Ubuntu
php7.3 package

Change log for php7.3 package in Ubuntu

1 → 33 of 33 results First • Previous • Next • Last
Obsolete in eoan-updates
Obsolete in eoan-security 
php7.3 (7.3.11-0ubuntu0.19.10.6) eoan-security; urgency=medium

  * SECURITY UPDATE: Denial of service through oversized memory allocated
    - debian/patches/CVE-2019-11048.patch: changes types int to size_t
      in main/rfc1867.c.
    - CVE-2019-11048

 -- <email address hidden> (Leonidas S. Barbosa)  Tue, 26 May 2020 09:28:47 -0300
Deleted in eoan-proposed (Reason: moved to -updates) 
php7.3 (7.3.11-0ubuntu0.19.10.5) eoan; urgency=medium

  * libapache2-mod-php.postinst.extra: Disable other mod-php versions.
    Fixes failure when upgrading from previous versions of mod-php.
    (LP: #1865218)

 -- Bryce Harrington <email address hidden>  Sat, 25 Apr 2020 02:37:14 +0000
Superseded in eoan-updates
Superseded in eoan-security 
php7.3 (7.3.11-0ubuntu0.19.10.4) eoan-security; urgency=medium

  * SECURITY UDPATE: Null dereference pointer
    - debian/patches/CVE-2020-7062.patch: avoid null dereference in
      ext/session/session.c.
    - CVE-2020-7062
  * SECURITY UPDATE: Lax permissions on files added to tar with Phar
    - debian/patches/CVE-2020-7063.patch: enforce correct permissions
      for files add to tar with Phar in ext/phar/phar_object.c,
      ext/phar/tests/bug79082.phpt, ext/phar/tests/test79082*.
    - CVE-2020-7063
  * SECURITY UPDATE: Read one byte of uninitialized memory
    - debian/patches/CVE-2020-7064.patch: check length in
      exif_process_TIFF_in_JPEG to avoid read uninitialized memory
      ext/exif/exif.c, ext/exif/tests/bug79282.phpt.
    - CVE-2020-7064
  * SECURITY UPDATE: Memory corruption, crash and potentially code execution
    - debian/patches/CVE-2020-7065.patch: make sure that negative values are
      properly compared in ext/mbstring/php_unicode.c,
      ext/mbstring/tests/bug70371.phpt.
    - CVE-2020-7065
  * SECURITY UPDATE: Truncated url due \0
    - debian/patches/CVE-2020-7066.patch: check for get_headers
      not accepting \0 in ext/standard/url.c.
    - CVE-2020-7066

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 08 Apr 2020 15:58:29 -0300
Deleted in focal-release (Reason: LP: #1869087, remove php7.3, transition done)
Deleted in focal-proposed (Reason: moved to Release)
Superseded in focal-proposed
Superseded in focal-proposed 
php7.3 (7.3.15-3build1) focal; urgency=medium

  * No-change rebuild for icu soname change.

 -- Matthias Klose <email address hidden>  Tue, 03 Mar 2020 21:34:47 +0100
Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release) 
php7.3 (7.3.15-3) unstable; urgency=medium

  * Remove /etc/init/php@PHP_VERSION@-fpm.conf, not
    /etc/init/php@PHP_VERSION@.conf

 -- Ondřej Surý <email address hidden>  Sun, 23 Feb 2020 08:15:44 +0100
Superseded in focal-proposed 
php7.3 (7.3.15-2) unstable; urgency=medium

  * Remove the PIDFile= setting from systemd unit file (it should not be
    needed with Type=notify)
  * Use php-fpm-socket-helper from php-common >= 1:73 to update the
    default socket
  * Fixup upstart removal (missing prepare-files update) (Closes: #951745)

 -- Ondřej Surý <email address hidden>  Fri, 21 Feb 2020 18:28:27 +0100

Available diffs

Superseded in focal-proposed 
php7.3 (7.3.15-1) unstable; urgency=medium

  * Remove upstart support, use systemd-tmpfiles to create tmpfiles
    (Closes: #923032)
  * New upstream version 7.3.15

 -- Ondřej Surý <email address hidden>  Thu, 20 Feb 2020 13:18:20 +0100

Available diffs

Superseded in focal-proposed 
php7.3 (7.3.11-0ubuntu3) focal; urgency=medium

  * No-change rebuild for icu soname change.

