php5 5.3.5-1ubuntu7.6 source package in Ubuntu
Changelog
php5 (5.3.5-1ubuntu7.6) natty-security; urgency=low * SECURITY UPDATE: memory allocation failure denial of service - debian/patches/php5-CVE-2011-4153.patch: check result of zend_strdup() and calloc() for failed allocations - CVE-2011-4153 * SECURITY UPDATE: predictable hash collision denial of service (LP: #910296) - debian/patches/php5-CVE-2011-4885.patch: add max_input_vars directive with default limit of 1000 - ATTENTION: this update changes previous php5 behavior by limiting the number of external input variables to 1000. This may be increased by adding a "max_input_vars" directive to the php.ini configuration file. See http://www.php.net/manual/en/info.configuration.php#ini.max-input-vars for more information. - CVE-2011-4885 * SECURITY UPDATE: remote code execution vulnerability introduced by the fix for CVE-2011-4885 (LP: #925772) - debian/patches/php5-CVE-2012-0830.patch: return rather than continuing if max_input_vars limit is reached - CVE-2012-0830 * SECURITY UPDATE: XSLT arbitrary file overwrite attack - debian/patches/php5-CVE-2012-0057.patch: add xsl.security_prefs ini option to define forbidden operations within XSLT stylesheets - CVE-2012-0057 * SECURITY UPDATE: PDORow session denial of service - debian/patches/php5-CVE-2012-0788.patch: fail gracefully when attempting to serialize PDORow instances - CVE-2012-0788 * SECURITY UPDATE: magic_quotes_gpc remote disable vulnerability - debian/patches/php5-CVE-2012-0831.patch: always restore magic_quote_gpc on request shutdown - CVE-2012-0831 -- Steve Beattie <email address hidden> Wed, 08 Feb 2012 20:58:41 -0800
Upload details
- Uploaded by:
- Steve Beattie
- Uploaded to:
- Natty
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any
- Section:
- php
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
php5_5.3.5.orig.tar.gz | 12.7 MiB | 9948562a593822d984153e9220159eb712d52bd59e6b4715b4bb4e762c0f5196 |
php5_5.3.5-1ubuntu7.6.diff.gz | 233.5 KiB | 8c8f5e0e230200f097189c722bff0a0e05de8d1d9abd3e627dbc9d87b01d6112 |
php5_5.3.5-1ubuntu7.6.dsc | 3.2 KiB | dbe4fc51b439a5c2a633980e733ab50a7b259ade1c8f19c406ff579d4343f350 |
Available diffs
Binary packages built by this source
- libapache2-mod-php5: No summary available for libapache2-mod-php5 in ubuntu natty.
No description available for libapache2-mod-php5 in ubuntu natty.
- libapache2-mod-php5filter: No summary available for libapache2-mod-php5filter in ubuntu natty.
No description available for libapache2-
mod-php5filter in ubuntu natty.
- php-pear: No summary available for php-pear in ubuntu natty.
No description available for php-pear in ubuntu natty.
- php5: No summary available for php5 in ubuntu natty.
No description available for php5 in ubuntu natty.
- php5-cgi: No summary available for php5-cgi in ubuntu natty.
No description available for php5-cgi in ubuntu natty.
- php5-cli: No summary available for php5-cli in ubuntu natty.
No description available for php5-cli in ubuntu natty.
- php5-common: No summary available for php5-common in ubuntu natty.
No description available for php5-common in ubuntu natty.
- php5-curl: No summary available for php5-curl in ubuntu natty.
No description available for php5-curl in ubuntu natty.
- php5-dbg: No summary available for php5-dbg in ubuntu natty.
No description available for php5-dbg in ubuntu natty.
- php5-dev: No summary available for php5-dev in ubuntu natty.
No description available for php5-dev in ubuntu natty.
- php5-enchant: No summary available for php5-enchant in ubuntu natty.
No description available for php5-enchant in ubuntu natty.
- php5-fpm: No summary available for php5-fpm in ubuntu natty.
No description available for php5-fpm in ubuntu natty.
- php5-gd: No summary available for php5-gd in ubuntu natty.
No description available for php5-gd in ubuntu natty.
- php5-gmp: No summary available for php5-gmp in ubuntu natty.
No description available for php5-gmp in ubuntu natty.
- php5-intl: No summary available for php5-intl in ubuntu natty.
No description available for php5-intl in ubuntu natty.
- php5-ldap: No summary available for php5-ldap in ubuntu natty.
No description available for php5-ldap in ubuntu natty.
- php5-mysql: No summary available for php5-mysql in ubuntu natty.
No description available for php5-mysql in ubuntu natty.
- php5-odbc: No summary available for php5-odbc in ubuntu natty.
No description available for php5-odbc in ubuntu natty.
- php5-pgsql: No summary available for php5-pgsql in ubuntu natty.
No description available for php5-pgsql in ubuntu natty.
- php5-pspell: No summary available for php5-pspell in ubuntu natty.
No description available for php5-pspell in ubuntu natty.
- php5-recode: No summary available for php5-recode in ubuntu natty.
No description available for php5-recode in ubuntu natty.
- php5-snmp: No summary available for php5-snmp in ubuntu natty.
No description available for php5-snmp in ubuntu natty.
- php5-sqlite: No summary available for php5-sqlite in ubuntu natty.
No description available for php5-sqlite in ubuntu natty.
- php5-sybase: No summary available for php5-sybase in ubuntu natty.
No description available for php5-sybase in ubuntu natty.
- php5-tidy: No summary available for php5-tidy in ubuntu natty.
No description available for php5-tidy in ubuntu natty.
- php5-xmlrpc: No summary available for php5-xmlrpc in ubuntu natty.
No description available for php5-xmlrpc in ubuntu natty.
- php5-xsl: No summary available for php5-xsl in ubuntu natty.
No description available for php5-xsl in ubuntu natty.