php7.0 7.0.8-3ubuntu2 source package in Ubuntu

Changelog

php7.0 (7.0.8-3ubuntu2) yakkety; urgency=medium

  * SECURITY UPDATE: proxy request header vulnerability (httpoxy)
    - debian/patches/CVE-2016-5385.patch: only use HTTP_PROXY from the
      local environment in ext/standard/basic_functions.c, main/SAPI.c,
      main/php_variables.c.
    - CVE-2016-5385
  * SECURITY UPDATE: inadequate error handling in bzread()
    - debian/patches/CVE-2016-5399.patch: do not allow reading past error
      read in ext/bz2/bz2.c.
    - CVE-2016-5399
  * SECURITY UPDATE: integer overflow in the virtual_file_ex function
    - debian/patches/CVE-2016-6289.patch: properly check path_length in
      Zend/zend_virtual_cwd.c.
    - CVE-2016-6289
  * SECURITY UPDATE: use after free in unserialize() with unexpected
    session deserialization
    - debian/patches/CVE-2016-6290.patch: destroy var_hash properly in
      ext/session/session.c, added test to ext/session/tests/bug72562.phpt.
    - CVE-2016-6290
  * SECURITY UPDATE: out of bounds read in exif_process_IFD_in_MAKERNOTE
    - debian/patches/CVE-2016-6291.patch: add more bounds checks to
      ext/exif/exif.c.
    - CVE-2016-6291
  * SECURITY UPDATE: NULL pointer dereference in exif_process_user_comment
    - debian/patches/CVE-2016-6292.patch: properly handle encoding in
      ext/exif/exif.c.
    - CVE-2016-6292
  * SECURITY UPDATE: locale_accept_from_http out-of-bounds access
    - debian/patches/CVE-2016-6294.patch: check length in
      ext/intl/locale/locale_methods.c, added test to
      ext/intl/tests/bug72533.phpt.
    - CVE-2016-6294
  * SECURITY UPDATE: use after free vulnerability in SNMP with GC and
    unserialize()
    - debian/patches/CVE-2016-6295.patch: add new handler to
      ext/snmp/snmp.c, add test to ext/snmp/tests/bug72479.phpt.
    - CVE-2016-6295
  * SECURITY UPDATE: heap buffer overflow in simplestring_addn
    - debian/patches/CVE-2016-6296.patch: prevent overflows in
      ext/xmlrpc/libxmlrpc/simplestring.*.
    - CVE-2016-6296
  * SECURITY UPDATE: integer overflow in php_stream_zip_opener
    - debian/patches/CVE-2016-6297.patch: use size_t in
      ext/zip/zip_stream.c.
    - CVE-2016-6297
  * debian/patches/fix_exif_tests.patch: fix exif test results after
    security changes.

 -- Marc Deslauriers <email address hidden>  Wed, 27 Jul 2016 08:14:20 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Yakkety
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
misc
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
php7.0_7.0.8.orig.tar.xz 11.0 MiB 0a2142c458b0846f556b16da1c927d74c101aa951bb840549abe5c58584fb394
php7.0_7.0.8-3ubuntu2.debian.tar.xz 66.8 KiB a8e5ec1311f869b3c3a39a270974af43f9ab9bae8cd07a03997f769a1c7cf240
php7.0_7.0.8-3ubuntu2.dsc 5.6 KiB 50917ed9b043ad304d26d4c01000ec6ad40393a6beeadd9fbf582ccd676429e5

Available diffs

View changes file

Binary packages built by this source

libapache2-mod-php7.0: No summary available for libapache2-mod-php7.0 in ubuntu yakkety.

No description available for libapache2-mod-php7.0 in ubuntu yakkety.

libapache2-mod-php7.0-dbgsym: No summary available for libapache2-mod-php7.0-dbgsym in ubuntu yakkety.

No description available for libapache2-mod-php7.0-dbgsym in ubuntu yakkety.

libphp7.0-embed: No summary available for libphp7.0-embed in ubuntu yakkety.