 -- Matthias Klose <email address hidden>  Thu, 13 Feb 2020 09:07:07 +0100

Available diffs

Superseded in eoan-updates
Superseded in eoan-security 
php7.3 (7.3.11-0ubuntu0.19.10.3) eoan-security; urgency=medium

  * SECURITY UPDATE: Out of bounds read, buffer overflow and
    heap use-after-free
    - debian/patches/CVE-2020-7059-and-CVE-2020-7060.patch:
      fix OOB read in php_strip_tags_ex in ext/standard/string.c
      and added test ext/standard/tests/file/bug79099.phpt,
      fix adding a check function
      is_in_cp950_pua in  ext/mbstring/libmbfl/filters/mbfilter_big5.c
      and added test ext/mbstring/tests/bug79037.phpt,
      fix use-after-free in session_create_id() and
      added tests ext/session/tests/bug79091.phpt.
    - CVE-2020-7059
    - CVE-2020-7060

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 12 Feb 2020 12:22:33 -0300
Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release) 
php7.3 (7.3.11-0ubuntu2) focal; urgency=medium

  * Rebuild for libsnmp35.

 -- Rafael David Tinoco <email address hidden>  Tue, 14 Jan 2020 18:04:48 +0000

Available diffs

Superseded in eoan-updates
Superseded in eoan-security 
php7.3 (7.3.11-0ubuntu0.19.10.2) eoan-security; urgency=medium

  * SECURITY UPDATE: silently truncates
    a class after a null byte
    - debian/patches/CVE-2019-11045.patch:  not accept
      arbitrary strings in ext/spl/spl_directory.c,
      ext/spl/tests/bug78863.phpt.
    - CVE-2019-11045
  * SECURITY UPDATE: Buffer underflow
    - debian/patches/CVE-2019-11046.patch: not rely on `isdigit()`
      to detect digits in ext/bcmath/libbcmath/src/str2num.c,
      ext/bcmath/tests/bug78878.phpt.
    - CVE-2019-11046
  * SECURITY UPDATE: Heap-buffer-overflow
    - debian/patches/CVE-2019-11047.patch: fix in ext/exif/exif.c,
      ext/exif/tests/bug78910.phpt.
    - CVE-2019-11047
  * SECURITY UPDATE: Use-after-free
    - debian/patches/CVE-2019-11050.patch: fix in
      ext/exif/exif.c, ext/exif/tests/bug78793.phpt.
    - CVE-2019-11050
  * Fixing tests bug54291 and bug78878
    - debian/patches/Fixing-test-bug54291.patch: fix in
      ext/spl/tests/bug54291.phpt.
    - debian/patches/Fixing-test-78878.patch: fix in
      ext/bcmath/tests/bug78878.phpt

 -- <email address hidden> (Leonidas S. Barbosa)  Tue, 14 Jan 2020 12:33:46 -0300
Superseded in focal-proposed 
php7.3 (7.3.12-1) unstable; urgency=medium

  * Use mysqld --initialize-insecure for MySQL 8.0 (for Ubuntu 19.10)
  * Disable MySQL X Plugin in the tests
  * Remove --skip-grant-tables to fix FTBFS with MySQL 8.0
  * Remove --without-mysqlx from MySQL 5.7
  * New upstream version 7.3.12

 -- Ondřej Surý <email address hidden>  Thu, 28 Nov 2019 08:34:08 +0100
Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release) 
php7.3 (7.3.11-0ubuntu1) focal; urgency=medium

  * SECURITY UPDATE: updated to 7.3.11 to fix security issue
    - CVE-2019-11043
  * Refreshed patches.

