Thu Nov 26 20:03:50 GMT 2009

php5 (5.2.6.dfsg.1-3ubuntu4.4) jaunty-security; urgency=low

  * SECURITY UPDATE: certificate spoofing via null-byte certs (LP: #446313)
    - debian/patches/CVE-2009-3291.patch: validate certificate's CN length
      in ext/openssl/openssl.c.
    - CVE-2009-3291
  * SECURITY UPDATE: denial of service via malformed exif images
    (LP: #446313)
    - debian/patches/CVE-2009-3292.patch: check length, return codes, and
      nesting level in ext/exif/exif.c.
    - CVE-2009-3292
  * SECURITY UPDATE: safe_mode bypass via tempam function
    - debian/patches/CVE-2009-3557.patch: check for safe_mode in
      ext/standard/file.c.
    - CVE-2009-3557
  * SECURITY UPDATE: open_basedir restrictions bypass via posix_mkfifo
    - debian/patches/CVE-2009-3558.patch: check for open_basedir in
      ext/posix/posix.c.
    - CVE-2009-3558
  * SECURITY UPDATE: denial of service via large number of files in
    form-data POST request.
    - debian/patches/CVE-2009-4017.patch: introduce new "max_file_uploads"
      directive and enforce in main/main.c, main/rfc1867.c.
    - ATTENTION: this update changes previous php5 behaviour by limiting
      the number of files in a POST request to 50. This may be increased
      by adding a "max_file_uploads" directive to the php.ini configuration
      file.
    - CVE-2009-4017
  * SECURITY UPDATE: safe_mode_protected_env_vars bypass via proc_open()
    - debian/patches/CVE-2009-4018.patch: add safe_mode check in
      ext/standard/proc_open.c
    - CVE-2009-4018
  * debian/patches/fix-xmlrpc-datetime.diff
    - Prevent stack smashing when using xmlrpc and datetime. (LP: #239513)

Date: Thu, 26 Nov 2009 08:05:57 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/jaunty/+source/php5/5.2.6.dfsg.1-3ubuntu4.4
-------------- next part --------------
Format: 1.8
Date: Thu, 26 Nov 2009 08:05:57 -0500
Source: php5
Binary: php5 php5-common libapache2-mod-php5 libapache2-mod-php5filter php5-cgi php5-cli php5-dev php5-dbg php-pear php5-curl php5-gd php5-gmp php5-ldap php5-mhash php5-mysql php5-odbc php5-pgsql php5-pspell php5-recode php5-snmp php5-sqlite php5-sybase php5-tidy php5-xmlrpc php5-xsl
Architecture: source
Version: 5.2.6.dfsg.1-3ubuntu4.4
Distribution: jaunty-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libapache2-mod-php5 - server-side, HTML-embedded scripting language (Apache 2 module)
 libapache2-mod-php5filter - server-side, HTML-embedded scripting language (apache 2 filter mo
 php-pear   - PEAR - PHP Extension and Application Repository
 php5       - server-side, HTML-embedded scripting language (metapackage)
 php5-cgi   - server-side, HTML-embedded scripting language (CGI binary)
 php5-cli   - command-line interpreter for the php5 scripting language
 php5-common - Common files for packages built from the php5 source
 php5-curl  - CURL module for php5
 php5-dbg   - Debug symbols for PHP5
 php5-dev   - Files for PHP5 module development
 php5-gd    - GD module for php5
 php5-gmp   - GMP module for php5
 php5-ldap  - LDAP module for php5
 php5-mhash - MHASH module for php5
 php5-mysql - MySQL module for php5
 php5-odbc  - ODBC module for php5
 php5-pgsql - PostgreSQL module for php5
 php5-pspell - pspell module for php5
 php5-recode - recode module for php5
 php5-snmp  - SNMP module for php5
 php5-sqlite - SQLite module for php5
 php5-sybase - Sybase / MS SQL Server module for php5
 php5-tidy  - tidy module for php5
 php5-xmlrpc - XML-RPC module for php5
 php5-xsl   - XSL module for php5
Launchpad-Bugs-Fixed: 239513 446313 446313
Changes: 
 php5 (5.2.6.dfsg.1-3ubuntu4.4) jaunty-security; urgency=low
 .
   * SECURITY UPDATE: certificate spoofing via null-byte certs (LP: #446313)
     - debian/patches/CVE-2009-3291.patch: validate certificate's CN length
       in ext/openssl/openssl.c.
     - CVE-2009-3291
   * SECURITY UPDATE: denial of service via malformed exif images
     (LP: #446313)
     - debian/patches/CVE-2009-3292.patch: check length, return codes, and
       nesting level in ext/exif/exif.c.
     - CVE-2009-3292
   * SECURITY UPDATE: safe_mode bypass via tempam function
     - debian/patches/CVE-2009-3557.patch: check for safe_mode in
       ext/standard/file.c.
     - CVE-2009-3557
   * SECURITY UPDATE: open_basedir restrictions bypass via posix_mkfifo
     - debian/patches/CVE-2009-3558.patch: check for open_basedir in
       ext/posix/posix.c.
     - CVE-2009-3558
   * SECURITY UPDATE: denial of service via large number of files in
     form-data POST request.
     - debian/patches/CVE-2009-4017.patch: introduce new "max_file_uploads"
       directive and enforce in main/main.c, main/rfc1867.c.
     - ATTENTION: this update changes previous php5 behaviour by limiting
       the number of files in a POST request to 50. This may be increased
       by adding a "max_file_uploads" directive to the php.ini configuration
       file.
     - CVE-2009-4017
   * SECURITY UPDATE: safe_mode_protected_env_vars bypass via proc_open()
     - debian/patches/CVE-2009-4018.patch: add safe_mode check in
       ext/standard/proc_open.c
     - CVE-2009-4018
   * debian/patches/fix-xmlrpc-datetime.diff
     - Prevent stack smashing when using xmlrpc and datetime. (LP: #239513)
Checksums-Sha1: 
 5c0a2388142955c1d02a34326d81429e1e73378d 2542 php5_5.2.6.dfsg.1-3ubuntu4.4.dsc
 0bb356d69a8ca7072796bde45d1f5d3098598960 192070 php5_5.2.6.dfsg.1-3ubuntu4.4.diff.gz
Checksums-Sha256: 
 f9816e776121811ea6238f491bd5cd5b3243c48bb73657ee32109469c76c2541 2542 php5_5.2.6.dfsg.1-3ubuntu4.4.dsc
 1c8b52f245aeb726ca4f32d422bd01f5405f8f6f96bc0da659b54e850279e2d9 192070 php5_5.2.6.dfsg.1-3ubuntu4.4.diff.gz
Files: 
 660a97225ea6e6ed587253ff5c747863 2542 web optional php5_5.2.6.dfsg.1-3ubuntu4.4.dsc
 2643fd0deba45f011032cf3e0bd29c76 192070 web optional php5_5.2.6.dfsg.1-3ubuntu4.4.diff.gz
Original-Maintainer: Debian PHP Maintainers <pkg-php-maint at lists.alioth.debian.org>