wily.

No description available for php5-cgi-dbgsym in ubuntu wily.

php5-cli: No summary available for php5-cli in ubuntu xenial.

No description available for php5-cli in ubuntu xenial.

php5-cli-dbgsym: No summary available for php5-cli-dbgsym in ubuntu wily.

No description available for php5-cli-dbgsym in ubuntu wily.

php5-common: No summary available for php5-common in ubuntu xenial.

No description available for php5-common in ubuntu xenial.

php5-common-dbgsym: No summary available for php5-common-dbgsym in ubuntu wily.

No description available for php5-common-dbgsym in ubuntu wily.

php5-curl: No summary available for php5-curl in ubuntu wily.

No description available for php5-curl in ubuntu wily.

php5-curl-dbgsym: No summary available for php5-curl-dbgsym in ubuntu xenial.

No description available for php5-curl-dbgsym in ubuntu xenial.

php5-dbg: No summary available for php5-dbg in ubuntu xenial.

No description available for php5-dbg in ubuntu xenial.

php5-dev: No summary available for php5-dev in ubuntu wily.

No description available for php5-dev in ubuntu wily.

php5-dev-dbgsym: No summary available for php5-dev-dbgsym in ubuntu wily.

No description available for php5-dev-dbgsym in ubuntu wily.

php5-enchant: No summary available for php5-enchant in ubuntu wily.

No description available for php5-enchant in ubuntu wily.

php5-enchant-dbgsym: No summary available for php5-enchant-dbgsym in ubuntu xenial.

No description available for php5-enchant-dbgsym in ubuntu xenial.

php5-fpm: No summary available for php5-fpm in ubuntu wily.

No description available for php5-fpm in ubuntu wily.

php5-fpm-dbgsym: No summary available for php5-fpm-dbgsym in ubuntu wily.

No description available for php5-fpm-dbgsym in ubuntu wily.

php5-gd: No summary available for php5-gd in ubuntu xenial.

No description available for php5-gd in ubuntu xenial.

php5-gd-dbgsym: No summary available for php5-gd-dbgsym in ubuntu wily.

No description available for php5-gd-dbgsym in ubuntu wily.

php5-gmp: No summary available for php5-gmp in ubuntu wily.

No description available for php5-gmp in ubuntu wily.

php5-gmp-dbgsym: No summary available for php5-gmp-dbgsym in ubuntu wily.

No description available for php5-gmp-dbgsym in ubuntu wily.

php5-intl: No summary available for php5-intl in ubuntu xenial.

No description available for php5-intl in ubuntu xenial.

php5-intl-dbgsym: No summary available for php5-intl-dbgsym in ubuntu xenial.

No description available for php5-intl-dbgsym in ubuntu xenial.

php5-ldap: No summary available for php5-ldap in ubuntu wily.

No description available for php5-ldap in ubuntu wily.

php5-ldap-dbgsym: No summary available for php5-ldap-dbgsym in ubuntu wily.

No description available for php5-ldap-dbgsym in ubuntu wily.

php5-mysql: No summary available for php5-mysql in ubuntu wily.

No description available for php5-mysql in ubuntu wily.

php5-mysql-dbgsym: No summary available for php5-mysql-dbgsym in ubuntu wily.

No description available for php5-mysql-dbgsym in ubuntu wily.

php5-mysqlnd: No summary available for php5-mysqlnd in ubuntu wily.

No description available for php5-mysqlnd in ubuntu wily.

php5-mysqlnd-dbgsym: No summary available for php5-mysqlnd-dbgsym in ubuntu wily.

No description available for php5-mysqlnd-dbgsym in ubuntu wily.

php5-odbc: No summary available for php5-odbc in ubuntu wily.

No description available for php5-odbc in ubuntu wily.

php5-odbc-dbgsym: No summary available for php5-odbc-dbgsym in ubuntu xenial.

No description available for php5-odbc-dbgsym in ubuntu xenial.

php5-pgsql: No summary available for php5-pgsql in ubuntu wily.

No description available for php5-pgsql in ubuntu wily.

php5-pgsql-dbgsym: No summary available for php5-pgsql-dbgsym in ubuntu wily.

No description available for php5-pgsql-dbgsym in ubuntu wily.

php5-phpdbg: No summary available for php5-phpdbg in ubuntu wily.

No description available for php5-phpdbg in ubuntu wily.

php5-phpdbg-dbgsym: No summary available for php5-phpdbg-dbgsym in ubuntu wily.

No description available for php5-phpdbg-dbgsym in ubuntu wily.

php5-pspell: No summary available for php5-pspell in ubuntu wily.

No description available for php5-pspell in ubuntu wily.

php5-pspell-dbgsym: No summary available for php5-pspell-dbgsym in ubuntu xenial.

No description available for php5-pspell-dbgsym in ubuntu xenial.

php5-readline: No summary available for php5-readline in ubuntu xenial.

No description available for php5-readline in ubuntu xenial.

php5-readline-dbgsym: No summary available for php5-readline-dbgsym in ubuntu wily.

No description available for php5-readline-dbgsym in ubuntu wily.

php5-recode: No summary available for php5-recode in ubuntu wily.

No description available for php5-recode in ubuntu wily.

php5-recode-dbgsym: No summary available for php5-recode-dbgsym in ubuntu xenial.

No description available for php5-recode-dbgsym in ubuntu xenial.

php5-snmp: No summary available for php5-snmp in ubuntu xenial.

No description available for php5-snmp in ubuntu xenial.

php5-snmp-dbgsym: No summary available for php5-snmp-dbgsym in ubuntu xenial.

No description available for php5-snmp-dbgsym in ubuntu xenial.

php5-sqlite: No summary available for php5-sqlite in ubuntu wily.

No description available for php5-sqlite in ubuntu wily.

php5-sqlite-dbgsym: No summary available for php5-sqlite-dbgsym in ubuntu wily.

No description available for php5-sqlite-dbgsym in ubuntu wily.

php5-sybase: No summary available for php5-sybase in ubuntu xenial.

No description available for php5-sybase in ubuntu xenial.

php5-sybase-dbgsym: No summary available for php5-sybase-dbgsym in ubuntu wily.

No description available for php5-sybase-dbgsym in ubuntu wily.

php5-tidy: No summary available for php5-tidy in ubuntu wily.

No description available for php5-tidy in ubuntu wily.

php5-tidy-dbgsym: No summary available for php5-tidy-dbgsym in ubuntu xenial.

No description available for php5-tidy-dbgsym in ubuntu xenial.

php5-xmlrpc: No summary available for php5-xmlrpc in ubuntu wily.

No description available for php5-xmlrpc in ubuntu wily.

php5-xmlrpc-dbgsym: No summary available for php5-xmlrpc-dbgsym in ubuntu wily.

No description available for php5-xmlrpc-dbgsym in ubuntu wily.

php5-xsl: No summary available for php5-xsl in ubuntu wily.

No description available for php5-xsl in ubuntu wily.

php5-xsl-dbgsym: No summary available for php5-xsl-dbgsym in ubuntu xenial.

No description available for php5-xsl-dbgsym in ubuntu xenial.