 -- Marc Deslauriers <email address hidden>  Wed, 20 Nov 2019 09:21:42 -0500
Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release) 
php7.3 (7.3.10-1ubuntu1) focal; urgency=medium

  [ Ondřej Surý ]
  * debian/setup-mysql.sh: fix FTBFS with MySQL 8 (LP: #1850190)
    - Use mysqld --initialize-insecure for MySQL 8.0 (for Ubuntu 19.10)
    - Remove --skip-grant-tables to fix FTBFS with MySQL 8.0. The tests
      expect mysql listening on localhost, and this option in v8.0 makes
      it listen only on the unix socket.

 -- Andreas Hasenack <email address hidden>  Mon, 04 Nov 2019 12:32:15 -0300
Superseded in eoan-updates
Superseded in eoan-security 
php7.3 (7.3.11-0ubuntu0.19.10.1) eoan-security; urgency=medium

  * SECURITY UPDATE: updated to 7.3.11 to fix security issue
    - CVE-2019-11043
  * Refreshed patches.
  * debian/rules: temporarily disable setting up MySQL for the tests as the
    setup script isn't compatible with MySQL 8.0 and the MySQL tests didn't
    seem to run anyway.

 -- Marc Deslauriers <email address hidden>  Thu, 24 Oct 2019 07:38:49 -0400
Superseded in focal-proposed 
php7.3 (7.3.10-1) unstable; urgency=medium

  * New upstream version 7.3.10

 -- Ondřej Surý <email address hidden>  Tue, 08 Oct 2019 07:24:47 +0200
Superseded in focal-release
Obsolete in eoan-release
Deleted in eoan-proposed (Reason: moved to release)
Superseded in eoan-proposed 
php7.3 (7.3.8-1) unstable; urgency=medium

  * New upstream version 7.3.8
  * Rebase patches for PHP 7.3.8

 -- Ondřej Surý <email address hidden>  Wed, 07 Aug 2019 11:50:45 +0200

Available diffs

Superseded in eoan-release
Deleted in eoan-proposed (Reason: moved to release) 
php7.3 (7.3.6-1) unstable; urgency=medium

  [ Ondřej Surý ]
  * New upstream version 7.3.6

  [ Andreas Beckmann ]
  * php7.3-curl: Add Breaks against php7.0-curl for smoother upgrades from stretch.  (Closes: #929689)

 -- Ondřej Surý <email address hidden>  Fri, 31 May 2019 13:36:51 +0200

Available diffs

Superseded in eoan-release
Deleted in eoan-proposed (Reason: moved to release) 
php7.3 (7.3.4-2) unstable; urgency=medium

  [Andreas Beckmann]
  * php7.3-common: Add Breaks against php7.0-curl for smoother upgrades from
    stretch.  (Closes: #925106)
  * php7.3-common: Add Breaks against gforge-common from jessie which uses a
    deprecated constructor syntax.
  * Deterministically generate debian/control by sorting the extension
    packages.

 -- Ondřej Surý <email address hidden>  Sat, 13 Apr 2019 19:05:48 +0000
Deleted in disco-release (Reason: Not for disco release; P: #1813317)
Deleted in disco-proposed (Reason: moved to release) 
php7.3 (7.3.2-3) unstable; urgency=medium

  * Update systzdata patch to v17 (Courtesy of remirepo)

 -- Ondřej Surý <email address hidden>  Fri, 08 Feb 2019 15:05:54 +0000

Available diffs

Superseded in disco-proposed 
php7.3 (7.3.2-2) unstable; urgency=medium

  * Fix the icu patch condition for icu >= 60

 -- Ondřej Surý <email address hidden>  Fri, 08 Feb 2019 10:49:26 +0000

Available diffs

Superseded in disco-proposed 
php7.3 (7.3.2-1) unstable; urgency=medium

  * New upstream version 7.3.2

 -- Ondřej Surý <email address hidden>  Thu, 07 Feb 2019 17:58:05 +0000

Available diffs

Superseded in disco-proposed 
php7.3 (7.3.1-3) unstable; urgency=medium

  * Always build spoofchecker, because we are enforcing icu >= 50.1
    (Closes: #921199)