No description available for libphp7.0-embed in ubuntu yakkety.

libphp7.0-embed-dbgsym: No summary available for libphp7.0-embed-dbgsym in ubuntu yakkety.

No description available for libphp7.0-embed-dbgsym in ubuntu yakkety.

php7.0: No summary available for php7.0 in ubuntu yakkety.

No description available for php7.0 in ubuntu yakkety.

php7.0-bcmath: No summary available for php7.0-bcmath in ubuntu yakkety.

No description available for php7.0-bcmath in ubuntu yakkety.

php7.0-bcmath-dbgsym: No summary available for php7.0-bcmath-dbgsym in ubuntu yakkety.

No description available for php7.0-bcmath-dbgsym in ubuntu yakkety.

php7.0-bz2: No summary available for php7.0-bz2 in ubuntu yakkety.

No description available for php7.0-bz2 in ubuntu yakkety.

php7.0-bz2-dbgsym: No summary available for php7.0-bz2-dbgsym in ubuntu yakkety.

No description available for php7.0-bz2-dbgsym in ubuntu yakkety.

php7.0-cgi: No summary available for php7.0-cgi in ubuntu yakkety.

No description available for php7.0-cgi in ubuntu yakkety.

php7.0-cgi-dbgsym: No summary available for php7.0-cgi-dbgsym in ubuntu yakkety.

No description available for php7.0-cgi-dbgsym in ubuntu yakkety.

php7.0-cli: No summary available for php7.0-cli in ubuntu yakkety.

No description available for php7.0-cli in ubuntu yakkety.

php7.0-cli-dbgsym: No summary available for php7.0-cli-dbgsym in ubuntu yakkety.

No description available for php7.0-cli-dbgsym in ubuntu yakkety.

php7.0-common: No summary available for php7.0-common in ubuntu yakkety.

No description available for php7.0-common in ubuntu yakkety.

php7.0-common-dbgsym: No summary available for php7.0-common-dbgsym in ubuntu yakkety.

No description available for php7.0-common-dbgsym in ubuntu yakkety.

php7.0-curl: No summary available for php7.0-curl in ubuntu yakkety.

No description available for php7.0-curl in ubuntu yakkety.

php7.0-curl-dbgsym: No summary available for php7.0-curl-dbgsym in ubuntu yakkety.

No description available for php7.0-curl-dbgsym in ubuntu yakkety.

php7.0-dba: No summary available for php7.0-dba in ubuntu yakkety.

No description available for php7.0-dba in ubuntu yakkety.

php7.0-dba-dbgsym: No summary available for php7.0-dba-dbgsym in ubuntu yakkety.

No description available for php7.0-dba-dbgsym in ubuntu yakkety.

php7.0-dev: No summary available for php7.0-dev in ubuntu yakkety.

No description available for php7.0-dev in ubuntu yakkety.

php7.0-enchant: No summary available for php7.0-enchant in ubuntu yakkety.

No description available for php7.0-enchant in ubuntu yakkety.

php7.0-enchant-dbgsym: No summary available for php7.0-enchant-dbgsym in ubuntu yakkety.

No description available for php7.0-enchant-dbgsym in ubuntu yakkety.

php7.0-fpm: No summary available for php7.0-fpm in ubuntu yakkety.

No description available for php7.0-fpm in ubuntu yakkety.

php7.0-fpm-dbgsym: No summary available for php7.0-fpm-dbgsym in ubuntu yakkety.

No description available for php7.0-fpm-dbgsym in ubuntu yakkety.

php7.0-gd: No summary available for php7.0-gd in ubuntu yakkety.

No description available for php7.0-gd in ubuntu yakkety.

php7.0-gd-dbgsym: No summary available for php7.0-gd-dbgsym in ubuntu yakkety.

No description available for php7.0-gd-dbgsym in ubuntu yakkety.

php7.0-gmp: No summary available for php7.0-gmp in ubuntu yakkety.

No description available for php7.0-gmp in ubuntu yakkety.

php7.0-gmp-dbgsym: No summary available for php7.0-gmp-dbgsym in ubuntu yakkety.

