Ubuntu
php5 package

php5 5.1.2-1ubuntu3.3 source package in Ubuntu

Changelog

php5 (5.1.2-1ubuntu3.3) dapper-security; urgency=low

  * SECURITY UPDATE: Multiple vulnerabilities.
  * Fix CVE number in 5.1.2-1ubuntu3.1 changelog: The curl open_basedir
    bypass is actually CVE-2006-4483, not -2563.
  * Add debian/patches/CVE-2006-4485.patch:
    - Fix buffer overread in stripos().
    - Ported from upstream CVS:
      http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?view=diff&r1=1.547&r2=1.548
  * Add debian/patches/CVE-2006-4486.patch:
    - Fix integer overflow and memory_limit bypass on 64 bit platforms.
    - Patch stolen from RedHat security update, not fixed upstream yet.
  * Add debian/patches/CVE-2006-4625.patch:
    - Fix open_basedir/safe_mode bypass with ini_restore().
    - Ported from upstream CVS:
      http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_ini.c?r1=1.39.2.2&r2=1.39.2.3
  * Add debian/patches/CVE-2006-4812.patch:
    - Fix integer overflow in Zend's ecalloc().
    - Ported from upstream CVS:
      http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162

 -- Martin Pitt <email address hidden>   Tue, 10 Oct 2006 13:12:34 +0000

Upload details

Uploaded by:
Martin Pitt
Uploaded to:
Dapper
Original maintainer:
Debian PHP Maintainers
Architectures:
any
Section:
web
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
php5_5.1.2.orig.tar.gz 7.7 MiB cafedfc92b80cba342abfeab91a6498b080dc3af8c22667423c33a3cec956251
php5_5.1.2-1ubuntu3.3.diff.gz 103.9 KiB d1f64ef002bf5eee45228f2f310dc175e3744b4f7a36874b06c898231cacd2d0
php5_5.1.2-1ubuntu3.3.dsc 1.7 KiB a3525bd9f2ff48d5eb2065b4e47fbe28a8bdaf0921c9f90ca429e8fe2c4b59bf

View changes file

Binary packages built by this source

libapache2-mod-php5: No summary available for libapache2-mod-php5 in ubuntu dapper.

No description available for libapache2-mod-php5 in ubuntu dapper.

php-pear: No summary available for php-pear in ubuntu dapper.

No description available for php-pear in ubuntu dapper.

php5: No summary available for php5 in ubuntu dapper.

No description available for php5 in ubuntu dapper.

php5-cgi: No summary available for php5-cgi in ubuntu dapper.

No description available for php5-cgi in ubuntu dapper.

php5-cli: No summary available for php5-cli in ubuntu dapper.

No description available for php5-cli in ubuntu dapper.

php5-common: No summary available for php5-common in ubuntu dapper.

No description available for php5-common in ubuntu dapper.

php5-curl: No summary available for php5-curl in ubuntu dapper.

No description available for php5-curl in ubuntu dapper.

php5-dev: No summary available for php5-dev in ubuntu dapper.

No description available for php5-dev in ubuntu dapper.

php5-gd: No summary available for php5-gd in ubuntu dapper.

No description available for php5-gd in ubuntu dapper.

php5-ldap: No summary available for php5-ldap in ubuntu dapper.

No description available for php5-ldap in ubuntu dapper.

php5-mhash: No summary available for php5-mhash in ubuntu dapper.

No description available for php5-mhash in ubuntu dapper.

php5-mysql: No summary available for php5-mysql in ubuntu dapper.

No description available for php5-mysql in ubuntu dapper.

php5-mysqli: No summary available for php5-mysqli in ubuntu dapper.

No description available for php5-mysqli in ubuntu dapper.

php5-odbc: No summary available for php5-odbc in ubuntu dapper.

No description available for php5-odbc in ubuntu dapper.

php5-pgsql: No summary available for php5-pgsql in ubuntu dapper.

No description available for php5-pgsql in ubuntu dapper.

php5-recode: No summary available for php5-recode in ubuntu dapper.

No description available for php5-recode in ubuntu dapper.

php5-snmp: No summary available for php5-snmp in ubuntu dapper.

No description available for php5-snmp in ubuntu dapper.

php5-sqlite: No summary available for php5-sqlite in ubuntu dapper.

No description available for php5-sqlite in ubuntu dapper.

php5-sybase: No summary available for php5-sybase in ubuntu dapper.

No description available for php5-sybase in ubuntu dapper.

php5-xmlrpc: No summary available for php5-xmlrpc in ubuntu dapper.

No description available for php5-xmlrpc in ubuntu dapper.

php5-xsl: No summary available for php5-xsl in ubuntu dapper.

No description available for php5-xsl in ubuntu dapper.