php5 5.2.6-2ubuntu4.5 source package in Ubuntu
Changelog
php5 (5.2.6-2ubuntu4.5) intrepid-security; urgency=low * SECURITY UPDATE: file truncation via key with null byte - debian/patches/CVE-2008-7068.patch: make sure key and value are sane in ext/dba/libinifile/inifile.c. - CVE-2008-7068 * SECURITY UPDATE: certificate spoofing via null-byte certs (LP: #446313) - debian/patches/CVE-2009-3291.patch: validate certificate's CN length in ext/openssl/openssl.c. - CVE-2009-3291 * SECURITY UPDATE: denial of service via malformed exif images (LP: #446313) - debian/patches/CVE-2009-3292.patch: check length, return codes, and nesting level in ext/exif/exif.c. - CVE-2009-3292 * SECURITY UPDATE: safe_mode bypass via tempam function - debian/patches/CVE-2009-3557.patch: check for safe_mode in ext/standard/file.c. - CVE-2009-3557 * SECURITY UPDATE: open_basedir restrictions bypass via posix_mkfifo - debian/patches/CVE-2009-3558.patch: check for open_basedir in ext/posix/posix.c. - CVE-2009-3558 * SECURITY UPDATE: denial of service via large number of files in form-data POST request. - debian/patches/CVE-2009-4017.patch: introduce new "max_file_uploads" directive and enforce in main/main.c, main/rfc1867.c. - ATTENTION: this update changes previous php5 behaviour by limiting the number of files in a POST request to 50. This may be increased by adding a "max_file_uploads" directive to the php.ini configuration file. - CVE-2009-4017 * SECURITY UPDATE: safe_mode_protected_env_vars bypass via proc_open() - debian/patches/CVE-2009-4018.patch: add safe_mode check in ext/standard/proc_open.c - CVE-2009-4018 * debian/patches/fix-xmlrpc-datetime.diff - Prevent stack smashing when using xmlrpc and datetime. (LP: #239513) -- Marc Deslauriers <email address hidden> Thu, 26 Nov 2009 08:06:47 -0500
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Intrepid
- Original maintainer:
- Ubuntu Development Team
- Architectures:
- any
- Section:
- web
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
php5_5.2.6.orig.tar.gz | 11.5 MiB | 8ea6dd3010b260d80cf41619363d0d3593ddd97c3a3e09f229816635fce23149 |
php5_5.2.6-2ubuntu4.5.diff.gz | 171.0 KiB | 9fc920072780cc842afd43c15f0dd63b1c6124e32d0e6fb0c8c3738bdcdc4706 |
php5_5.2.6-2ubuntu4.5.dsc | 2.5 KiB | 9ce3dd9a7e734bb1302bbce8e4ee1071d0da27e4bb3235c10fccaba833da006b |
Available diffs
- diff from 5.2.6-2ubuntu4.4 to 5.2.6-2ubuntu4.5 (908 bytes)
Binary packages built by this source
- libapache2-mod-php5: No summary available for libapache2-mod-php5 in ubuntu intrepid.
No description available for libapache2-mod-php5 in ubuntu intrepid.
- libapache2-mod-php5filter: No summary available for libapache2-mod-php5filter in ubuntu intrepid.
No description available for libapache2-
mod-php5filter in ubuntu intrepid.
- php-pear: No summary available for php-pear in ubuntu intrepid.
No description available for php-pear in ubuntu intrepid.
- php5: No summary available for php5 in ubuntu intrepid.
No description available for php5 in ubuntu intrepid.
- php5-cgi: No summary available for php5-cgi in ubuntu intrepid.
No description available for php5-cgi in ubuntu intrepid.
- php5-cli: No summary available for php5-cli in ubuntu intrepid.
No description available for php5-cli in ubuntu intrepid.
- php5-common: No summary available for php5-common in ubuntu intrepid.
No description available for php5-common in ubuntu intrepid.
- php5-curl: No summary available for php5-curl in ubuntu intrepid.
No description available for php5-curl in ubuntu intrepid.
- php5-dbg: No summary available for php5-dbg in ubuntu intrepid.
No description available for php5-dbg in ubuntu intrepid.
- php5-dev: No summary available for php5-dev in ubuntu intrepid.
No description available for php5-dev in ubuntu intrepid.
- php5-gd: No summary available for php5-gd in ubuntu intrepid.
No description available for php5-gd in ubuntu intrepid.
- php5-gmp: No summary available for php5-gmp in ubuntu intrepid.
No description available for php5-gmp in ubuntu intrepid.
- php5-ldap: No summary available for php5-ldap in ubuntu intrepid.
No description available for php5-ldap in ubuntu intrepid.
- php5-mhash: No summary available for php5-mhash in ubuntu intrepid.
No description available for php5-mhash in ubuntu intrepid.
- php5-mysql: No summary available for php5-mysql in ubuntu intrepid.
No description available for php5-mysql in ubuntu intrepid.
- php5-odbc: No summary available for php5-odbc in ubuntu intrepid.
No description available for php5-odbc in ubuntu intrepid.
- php5-pgsql: No summary available for php5-pgsql in ubuntu intrepid.
No description available for php5-pgsql in ubuntu intrepid.
- php5-pspell: No summary available for php5-pspell in ubuntu intrepid.
No description available for php5-pspell in ubuntu intrepid.
- php5-recode: No summary available for php5-recode in ubuntu intrepid.
No description available for php5-recode in ubuntu intrepid.
- php5-snmp: No summary available for php5-snmp in ubuntu intrepid.
No description available for php5-snmp in ubuntu intrepid.
- php5-sqlite: No summary available for php5-sqlite in ubuntu intrepid.
No description available for php5-sqlite in ubuntu intrepid.
- php5-sybase: No summary available for php5-sybase in ubuntu intrepid.
No description available for php5-sybase in ubuntu intrepid.
- php5-tidy: No summary available for php5-tidy in ubuntu intrepid.
No description available for php5-tidy in ubuntu intrepid.
- php5-xmlrpc: No summary available for php5-xmlrpc in ubuntu intrepid.
No description available for php5-xmlrpc in ubuntu intrepid.
- php5-xsl: No summary available for php5-xsl in ubuntu intrepid.
No description available for php5-xsl in ubuntu intrepid.