No description available for php7.0-gmp-dbgsym in ubuntu yakkety.

php7.0-imap: No summary available for php7.0-imap in ubuntu yakkety.

No description available for php7.0-imap in ubuntu yakkety.

php7.0-imap-dbgsym: No summary available for php7.0-imap-dbgsym in ubuntu yakkety.

No description available for php7.0-imap-dbgsym in ubuntu yakkety.

php7.0-interbase: No summary available for php7.0-interbase in ubuntu yakkety.

No description available for php7.0-interbase in ubuntu yakkety.

php7.0-interbase-dbgsym: No summary available for php7.0-interbase-dbgsym in ubuntu yakkety.

No description available for php7.0-interbase-dbgsym in ubuntu yakkety.

php7.0-intl: No summary available for php7.0-intl in ubuntu yakkety.

No description available for php7.0-intl in ubuntu yakkety.

php7.0-intl-dbgsym: No summary available for php7.0-intl-dbgsym in ubuntu yakkety.

No description available for php7.0-intl-dbgsym in ubuntu yakkety.

php7.0-json: No summary available for php7.0-json in ubuntu yakkety.

No description available for php7.0-json in ubuntu yakkety.

php7.0-json-dbgsym: No summary available for php7.0-json-dbgsym in ubuntu yakkety.

No description available for php7.0-json-dbgsym in ubuntu yakkety.

php7.0-ldap: No summary available for php7.0-ldap in ubuntu yakkety.

No description available for php7.0-ldap in ubuntu yakkety.

php7.0-ldap-dbgsym: No summary available for php7.0-ldap-dbgsym in ubuntu yakkety.

No description available for php7.0-ldap-dbgsym in ubuntu yakkety.

php7.0-mbstring: No summary available for php7.0-mbstring in ubuntu yakkety.

No description available for php7.0-mbstring in ubuntu yakkety.

php7.0-mbstring-dbgsym: No summary available for php7.0-mbstring-dbgsym in ubuntu yakkety.

No description available for php7.0-mbstring-dbgsym in ubuntu yakkety.

php7.0-mcrypt: No summary available for php7.0-mcrypt in ubuntu yakkety.

No description available for php7.0-mcrypt in ubuntu yakkety.

php7.0-mcrypt-dbgsym: No summary available for php7.0-mcrypt-dbgsym in ubuntu yakkety.

No description available for php7.0-mcrypt-dbgsym in ubuntu yakkety.

php7.0-mysql: No summary available for php7.0-mysql in ubuntu yakkety.

No description available for php7.0-mysql in ubuntu yakkety.

php7.0-mysql-dbgsym: No summary available for php7.0-mysql-dbgsym in ubuntu yakkety.

No description available for php7.0-mysql-dbgsym in ubuntu yakkety.

php7.0-odbc: No summary available for php7.0-odbc in ubuntu yakkety.

No description available for php7.0-odbc in ubuntu yakkety.

php7.0-odbc-dbgsym: No summary available for php7.0-odbc-dbgsym in ubuntu yakkety.

No description available for php7.0-odbc-dbgsym in ubuntu yakkety.

php7.0-opcache: No summary available for php7.0-opcache in ubuntu yakkety.

No description available for php7.0-opcache in ubuntu yakkety.

php7.0-opcache-dbgsym: No summary available for php7.0-opcache-dbgsym in ubuntu yakkety.

No description available for php7.0-opcache-dbgsym in ubuntu yakkety.

php7.0-pgsql: No summary available for php7.0-pgsql in ubuntu yakkety.

No description available for php7.0-pgsql in ubuntu yakkety.

php7.0-pgsql-dbgsym: No summary available for php7.0-pgsql-dbgsym in ubuntu yakkety.

No description available for php7.0-pgsql-dbgsym in ubuntu yakkety.

php7.0-phpdbg: No summary available for php7.0-phpdbg in ubuntu yakkety.

No description available for php7.0-phpdbg in ubuntu yakkety.

php7.0-phpdbg-dbgsym: No summary available for php7.0-phpdbg-dbgsym in ubuntu yakkety.

