php5 5.2.6-2ubuntu4.1 source package in Ubuntu
Changelog
php5 (5.2.6-2ubuntu4.1) intrepid-security; urgency=low * SECURITY UPDATE: denial of service and possible arbitrary code execution via crafted font file. (LP: #286851) - debian/patches/120-SECURITY-CVE-2008-3658.patch: make sure font->nchars, font->h, and font->w don't cause overflows in ext/gd/gd.c. Also, add test script ext/gd/tests/imageloadfont_invalid.phpt. - CVE-2008-3658 * SECURITY UPDATE: denial of service and possible arbitrary code execution via the delimiter argument to the explode function. (LP: #286851) - debian/patches/121-SECURITY-CVE-2008-3659.patch: make sure needle_length is sane in ext/standard/tests/strings/explode_bug.phpt. Also, add test script ext/standard/tests/strings/explode_bug.phpt. - CVE-2008-3659 * SECURITY UPDATE: denial of service via a request with multiple dots preceding the extension. (ex: foo..php) (LP: #286851) - debian/patches/122-SECURITY-CVE-2008-3660.patch: improve .. cleaning with a new is_valid_path() function in sapi/cgi/cgi_main.c. - CVE-2008-3660 * SECURITY UPDATE: mbstring extension arbitrary code execution via crafted string containing HTML entity. (LP: #317672) - debian/patches/123-SECURITY-CVE-2008-5557.patch: improve mbfl_filt_conv_html_dec_flush() error handling in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c. - CVE-2008-5557 * SECURITY UPDATE: safe_mode restriction bypass via unrestricted variable settings. - debian/patches/124-SECURITY-CVE-2008-5624.patch: make sure the page_uid and page_gid get initialized properly in ext/standard/basic_functions.c. Also, init server_context before processing config variables in sapi/apache/mod_php5.c. - CVE-2008-5624 * SECURITY UPDATE: arbitrary file write by placing a "php_value error_log" entry in a .htaccess file. - debian/patches/125-SECURITY-CVE-2008-5625.patch: enforce restrictions when merging in dir entry in sapi/apache/mod_php5.c and sapi/apache2handler/apache_config.c. - CVE-2008-5625 * SECURITY UPDATE: arbitrary file overwrite from directory traversal via zip file with dot-dot filenames. - debian/patches/126-SECURITY-CVE-2008-5658.patch: clean up filename paths in ext/zip/php_zip.c with new php_zip_realpath_r(), php_zip_virtual_file_ex() and php_zip_make_relative_path() functions. - CVE-2008-5658 -- Marc Deslauriers <email address hidden> Mon, 26 Jan 2009 08:43:21 -0500
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Intrepid
- Original maintainer:
- Ubuntu Development Team
- Architectures:
- any
- Section:
- web
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
php5_5.2.6.orig.tar.gz | 11.5 MiB | 8ea6dd3010b260d80cf41619363d0d3593ddd97c3a3e09f229816635fce23149 |
php5_5.2.6-2ubuntu4.1.diff.gz | 164.4 KiB | ed7d92f64eafa1aa2d4583d0947bad67134ca8923e63bad23cd0037320201afd |
php5_5.2.6-2ubuntu4.1.dsc | 2.5 KiB | 254e5625b9be9da3b6f6576a90d8fe414fddca6a3eef500ccc8ae0ed7bf684b9 |
Available diffs
Binary packages built by this source
- libapache2-mod-php5: No summary available for libapache2-mod-php5 in ubuntu intrepid.
No description available for libapache2-mod-php5 in ubuntu intrepid.
- libapache2-mod-php5filter: No summary available for libapache2-mod-php5filter in ubuntu intrepid.
No description available for libapache2-
mod-php5filter in ubuntu intrepid.
- php-pear: No summary available for php-pear in ubuntu intrepid.
No description available for php-pear in ubuntu intrepid.
- php5: No summary available for php5 in ubuntu intrepid.
No description available for php5 in ubuntu intrepid.
- php5-cgi: No summary available for php5-cgi in ubuntu intrepid.
No description available for php5-cgi in ubuntu intrepid.
- php5-cli: No summary available for php5-cli in ubuntu intrepid.
No description available for php5-cli in ubuntu intrepid.
- php5-common: No summary available for php5-common in ubuntu intrepid.
No description available for php5-common in ubuntu intrepid.
- php5-curl: No summary available for php5-curl in ubuntu intrepid.
No description available for php5-curl in ubuntu intrepid.
- php5-dbg: No summary available for php5-dbg in ubuntu intrepid.
No description available for php5-dbg in ubuntu intrepid.
- php5-dev: No summary available for php5-dev in ubuntu intrepid.
No description available for php5-dev in ubuntu intrepid.
- php5-gd: No summary available for php5-gd in ubuntu intrepid.
No description available for php5-gd in ubuntu intrepid.
- php5-gmp: No summary available for php5-gmp in ubuntu intrepid.
No description available for php5-gmp in ubuntu intrepid.
- php5-ldap: No summary available for php5-ldap in ubuntu intrepid.
No description available for php5-ldap in ubuntu intrepid.
- php5-mhash: No summary available for php5-mhash in ubuntu intrepid.
No description available for php5-mhash in ubuntu intrepid.
- php5-mysql: No summary available for php5-mysql in ubuntu intrepid.
No description available for php5-mysql in ubuntu intrepid.
- php5-odbc: No summary available for php5-odbc in ubuntu intrepid.
No description available for php5-odbc in ubuntu intrepid.
- php5-pgsql: No summary available for php5-pgsql in ubuntu intrepid.
No description available for php5-pgsql in ubuntu intrepid.
- php5-pspell: No summary available for php5-pspell in ubuntu intrepid.
No description available for php5-pspell in ubuntu intrepid.
- php5-recode: No summary available for php5-recode in ubuntu intrepid.
No description available for php5-recode in ubuntu intrepid.
- php5-snmp: No summary available for php5-snmp in ubuntu intrepid.
No description available for php5-snmp in ubuntu intrepid.
- php5-sqlite: No summary available for php5-sqlite in ubuntu intrepid.
No description available for php5-sqlite in ubuntu intrepid.
- php5-sybase: No summary available for php5-sybase in ubuntu intrepid.
No description available for php5-sybase in ubuntu intrepid.
- php5-tidy: No summary available for php5-tidy in ubuntu intrepid.
No description available for php5-tidy in ubuntu intrepid.
- php5-xmlrpc: No summary available for php5-xmlrpc in ubuntu intrepid.
No description available for php5-xmlrpc in ubuntu intrepid.
- php5-xsl: No summary available for php5-xsl in ubuntu intrepid.
No description available for php5-xsl in ubuntu intrepid.