[ubuntu/trusty-security] php5 5.5.9+dfsg-1ubuntu4.24 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Mon Mar 19 11:40:34 UTC 2018
php5 (5.5.9+dfsg-1ubuntu4.24) trusty-security; urgency=medium
* SECURITY UPDATE: stream_get_meta_data issue
- debian/patches/CVE-2016-10712.patch: properly handle metadata in
ext/standard/streamsfuncs.c, ext/standard/tests/*,
main/streams/memory.c.
- debian/patches/CVE-2016-10712-2.patch: fix various tests.
- CVE-2016-10712
* SECURITY UPDATE: stack-based under-read in HTTP response parsing
- debian/patches/CVE-2018-7584.patch: prevent reading beyond buffer
start in ext/standard/http_fopen_wrapper.c,
ext/standard/tests/http/bug75981.phpt.
- CVE-2018-7584
Date: 2018-03-16 12:14:32.703264+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.24
-------------- next part --------------
Sorry, changesfile not available.
More information about the Trusty-changes
mailing list