Merge ~athos-ribeiro/ubuntu/+source/php7.4:lp2057576-sigsegv-ff into ubuntu/+source/php7.4:ubuntu/focal-devel

Proposed by Athos Ribeiro
Status: Merged
Approved by: git-ubuntu bot
Approved revision: not available
Merged at revision: bc7b501ae2314d886b0606564b2dea9563873f59
Proposed branch: ~athos-ribeiro/ubuntu/+source/php7.4:lp2057576-sigsegv-ff
Merge into: ubuntu/+source/php7.4:ubuntu/focal-devel
Diff against target: 57 lines (+35/-0)
3 files modified
debian/changelog (+7/-0)
debian/patches/fix-segfault-in-fpm_status_export_to_zval.patch (+27/-0)
debian/patches/series (+1/-0)
Reviewer Review Type Date Requested Status
git-ubuntu bot Approve
Andreas Hasenack Approve
Canonical Server Reporter Pending
Canonical Server packageset reviewers Pending
Review via email: mp+464010@code.launchpad.net

Description of the change

To post a comment you must log in.
Revision history for this message
Andreas Hasenack (ahasenack) wrote :

+1

review: Approve
Revision history for this message
git-ubuntu bot (git-ubuntu-bot) wrote :

Approvers: athos-ribeiro, ahasenack
Uploaders: athos-ribeiro, ahasenack
MP auto-approved

review: Approve
Revision history for this message
Athos Ribeiro (athos-ribeiro) wrote :

Thanks!

Uploaded

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1diff --git a/debian/changelog b/debian/changelog
2index 98ecbb9..b88053c 100644
3--- a/debian/changelog
4+++ b/debian/changelog
5@@ -1,3 +1,10 @@
6+php7.4 (7.4.3-4ubuntu2.21) focal; urgency=medium
7+
8+ * d/p/fix-segfault-in-fpm_status_export_to_zval.patch: fix segmentation
9+ fault in fpm_status_export_to_zval. (LP: #2057576)
10+
11+ -- Athos Ribeiro <athos.ribeiro@canonical.com> Wed, 10 Apr 2024 09:36:03 -0300
12+
13 php7.4 (7.4.3-4ubuntu2.20) focal-security; urgency=medium
14
15 * SECURITY UPDATE: Disclosure sensitive information
16diff --git a/debian/patches/fix-segfault-in-fpm_status_export_to_zval.patch b/debian/patches/fix-segfault-in-fpm_status_export_to_zval.patch
17new file mode 100644
18index 0000000..ab70b6c
19--- /dev/null
20+++ b/debian/patches/fix-segfault-in-fpm_status_export_to_zval.patch
21@@ -0,0 +1,27 @@
22+From df259f88daaf7df5673fd78a0a1b76a1d831d0a2 Mon Sep 17 00:00:00 2001
23+From: Patrick Prasse <patrick.prasse@actindo.com>
24+Date: Fri, 17 Nov 2023 16:32:23 +0000
25+Subject: [PATCH] Fix bug GH-12705: Segmentation fault in fpm_status_export_to_zval
26+
27+Closes GH-12706
28+
29+Bug: https://github.com/php/php-src/issues/12705
30+Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/2057576
31+Last-update: 2024-04-10
32+Origin: upstream, https://github.com/php/php-src/commit/df259f88daaf7df5673fd78a0a1b76a1d831d0a2
33+---
34+ NEWS | 4 ++++
35+ sapi/fpm/fpm/fpm_status.c | 2 +-
36+ 2 files changed, 5 insertions(+), 1 deletion(-)
37+
38+--- a/sapi/fpm/fpm/fpm_status.c
39++++ b/sapi/fpm/fpm/fpm_status.c
40+@@ -56,7 +56,7 @@
41+
42+ scoreboard_p = fpm_scoreboard_acquire(NULL, 1);
43+ if (!scoreboard_p) {
44+- zlog(ZLOG_NOTICE, "[pool %s] status: scoreboard already in use.", scoreboard_p->pool);
45++ zlog(ZLOG_NOTICE, "[pool (unknown)] status: scoreboard already in use.");
46+ return -1;
47+ }
48+
49diff --git a/debian/patches/series b/debian/patches/series
50index 9aa3af8..c533cf5 100644
51--- a/debian/patches/series
52+++ b/debian/patches/series
53@@ -92,3 +92,4 @@ CVE-2023-3247-1.patch
54 CVE-2023-3247-2.patch
55 CVE-2023-3823.patch
56 CVE-2023-3824.patch
57+fix-segfault-in-fpm_status_export_to_zval.patch

Subscribers

People subscribed via source and target branches