Ubuntu
php5 package

php5 5.6.4+dfsg-4ubuntu6.3 source package in Ubuntu

Changelog

php5 (5.6.4+dfsg-4ubuntu6.3) vivid-security; urgency=medium

  * SECURITY UPDATE: phar segfault on invalid file
    - debian/patches/CVE-2015-5589-1.patch: check stream before closing in
      ext/phar/phar_object.c.
    - debian/patches/CVE-2015-5589-2.patch: add better checks in
      ext/phar/phar_object.c.
    - CVE-2015-5589
  * SECURITY UPDATE: phar buffer overflow in phar_fix_filepath
    - debian/patches/CVE-2015-5590.patch: properly handle path in
      ext/phar/phar.c.
    - CVE-2015-5590
  * SECURITY UPDATE: multiple use-after-free issues in unserialize()
    - debian/patches/CVE-2015-6831-1.patch: fix SPLArrayObject in
      ext/spl/spl_array.c, added test to ext/spl/tests/bug70166.phpt.
    - debian/patches/CVE-2015-6831-2.patch: fix SplObjectStorage in
      ext/spl/spl_observer.c, added test to ext/spl/tests/bug70168.phpt.
    - debian/patches/CVE-2015-6831-3.patch: fix SplDoublyLinkedList in
      ext/spl/spl_dllist.c, added test to ext/spl/tests/bug70169.phpt.
    - CVE-2015-6831
  * SECURITY UPDATE: dangling pointer in the unserialization of ArrayObject
    items
    - debian/patches/CVE-2015-6832.patch: fix dangling pointer in
      ext/spl/spl_array.c, added test to ext/spl/tests/bug70068.phpt.
    - CVE-2015-6832
  * SECURITY UPDATE: phar files extracted outside of destination dir
    - debian/patches/CVE-2015-6833-1.patch: limit extracted files to given
      directory in ext/phar/phar_object.c.
    - debian/patches/CVE-2015-6833-2.patch: use emalloc in
      ext/phar/phar_object.c.
    - CVE-2015-6833
  * SECURITY UPDATE: multiple vulnerabilities in unserialize()
    - debian/patches/CVE-2015-6834-1.patch: fix use-after-free in
      ext/standard/var.c, ext/standard/var_unserializer.*.
    - debian/patches/CVE-2015-6834-2.patch: fix use-after-free in
      ext/spl/spl_observer.c, added test to ext/spl/tests/bug70365.phpt.
    - debian/patches/CVE-2015-6834-3.patch: fix use-after-free in
      ext/spl/spl_dllist.c, added test to ext/spl/tests/bug70366.phpt.
    - CVE-2015-6834
  * SECURITY UPDATE: use after free in session deserializer
    - debian/patches/CVE-2015-6835-1.patch: fix use after free in
      ext/session/session.c, ext/standard/var_unserializer.*
      fixed tests in ext/session/tests/session_decode_error2.phpt,
      ext/session/tests/session_decode_variation3.phpt.
    - debian/patches/CVE-2015-6835-2.patch: add more fixes to
      ext/session/session.c.
    - CVE-2015-6835
  * SECURITY UPDATE: SOAP serialize_function_call() type confusion
    - debian/patches/CVE-2015-6836.patch: check type in ext/soap/soap.c,
      added test to ext/soap/tests/bug70388.phpt.
    - CVE-2015-6836
  * SECURITY UPDATE: NULL pointer dereference in XSLTProcessor class
    - debian/patches/CVE-2015-6837-6838.patch: fix logic in
      ext/xsl/xsltprocessor.c.
    - CVE-2015-6837
    - CVE-2015-6838

 -- Marc Deslauriers <email address hidden>  Mon, 28 Sep 2015 15:51:34 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Vivid
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
php
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
php5_5.6.4+dfsg.orig.tar.xz 10.5 MiB 0547406ece782fba70b68529329ceb2182dc1fd30ea769519efabd4355654329
php5_5.6.4+dfsg-4ubuntu6.3.debian.tar.xz 165.6 KiB d5aa323a4f7c06617a35867cb5b59a430fc0a2120f40edbcd683beaabafd0952
php5_5.6.4+dfsg-4ubuntu6.3.dsc 4.7 KiB 908ba01f8aad5ce317b711a0cdc0cbbdb6e034a738288e986105132bd0747a96

View changes file

Binary packages built by this source

libapache2-mod-php5: No summary available for libapache2-mod-php5 in ubuntu vivid.