 -- Ondřej Surý <email address hidden>  Tue, 05 Feb 2019 10:25:33 +0000

Available diffs

Superseded in disco-release
Deleted in disco-proposed (Reason: moved to release) 
php7.3 (7.3.1-2) unstable; urgency=high

  * Add patch to use pkg-config instead of icu-config to detect icu
    libraries (Closes: #916110)

 -- Ondřej Surý <email address hidden>  Mon, 21 Jan 2019 09:09:55 +0000

Available diffs

Superseded in disco-release
Deleted in disco-proposed (Reason: moved to release) 
php7.3 (7.3.1-1) unstable; urgency=medium

  * New upstream version 7.3.1

 -- Ondřej Surý <email address hidden>  Sun, 13 Jan 2019 10:13:20 +0000

Available diffs

Superseded in disco-release
Deleted in disco-proposed (Reason: moved to release) 
php7.3 (7.3.0-2) unstable; urgency=medium

  * Add upstream patch to fix OPcache optimization problem for
    ArrayAccess->offsetGet
  * Add upstream patch to fix infinite loop in preg_replace_callback
  * Fix check for rl_completion_matches in readline extension

 -- Ondřej Surý <email address hidden>  Mon, 17 Dec 2018 09:51:53 +0000

Available diffs

Superseded in disco-release
Deleted in disco-proposed (Reason: moved to release) 
php7.3 (7.3.0-1) unstable; urgency=medium

  * Update d/watch for the final PHP 7.3.0 release
  * New upstream version 7.3.0

 -- Ondřej Surý <email address hidden>  Thu, 06 Dec 2018 20:22:15 +0000
Superseded in disco-proposed 
php7.3 (7.3.0~rc5-2build1) disco; urgency=medium

  * No-change rebuild against latest libzip

 -- Jeremy Bicha <email address hidden>  Mon, 26 Nov 2018 08:09:03 -0500
Superseded in disco-proposed 
php7.3 (7.3.0~rc5-2) unstable; urgency=medium

  * Don't use sed found by configure, use the sed command as available in
    the host system (Closes: #913620)

 -- Ondřej Surý <email address hidden>  Tue, 13 Nov 2018 09:10:56 +0000
Superseded in disco-release
Deleted in disco-proposed (Reason: moved to release) 
php7.3 (7.3.0~rc5-1build1) disco; urgency=medium

  * No-change rebuild for icu soname changes.

 -- Matthias Klose <email address hidden>  Tue, 13 Nov 2018 08:16:29 +0000
Superseded in disco-proposed 
php7.3 (7.3.0~rc5-1) unstable; urgency=medium

  * New upstream version 7.3.0~rc5
  * Enable lmdb support in dba extension

 -- Ondřej Surý <email address hidden>  Mon, 12 Nov 2018 09:54:24 +0000

Available diffs

Superseded in disco-proposed 
php7.3 (7.3.0~rc4-1) unstable; urgency=medium

  * New upstream version 7.3.0~rc4
  * Rebase patches for PHP 7.4.0~rc4

 -- Ondřej Surý <email address hidden>  Thu, 25 Oct 2018 08:57:33 +0000
Deleted in cosmic-release (Reason: pre-release, not suitable for inclusion in stable release...)
Deleted in cosmic-proposed (Reason: moved to release) 
php7.3 (7.3.0~alpha3-1) unstable; urgency=medium

  * Update upstream signing-key.asc for PHP 7.3
  * New upstream version 7.3.0~alpha3
  * Build-Depend on libpcre2-dev
  * Rebase patches for PHP 7.3.0~alpha3

 -- Ondřej Surý <email address hidden>  Mon, 09 Jul 2018 13:49:59 +0000
1 → 33 of 33 results First • Previous • Next • Last