php5 5.2.1-0ubuntu1.5 source package in Ubuntu
Changelog
php5 (5.2.1-0ubuntu1.5) feisty-security; urgency=low * SECURITY UPDATE: multiple vulnerabilities. Thanks to Sean Finney for help locating upstream fixes. * Add 200-string-wordwrap.patch: wordwrap function can be made to crash. Backported upstream fixes (CVE-2007-3998). * Add 201-strspn-oob-read.patch: memory reading, possible crash via strspn. chunk_split. Backported upstream fixes (CVE-2007-4657). * Add 202-money-format-abuse.patch: money_format format string vulnerable. Backported upstream fixes (CVE-2007-4658). * Add 203-openssl_make_REQ-overflow.patch: overflow in openssl_make_REQ. Applied and corrected upstream fixes (CVE-2007-4662). * Add 204-start-session-cookies.patch: overwrite cookie values. Applied upstream fixes (CVE-2007-3799). * Add 206-chunk_split-fixes.patch: memory reading, possible crash via chunk_split. Merged various upstream fixes (CVE-2007-2872, CVE-2007-4660, CVE-2007-4661). * Add 206-cookie-nesting-fix.patch: corruption/crashes via deeply nested variables. Backported upstream fixes (CVE-2007-1285, CVE-2007-4670). * Add 207-htmlentity-utf8-fix.patch: don't accept partial utf8 sequences. Backported upstream fixes (CVE-2007-5898). * Add 208-session-id-leak.patch: don't send session id to remote forms. Backported upstream fixes (CVE-2007-5899). * References http://www.php.net/releases/5_2_4.php http://www.php.net/releases/5_2_5.php -- Kees Cook <email address hidden> Fri, 19 Oct 2007 12:58:34 -0700
Upload details
- Uploaded by:
- Kees Cook
- Uploaded to:
- Feisty
- Original maintainer:
- Ubuntu Development Team
- Architectures:
- any
- Section:
- web
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
php5_5.2.1.orig.tar.gz | 8.6 MiB | 4dc753a9bc63a161fd4dd027c9ff37e77124bd681db28ea5463895b29442d66d |
php5_5.2.1-0ubuntu1.5.diff.gz | 103.9 KiB | b8d1fd0f7d91702db13fcf8ea46c42354b6170fa6bfbe16afd1f294cbc68bd1f |
php5_5.2.1-0ubuntu1.5.dsc | 1.9 KiB | 8d7c7985c338871d033a84b443785d00121d953629045ca9ff6a81def887c377 |
Binary packages built by this source
- libapache2-mod-php5: No summary available for libapache2-mod-php5 in ubuntu feisty.
No description available for libapache2-mod-php5 in ubuntu feisty.
- php-pear: No summary available for php-pear in ubuntu feisty.
No description available for php-pear in ubuntu feisty.
- php5: No summary available for php5 in ubuntu feisty.
No description available for php5 in ubuntu feisty.
- php5-cgi: No summary available for php5-cgi in ubuntu feisty.
No description available for php5-cgi in ubuntu feisty.
- php5-cli: No summary available for php5-cli in ubuntu feisty.
No description available for php5-cli in ubuntu feisty.
- php5-common: No summary available for php5-common in ubuntu feisty.
No description available for php5-common in ubuntu feisty.
- php5-curl: No summary available for php5-curl in ubuntu feisty.
No description available for php5-curl in ubuntu feisty.
- php5-dev: No summary available for php5-dev in ubuntu feisty.
No description available for php5-dev in ubuntu feisty.
- php5-gd: No summary available for php5-gd in ubuntu feisty.
No description available for php5-gd in ubuntu feisty.
- php5-ldap: No summary available for php5-ldap in ubuntu feisty.
No description available for php5-ldap in ubuntu feisty.
- php5-mhash: No summary available for php5-mhash in ubuntu feisty.
No description available for php5-mhash in ubuntu feisty.
- php5-mysql: No summary available for php5-mysql in ubuntu feisty.
No description available for php5-mysql in ubuntu feisty.
- php5-odbc: No summary available for php5-odbc in ubuntu feisty.
No description available for php5-odbc in ubuntu feisty.
- php5-pgsql: No summary available for php5-pgsql in ubuntu feisty.
No description available for php5-pgsql in ubuntu feisty.
- php5-pspell: No summary available for php5-pspell in ubuntu feisty.
No description available for php5-pspell in ubuntu feisty.
- php5-recode: No summary available for php5-recode in ubuntu feisty.
No description available for php5-recode in ubuntu feisty.
- php5-snmp: No summary available for php5-snmp in ubuntu feisty.
No description available for php5-snmp in ubuntu feisty.
- php5-sqlite: No summary available for php5-sqlite in ubuntu feisty.
No description available for php5-sqlite in ubuntu feisty.
- php5-sybase: No summary available for php5-sybase in ubuntu feisty.
No description available for php5-sybase in ubuntu feisty.
- php5-tidy: No summary available for php5-tidy in ubuntu feisty.
No description available for php5-tidy in ubuntu feisty.
- php5-xmlrpc: No summary available for php5-xmlrpc in ubuntu feisty.
No description available for php5-xmlrpc in ubuntu feisty.
- php5-xsl: No summary available for php5-xsl in ubuntu feisty.
No description available for php5-xsl in ubuntu feisty.