No description available for libapache2-mod-php5 in ubuntu vivid.

libapache2-mod-php5-dbgsym: No summary available for libapache2-mod-php5-dbgsym in ubuntu vivid.

No description available for libapache2-mod-php5-dbgsym in ubuntu vivid.

libapache2-mod-php5filter: No summary available for libapache2-mod-php5filter in ubuntu vivid.

No description available for libapache2-mod-php5filter in ubuntu vivid.

libapache2-mod-php5filter-dbgsym: No summary available for libapache2-mod-php5filter-dbgsym in ubuntu vivid.

No description available for libapache2-mod-php5filter-dbgsym in ubuntu vivid.

libphp5-embed: No summary available for libphp5-embed in ubuntu vivid.

No description available for libphp5-embed in ubuntu vivid.

libphp5-embed-dbgsym: No summary available for libphp5-embed-dbgsym in ubuntu vivid.

No description available for libphp5-embed-dbgsym in ubuntu vivid.

php-pear: No summary available for php-pear in ubuntu vivid.

No description available for php-pear in ubuntu vivid.

php5: No summary available for php5 in ubuntu vivid.

No description available for php5 in ubuntu vivid.

php5-cgi: No summary available for php5-cgi in ubuntu vivid.

No description available for php5-cgi in ubuntu vivid.

php5-cgi-dbgsym: No summary available for php5-cgi-dbgsym in ubuntu vivid.

No description available for php5-cgi-dbgsym in ubuntu vivid.

php5-cli: No summary available for php5-cli in ubuntu vivid.

No description available for php5-cli in ubuntu vivid.

php5-cli-dbgsym: No summary available for php5-cli-dbgsym in ubuntu vivid.

No description available for php5-cli-dbgsym in ubuntu vivid.

php5-common: No summary available for php5-common in ubuntu vivid.

No description available for php5-common in ubuntu vivid.

php5-common-dbgsym: No summary available for php5-common-dbgsym in ubuntu vivid.

No description available for php5-common-dbgsym in ubuntu vivid.

php5-curl: No summary available for php5-curl in ubuntu vivid.

No description available for php5-curl in ubuntu vivid.

php5-curl-dbgsym: No summary available for php5-curl-dbgsym in ubuntu vivid.

No description available for php5-curl-dbgsym in ubuntu vivid.

php5-dbg: No summary available for php5-dbg in ubuntu vivid.

No description available for php5-dbg in ubuntu vivid.

php5-dev: No summary available for php5-dev in ubuntu vivid.

No description available for php5-dev in ubuntu vivid.

php5-dev-dbgsym: No summary available for php5-dev-dbgsym in ubuntu vivid.

No description available for php5-dev-dbgsym in ubuntu vivid.

php5-enchant: No summary available for php5-enchant in ubuntu vivid.

No description available for php5-enchant in ubuntu vivid.

php5-enchant-dbgsym: No summary available for php5-enchant-dbgsym in ubuntu vivid.

No description available for php5-enchant-dbgsym in ubuntu vivid.

php5-fpm: No summary available for php5-fpm in ubuntu vivid.

No description available for php5-fpm in ubuntu vivid.

php5-fpm-dbgsym: No summary available for php5-fpm-dbgsym in ubuntu vivid.

No description available for php5-fpm-dbgsym in ubuntu vivid.

php5-gd: No summary available for php5-gd in ubuntu vivid.

No description available for php5-gd in ubuntu vivid.

php5-gd-dbgsym: No summary available for php5-gd-dbgsym in ubuntu vivid.

No description available for php5-gd-dbgsym in ubuntu vivid.

php5-gmp: No summary available for php5-gmp in ubuntu vivid.

No description available for php5-gmp in ubuntu vivid.

php5-gmp-dbgsym: No summary available for php5-gmp-dbgsym in ubuntu vivid.

No description available for php5-gmp-dbgsym in ubuntu vivid.

php5-intl: No summary available for php5-intl in ubuntu vivid.

No description available for php5-intl in ubuntu vivid.

php5-intl-dbgsym: No summary available for php5-intl-dbgsym in ubuntu vivid.

No description available for php5-intl-dbgsym in ubuntu vivid.

php5-ldap: No summary available for php5-ldap in ubuntu vivid.

No description available for php5-ldap in ubuntu vivid.

php5-ldap-dbgsym: No summary available for php5-ldap-dbgsym in ubuntu vivid.

