php8.1 8.1.7-1ubuntu3.1 source package in Ubuntu

Changelog

php8.1 (8.1.7-1ubuntu3.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2022-31628-1.patch: adding a recursion limit
      in ext/phar/phar.c, ext/phar/tests/bug81726.phpt.
    - debian/source/include-binaries: add ext/phar/tests/bug81726.gz.
    - debian/patches/CVE-2022-31628-2.patch: avoid a second check in
      ext/phar/phar.c.
    - CVE-2022-31628
  * SECURITY UPDATE: Cookie injection
    - debian/patches/CVE-2022-31629.patch: don't mangle HTTP
      variable names that clash with ones that have a specific semantic
      meaning in ext/standard/test/bug81727.phpt,
      main/php_variables.c.
    - CVE-2022-31629
  * SECURITY UPDATE: Out of bounds read
    - debian/patches/CVE-2022-31630.patch: adds validation in
      imageloadfont() for OOB in ext/gd/gd.c, ext/gd/tests/bug81739.phpt.
    - CVE-2022-31630
  * SECURITY UPDATE: Buffer overflow
    - debian/patches/CVE-2022-37454.patch: fixes buffer overflow in
      hash_update() on long parameter in
      ext/hash/sha3/generic32lc/KeccakSponge.inc,
      ext/hash/sha3/generic64lc/KeccakSponge.inc.
    - CVE-2022-37454

 -- Leonidas Da Silva Barbosa <email address hidden>  Wed, 02 Nov 2022 10:39:03 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Kinetic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
php
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
php8.1_8.1.7.orig.tar.xz 11.2 MiB f042322f1b5a9f7c2decb84b7086ef676896c2f7178739b9672afafa964ed0e5
php8.1_8.1.7-1ubuntu3.1.debian.tar.xz 73.1 KiB 1571532b02976a726cc7c91339486909fa6a3adf74f07fba5567c2c888a5a2d9
php8.1_8.1.7-1ubuntu3.1.dsc 5.4 KiB 895d0d7d07318760194875ff233a056f45953bf773654a4a9e47fa5231b88a10

View changes file

Binary packages built by this source

libapache2-mod-php7.4: Transitional package

 This is a transitional dummy package to libapache2-mod-php8.1. It can
 be safely removed and libapache2-mod-php installed instead.

libapache2-mod-php8.0: Transitional package

 This is a transitional dummy package to libapache2-mod-php8.1. It can
 be safely removed and libapache2-mod-php installed instead.

libapache2-mod-php8.1: server-side, HTML-embedded scripting language (Apache 2 module)

 This package provides the PHP module for the Apache 2 webserver (as
 found in the apache2-mpm-prefork package). Please note that this package
 ONLY works with Apache's prefork MPM, as it is not compiled thread-safe.
 .
 The following extensions are built in: Core date filter hash json libxml
 openssl pcre Reflection session sodium SPL standard zlib.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

libapache2-mod-php8.1-dbgsym: debug symbols for libapache2-mod-php8.1
libphp8.1-embed: HTML-embedded scripting language (Embedded SAPI library)

 This package provides the library /usr/lib/libphp8.1.so which can
 be used by application developers to embed PHP scripting functionality.
 .
 The following extensions are built in: Core date filter hash json libxml
 openssl pcntl pcre Reflection session sodium SPL standard zlib.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.
 .
 WARNING: The embed SAPI is experimental and there's no guarantee that
 the API/ABI will be kept compatible even between minor releases. You
 have been warned.

libphp8.1-embed-dbgsym: debug symbols for libphp8.1-embed
php8.1: server-side, HTML-embedded scripting language (metapackage)

 This package is a metapackage that, when installed, guarantees that you
 have at least one of the four server-side versions of the PHP interpreter
 installed. Removing this package won't remove PHP from your system, however
 it may remove other packages that depend on this one.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-bcmath: Bcmath module for PHP

 This package provides the Bcmath module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-bcmath-dbgsym: debug symbols for php8.1-bcmath
php8.1-bz2: bzip2 module for PHP

 This package provides the bzip2 module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-bz2-dbgsym: debug symbols for php8.1-bz2
php8.1-cgi: server-side, HTML-embedded scripting language (CGI binary)

 This package provides the /usr/lib/cgi-bin/php CGI interpreter built
 for use in Apache 2 with mod_actions, or any other CGI httpd that
 supports a similar mechanism. Note that MOST users probably
 want the php8.1-fpm package.
 .
 The following extensions are built in: Core date filter hash json libxml
 openssl pcntl pcre Reflection session sodium SPL standard zlib.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-cgi-dbgsym: debug symbols for php8.1-cgi
php8.1-cli: command-line interpreter for the PHP scripting language