No description available for php7.0-phpdbg-dbgsym in ubuntu yakkety.

php7.0-pspell: No summary available for php7.0-pspell in ubuntu yakkety.

No description available for php7.0-pspell in ubuntu yakkety.

php7.0-pspell-dbgsym: No summary available for php7.0-pspell-dbgsym in ubuntu yakkety.

No description available for php7.0-pspell-dbgsym in ubuntu yakkety.

php7.0-readline: No summary available for php7.0-readline in ubuntu yakkety.

No description available for php7.0-readline in ubuntu yakkety.

php7.0-readline-dbgsym: No summary available for php7.0-readline-dbgsym in ubuntu yakkety.

No description available for php7.0-readline-dbgsym in ubuntu yakkety.

php7.0-recode: No summary available for php7.0-recode in ubuntu yakkety.

No description available for php7.0-recode in ubuntu yakkety.

php7.0-recode-dbgsym: No summary available for php7.0-recode-dbgsym in ubuntu yakkety.

No description available for php7.0-recode-dbgsym in ubuntu yakkety.

php7.0-snmp: No summary available for php7.0-snmp in ubuntu yakkety.

No description available for php7.0-snmp in ubuntu yakkety.

php7.0-snmp-dbgsym: No summary available for php7.0-snmp-dbgsym in ubuntu yakkety.

No description available for php7.0-snmp-dbgsym in ubuntu yakkety.

php7.0-soap: No summary available for php7.0-soap in ubuntu yakkety.

No description available for php7.0-soap in ubuntu yakkety.

php7.0-soap-dbgsym: No summary available for php7.0-soap-dbgsym in ubuntu yakkety.

No description available for php7.0-soap-dbgsym in ubuntu yakkety.

php7.0-sqlite3: No summary available for php7.0-sqlite3 in ubuntu yakkety.

No description available for php7.0-sqlite3 in ubuntu yakkety.

php7.0-sqlite3-dbgsym: No summary available for php7.0-sqlite3-dbgsym in ubuntu yakkety.

No description available for php7.0-sqlite3-dbgsym in ubuntu yakkety.

php7.0-sybase: No summary available for php7.0-sybase in ubuntu yakkety.

No description available for php7.0-sybase in ubuntu yakkety.

php7.0-sybase-dbgsym: No summary available for php7.0-sybase-dbgsym in ubuntu yakkety.

No description available for php7.0-sybase-dbgsym in ubuntu yakkety.

php7.0-tidy: No summary available for php7.0-tidy in ubuntu yakkety.

No description available for php7.0-tidy in ubuntu yakkety.

php7.0-tidy-dbgsym: No summary available for php7.0-tidy-dbgsym in ubuntu yakkety.

No description available for php7.0-tidy-dbgsym in ubuntu yakkety.

php7.0-xml: No summary available for php7.0-xml in ubuntu yakkety.

No description available for php7.0-xml in ubuntu yakkety.

php7.0-xml-dbgsym: No summary available for php7.0-xml-dbgsym in ubuntu yakkety.

No description available for php7.0-xml-dbgsym in ubuntu yakkety.

php7.0-xmlrpc: No summary available for php7.0-xmlrpc in ubuntu yakkety.

No description available for php7.0-xmlrpc in ubuntu yakkety.

php7.0-xmlrpc-dbgsym: No summary available for php7.0-xmlrpc-dbgsym in ubuntu yakkety.

No description available for php7.0-xmlrpc-dbgsym in ubuntu yakkety.

php7.0-xsl: No summary available for php7.0-xsl in ubuntu yakkety.

No description available for php7.0-xsl in ubuntu yakkety.

php7.0-zip: No summary available for php7.0-zip in ubuntu yakkety.

No description available for php7.0-zip in ubuntu yakkety.

php7.0-zip-dbgsym: No summary available for php7.0-zip-dbgsym in ubuntu yakkety.

No description available for php7.0-zip-dbgsym in ubuntu yakkety.