No description available for php5-ldap-dbgsym in ubuntu vivid.

php5-mysql: No summary available for php5-mysql in ubuntu vivid.

No description available for php5-mysql in ubuntu vivid.

php5-mysql-dbgsym: No summary available for php5-mysql-dbgsym in ubuntu vivid.

No description available for php5-mysql-dbgsym in ubuntu vivid.

php5-mysqlnd: No summary available for php5-mysqlnd in ubuntu vivid.

No description available for php5-mysqlnd in ubuntu vivid.

php5-mysqlnd-dbgsym: No summary available for php5-mysqlnd-dbgsym in ubuntu vivid.

No description available for php5-mysqlnd-dbgsym in ubuntu vivid.

php5-odbc: No summary available for php5-odbc in ubuntu vivid.

No description available for php5-odbc in ubuntu vivid.

php5-odbc-dbgsym: No summary available for php5-odbc-dbgsym in ubuntu vivid.

No description available for php5-odbc-dbgsym in ubuntu vivid.

php5-pgsql: No summary available for php5-pgsql in ubuntu vivid.

No description available for php5-pgsql in ubuntu vivid.

php5-pgsql-dbgsym: No summary available for php5-pgsql-dbgsym in ubuntu vivid.

No description available for php5-pgsql-dbgsym in ubuntu vivid.

php5-phpdbg: No summary available for php5-phpdbg in ubuntu vivid.

No description available for php5-phpdbg in ubuntu vivid.

php5-phpdbg-dbgsym: No summary available for php5-phpdbg-dbgsym in ubuntu vivid.

No description available for php5-phpdbg-dbgsym in ubuntu vivid.

php5-pspell: No summary available for php5-pspell in ubuntu vivid.

No description available for php5-pspell in ubuntu vivid.

php5-pspell-dbgsym: No summary available for php5-pspell-dbgsym in ubuntu vivid.

No description available for php5-pspell-dbgsym in ubuntu vivid.

php5-readline: No summary available for php5-readline in ubuntu vivid.

No description available for php5-readline in ubuntu vivid.

php5-readline-dbgsym: No summary available for php5-readline-dbgsym in ubuntu vivid.

No description available for php5-readline-dbgsym in ubuntu vivid.

php5-recode: No summary available for php5-recode in ubuntu vivid.

No description available for php5-recode in ubuntu vivid.

php5-recode-dbgsym: No summary available for php5-recode-dbgsym in ubuntu vivid.

No description available for php5-recode-dbgsym in ubuntu vivid.

php5-snmp: No summary available for php5-snmp in ubuntu vivid.

No description available for php5-snmp in ubuntu vivid.

php5-snmp-dbgsym: No summary available for php5-snmp-dbgsym in ubuntu vivid.

No description available for php5-snmp-dbgsym in ubuntu vivid.

php5-sqlite: No summary available for php5-sqlite in ubuntu vivid.

No description available for php5-sqlite in ubuntu vivid.

php5-sqlite-dbgsym: No summary available for php5-sqlite-dbgsym in ubuntu vivid.

No description available for php5-sqlite-dbgsym in ubuntu vivid.

php5-sybase: No summary available for php5-sybase in ubuntu vivid.

No description available for php5-sybase in ubuntu vivid.

php5-sybase-dbgsym: No summary available for php5-sybase-dbgsym in ubuntu vivid.

No description available for php5-sybase-dbgsym in ubuntu vivid.

php5-tidy: No summary available for php5-tidy in ubuntu vivid.

No description available for php5-tidy in ubuntu vivid.

php5-tidy-dbgsym: No summary available for php5-tidy-dbgsym in ubuntu vivid.

No description available for php5-tidy-dbgsym in ubuntu vivid.

php5-xmlrpc: No summary available for php5-xmlrpc in ubuntu vivid.

No description available for php5-xmlrpc in ubuntu vivid.

php5-xmlrpc-dbgsym: No summary available for php5-xmlrpc-dbgsym in ubuntu vivid.

No description available for php5-xmlrpc-dbgsym in ubuntu vivid.

php5-xsl: No summary available for php5-xsl in ubuntu vivid.

No description available for php5-xsl in ubuntu vivid.

php5-xsl-dbgsym: No summary available for php5-xsl-dbgsym in ubuntu vivid.

No description available for php5-xsl-dbgsym in ubuntu vivid.