php4-universe 4:4.3.10-10ubuntu3.7 source package in Ubuntu
Changelog
php4-universe (4:4.3.10-10ubuntu3.7) hoary-security; urgency=low
* SECURITY UPDATE: multiple fixes backported from 5.1.2 and CVS:
- Fix multiple HTTP response splitting vulnerabilities in sessions and
the header() function, due to lack of input validation; CVE-2006-0207
+ Add safety checks in the header() function to make sure that we
don't get newlines injected by (mis)use of user input in headers.
+ Add a check for invalid characters in session names, so that we
aren't subject to HTTP response splitting vulnerabilities in
the Set-Cookie header we send back out as a result of user input.
- Filter HTML error reporting, preventing cross-site scripting attacks
when both display_errors and html_errors are enabled; CVE-2006-0208
-- Adam Conrad <email address hidden> Wed, 8 Mar 2006 18:12:49 +1100
Upload details
- Uploaded by:
- Adam Conrad
- Uploaded to:
- Hoary
- Original maintainer:
- Adam Conrad
- Architectures:
- any
- Section:
- web
- Urgency:
- Low Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| php4-universe_4.3.10.orig.tar.gz | 4.7 MiB | 8d5d292cf20df5ba6d3c769319e330f127a39f7da8244849cba17bbc7f04e4ef |
| php4-universe_4.3.10-10ubuntu3.7.diff.gz | 272.6 KiB | 5ec94966c2088589ddff59b1660730b24c4d0d668122128eb9cf7eae8be0f7f6 |
| php4-universe_4.3.10-10ubuntu3.7.dsc | 1.6 KiB | cfdab9cea791a22018a76df6545a250ccc7624bee72a5aef8f19b4e70a184040 |
Binary packages built by this source
- libapache-mod-php4: No summary available for libapache-mod-php4 in ubuntu hoary.
No description available for libapache-mod-php4 in ubuntu hoary.
- php4-curl: No summary available for php4-curl in ubuntu hoary.
No description available for php4-curl in ubuntu hoary.
- php4-domxml: No summary available for php4-domxml in ubuntu hoary.
No description available for php4-domxml in ubuntu hoary.
- php4-gd: No summary available for php4-gd in ubuntu hoary.
No description available for php4-gd in ubuntu hoary.
- php4-imap: No summary available for php4-imap in ubuntu hoary.
No description available for php4-imap in ubuntu hoary.
- php4-ldap: No summary available for php4-ldap in ubuntu hoary.
No description available for php4-ldap in ubuntu hoary.
- php4-mcal: No summary available for php4-mcal in ubuntu hoary.
No description available for php4-mcal in ubuntu hoary.
- php4-mhash: No summary available for php4-mhash in ubuntu hoary.
No description available for php4-mhash in ubuntu hoary.
- php4-mysql: No summary available for php4-mysql in ubuntu hoary.
No description available for php4-mysql in ubuntu hoary.
- php4-odbc: No summary available for php4-odbc in ubuntu hoary.
No description available for php4-odbc in ubuntu hoary.
- php4-pear: No summary available for php4-pear in ubuntu hoary.
No description available for php4-pear in ubuntu hoary.
- php4-recode: No summary available for php4-recode in ubuntu hoary.
No description available for php4-recode in ubuntu hoary.
- php4-snmp: No summary available for php4-snmp in ubuntu hoary.
No description available for php4-snmp in ubuntu hoary.
- php4-sybase: No summary available for php4-sybase in ubuntu hoary.
No description available for php4-sybase in ubuntu hoary.
- php4-universe-common: No summary available for php4-universe-common in ubuntu hoary.
No description available for php4-universe-
common in ubuntu hoary.
- php4-xslt: No summary available for php4-xslt in ubuntu hoary.
No description available for php4-xslt in ubuntu hoary.
