php5 5.2.10.dfsg.1-2ubuntu6.5 source package in Ubuntu
Changelog
php5 (5.2.10.dfsg.1-2ubuntu6.5) karmic-security; urgency=low * SECURITY UPDATE: denial of service via xmlrpc crafted argument - debian/patches/CVE-2010-0397.patch: make sure method_name isn't empty in ext/xmlrpc/xmlrpc-epi-php.c, add test to ext/xmlrpc/tests/bug51288.phpt. - CVE-2010-0397 * SECURITY UPDATE: weak entropy in Linear Congruential Generator (LCG) - debian/patches/CVE-2010-1128.patch: add more entropy in ext/standard/lcg.c. - CVE-2010-1128 * SECURITY UPDATE: safe_mode bypass via trailing slash in dir pathnames - debian/patches/CVE-2010-1129.patch: properly validate pathname in ext/standard/file.c. - CVE-2010-1129 * SECURITY UPDATE: safe_mode bypass via semicolon in session_save_path - debian/patches/CVE-2010-1130.patch: check for semicolon in ext/session/session.c. - CVE-2010-1130 * SECURITY UPDATE: arbitrary code execution via empty SQL query - debian/patches/CVE-2010-1868.patch: use ecalloc instead of emalloc in ext/sqlite/sqlite.c. - CVE-2010-1868 * SECURITY UPDATE: denial of service via fnmatch stack consumption - debian/patches/CVE-2010-1917.patch: limit size of pattern in ext/standard/file.c. - CVE-2010-1917 * SECURITY UPDATE: sensitive information disclosure or arbitrary code execution via use-after-free in SplObjectStorage unserializer - debian/patches/CVE-2010-2225.patch: fix logic in ext/spl/spl_observer.c. - CVE-2010-2225 * SECURITY UPDATE: sensitive information disclosure via error messages - debian/patches/CVE-2010-2531.patch: don't display data when flushing output buffer in ext/standard/{var.c,php_var.h}, fix tests in ext/standard/tests/general_functions/*. - CVE-2010-2531 * SECURITY UPDATE: arbitrary session variable modification via crafted session variable name - debian/patches/CVE-2010-3065.patch: handle PS_UNDEF_MARKER marker in ext/session/session.c. - CVE-2010-3065 -- Marc Deslauriers <email address hidden> Tue, 14 Sep 2010 14:41:26 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Karmic
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any
- Section:
- php
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
php5_5.2.10.dfsg.1.orig.tar.gz | 10.9 MiB | a427a0496335732c3878e4afe8cd4d3f7c6e3136bf3c4ee6e3022f71d0db662c |
php5_5.2.10.dfsg.1-2ubuntu6.5.diff.gz | 951.2 KiB | 642c20e311762b0bb3f49120b825a7cbb4beb927848b607b2a5415638ddb0eb3 |
php5_5.2.10.dfsg.1-2ubuntu6.5.dsc | 2.5 KiB | a436d3969cd1915b2050ae9a779780341f7f9263b97b09d2e3747147b9db45ff |
Available diffs
Binary packages built by this source
- libapache2-mod-php5: No summary available for libapache2-mod-php5 in ubuntu karmic.
No description available for libapache2-mod-php5 in ubuntu karmic.
- libapache2-mod-php5filter: No summary available for libapache2-mod-php5filter in ubuntu karmic.
No description available for libapache2-
mod-php5filter in ubuntu karmic.
- php-pear: No summary available for php-pear in ubuntu karmic.
No description available for php-pear in ubuntu karmic.
- php5: No summary available for php5 in ubuntu karmic.
No description available for php5 in ubuntu karmic.
- php5-cgi: No summary available for php5-cgi in ubuntu karmic.
No description available for php5-cgi in ubuntu karmic.
- php5-cli: No summary available for php5-cli in ubuntu karmic.
No description available for php5-cli in ubuntu karmic.
- php5-common: No summary available for php5-common in ubuntu karmic.
No description available for php5-common in ubuntu karmic.
- php5-curl: No summary available for php5-curl in ubuntu karmic.
No description available for php5-curl in ubuntu karmic.
- php5-dbg: No summary available for php5-dbg in ubuntu karmic.
No description available for php5-dbg in ubuntu karmic.
- php5-dev: No summary available for php5-dev in ubuntu karmic.
No description available for php5-dev in ubuntu karmic.
- php5-gd: No summary available for php5-gd in ubuntu karmic.
No description available for php5-gd in ubuntu karmic.
- php5-gmp: No summary available for php5-gmp in ubuntu karmic.
No description available for php5-gmp in ubuntu karmic.
- php5-ldap: No summary available for php5-ldap in ubuntu karmic.
No description available for php5-ldap in ubuntu karmic.
- php5-mhash: No summary available for php5-mhash in ubuntu karmic.
No description available for php5-mhash in ubuntu karmic.
- php5-mysql: No summary available for php5-mysql in ubuntu karmic.
No description available for php5-mysql in ubuntu karmic.
- php5-odbc: No summary available for php5-odbc in ubuntu karmic.
No description available for php5-odbc in ubuntu karmic.
- php5-pgsql: No summary available for php5-pgsql in ubuntu karmic.
No description available for php5-pgsql in ubuntu karmic.
- php5-pspell: No summary available for php5-pspell in ubuntu karmic.
No description available for php5-pspell in ubuntu karmic.
- php5-recode: No summary available for php5-recode in ubuntu karmic.
No description available for php5-recode in ubuntu karmic.
- php5-snmp: No summary available for php5-snmp in ubuntu karmic.
No description available for php5-snmp in ubuntu karmic.
- php5-sqlite: No summary available for php5-sqlite in ubuntu karmic.
No description available for php5-sqlite in ubuntu karmic.
- php5-sybase: No summary available for php5-sybase in ubuntu karmic.
No description available for php5-sybase in ubuntu karmic.
- php5-tidy: No summary available for php5-tidy in ubuntu karmic.
No description available for php5-tidy in ubuntu karmic.
- php5-xmlrpc: No summary available for php5-xmlrpc in ubuntu karmic.
No description available for php5-xmlrpc in ubuntu karmic.
- php5-xsl: No summary available for php5-xsl in ubuntu karmic.
No description available for php5-xsl in ubuntu karmic.