 This package provides the /usr/bin/php8.1 command interpreter, useful for
 testing PHP scripts from a shell or performing general shell scripting tasks.
 .
 The following extensions are built in: Core date filter hash json libxml
 openssl pcntl pcre Reflection session sodium SPL standard zlib.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-cli-dbgsym: debug symbols for php8.1-cli
php8.1-common: documentation, examples and common module for PHP

 This package provides the documentation, examples and common module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-common-dbgsym: debug symbols for php8.1-common
php8.1-curl: CURL module for PHP

 This package provides the CURL module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-curl-dbgsym: debug symbols for php8.1-curl
php8.1-dba: DBA module for PHP

 This package provides the DBA module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-dba-dbgsym: debug symbols for php8.1-dba
php8.1-dev: Files for PHP8.1 module development

 This package provides the files from the PHP8.1 source needed for compiling
 additional modules.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-enchant: Enchant module for PHP

 This package provides the Enchant module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-enchant-dbgsym: debug symbols for php8.1-enchant
php8.1-fpm: server-side, HTML-embedded scripting language (FPM-CGI binary)

 This package provides the Fast Process Manager interpreter that runs
 as a daemon and receives Fast/CGI requests. Note that MOST Apache users
 probably want the libapache2-mod-php8.1 package.
 .
 The following extensions are built in: Core date filter hash json libxml
 openssl pcre Reflection session sodium SPL standard zlib.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-fpm-dbgsym: debug symbols for php8.1-fpm
php8.1-gd: GD module for PHP

 This package provides the GD module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-gd-dbgsym: debug symbols for php8.1-gd
php8.1-gmp: GMP module for PHP

 This package provides the GMP module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-gmp-dbgsym: debug symbols for php8.1-gmp
php8.1-imap: IMAP module for PHP

 This package provides the IMAP module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-imap-dbgsym: debug symbols for php8.1-imap
php8.1-interbase: Interbase module for PHP

 This package provides the Interbase module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-interbase-dbgsym: debug symbols for php8.1-interbase
php8.1-intl: Internationalisation module for PHP

 This package provides the Internationalisation module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-intl-dbgsym: debug symbols for php8.1-intl
php8.1-ldap: LDAP module for PHP

 This package provides the LDAP module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-ldap-dbgsym: debug symbols for php8.1-ldap
php8.1-mbstring: MBSTRING module for PHP

 This package provides the MBSTRING module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-mbstring-dbgsym: debug symbols for php8.1-mbstring
php8.1-mysql: MySQL module for PHP

 This package provides the MySQL module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-mysql-dbgsym: debug symbols for php8.1-mysql
php8.1-odbc: ODBC module for PHP

 This package provides the ODBC module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-odbc-dbgsym: debug symbols for php8.1-odbc
php8.1-opcache: Zend OpCache module for PHP

 This package provides the Zend OpCache module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-opcache-dbgsym: debug symbols for php8.1-opcache
php8.1-pgsql: PostgreSQL module for PHP

 This package provides the PostgreSQL module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-pgsql-dbgsym: debug symbols for php8.1-pgsql
php8.1-phpdbg: server-side, HTML-embedded scripting language (PHPDBG binary)

 This package provides the /usr/bin/phpdbg command interpreter, useful for
 stepthrough debugging of PHP code.
 .
 The following extensions are built in: Core date filter hash json libxml
 openssl pcntl pcre Reflection session sodium SPL standard zlib.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-phpdbg-dbgsym: debug symbols for php8.1-phpdbg
php8.1-pspell: pspell module for PHP

 This package provides the pspell module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-pspell-dbgsym: debug symbols for php8.1-pspell
php8.1-readline: readline module for PHP

 This package provides the readline module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-readline-dbgsym: debug symbols for php8.1-readline
php8.1-snmp: SNMP module for PHP

 This package provides the SNMP module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-snmp-dbgsym: debug symbols for php8.1-snmp
php8.1-soap: SOAP module for PHP

 This package provides the SOAP module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-soap-dbgsym: debug symbols for php8.1-soap
php8.1-sqlite3: SQLite3 module for PHP

 This package provides the SQLite3 module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-sqlite3-dbgsym: debug symbols for php8.1-sqlite3
php8.1-sybase: Sybase module for PHP

 This package provides the Sybase module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-sybase-dbgsym: debug symbols for php8.1-sybase
php8.1-tidy: tidy module for PHP

 This package provides the tidy module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-tidy-dbgsym: debug symbols for php8.1-tidy
php8.1-xml: DOM, SimpleXML, XML, and XSL module for PHP

 This package provides the DOM, SimpleXML, XML, and XSL module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-xml-dbgsym: debug symbols for php8.1-xml
php8.1-xsl: XSL module for PHP (dummy)

 This package is a transitional dummy package and can be safely
 removed.

php8.1-zip: Zip module for PHP

 This package provides the Zip module(s) for PHP.
 .
 PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used
 open source general-purpose scripting language that is especially suited
 for web development and can be embedded into HTML.

php8.1-zip-dbgsym: debug symbols for php8.1-zip