Accepted php5 5.0.5-2ubuntu1.7 (source)

[Ubuntu Installer]

Accepted:
 OK: php5_5.0.5-2ubuntu1.7.dsc
     -> Component: main Section: web
 OK: php5_5.0.5-2ubuntu1.7.diff.gz

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed, 21 Feb 2007 10:17:26 +0000
Source: php5
Binary: php5-gd php5-ldap php5 php5-xmlrpc libapache2-mod-php5 php5-xsl php5-cgi php-pear php5-pgsql php5-cli php5-recode php5-mhash php5-sybase php5-curl php5-odbc php5-mysql php5-common php5-dev php5-snmp php5-sqlite
Architecture: source
Version: 5.0.5-2ubuntu1.7
Distribution: breezy-security
Urgency: low
Maintainer: Debian PHP Maintainers <pkg-php-maint at lists.alioth.debian.org>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description: 
 libapache2-mod-php5 - server-side, HTML-embedded scripting language (apache 2.0 module)
 php-pear   - PEAR - PHP Extension and Application Repository
 php5       - server-side, HTML-embedded scripting language (meta-package)
 php5-cgi   - server-side, HTML-embedded scripting language (CGI binary)
 php5-cli   - command-line interpreter for the php5 scripting language
 php5-common - Common files for packages built from the php5 source
 php5-curl  - CURL module for php5
 php5-dev   - Files for PHP5 module development
 php5-gd    - GD module for php5
 php5-ldap  - LDAP module for php5
 php5-mhash - MHASH module for php5
 php5-mysql - MySQL module for php5
 php5-odbc  - ODBC module for php5
 php5-pgsql - PostgreSQL module for php5
 php5-recode - recode module for php5
 php5-snmp  - SNMP module for php5
 php5-sqlite - SQLite module for php5
 php5-sybase - Sybase / MS SQL Server module for php5
 php5-xmlrpc - XML-RPC module for php5
 php5-xsl   - XSL module for php5
Changes: 
 php5 (5.0.5-2ubuntu1.7) breezy-security; urgency=low
 .
   * SECURITY UPDATE: Remote code execution.
   * Add debian/patches/CVE-2007-0906_session.patch:
     - Buffer overflow in the session extension.
     - http://cvs.php.net/viewvc.cgi/php-src/ext/session/session.c?r1=1.417.2.8.2.22&r2=1.417.2.8.2.23
   * Add debian/patches/CVE-2007-0906_streams.patch:
     - Buffer overflows in the stream filters functions.
     - http://cvs.php.net/viewvc.cgi/php-src/ext/standard/streamsfuncs.c?r1=1.58.2.6.2.12&r2=1.58.2.6.2.13
     - http://cvs.php.net/viewvc.cgi/php-src/ext/standard/streamsfuncs.c?r1=1.98&r2=1.99
   * Add debian/patches/CVE-2007-0906_string.patch:
     - Buffer overflow in the string extension.
     - http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.629&r2=1.631
   * Add debian/patches/CVE-2007-0907.patch:
     - Buffer underflow in sapi_header_op() that can be exploited to crash the
       PHP interpreter.
     - http://cvs.php.net/viewvc.cgi/php-src/main/SAPI.c?r1=1.202.2.7.2.3&r2=1.202.2.7.2.4
   * Add debian/patches/CVE-2007-0908.patch:
     - Fix forgotten initialization of key_length and buffer overflow in the
       wddx extension that could be exploited to reveal memory that is not
       supposed to be accessible (potential information disclosure).
     - http://cvs.php.net/viewvc.cgi/php-src/ext/wddx/wddx.c?r1=1.119.2.10.2.8&r2=1.119.2.10.2.10
   * Add debian/patches/CVE-2007-0909_print.patch:
     - Fix format string vulnerability on 64 bit systems in the *print()
       functions.
     - http://cvs.php.net/viewvc.cgi/php-src/ext/standard/formatted_print.c?r1=1.82.2.1.2.11&r2=1.82.2.1.2.12
   * Add debian/patches/CVE-2007-0910.patch:
     - Fix clobbering of superglobal variables during session variable
       unserialization.
     - http://cvs.php.net/viewvc.cgi/php-src/ext/session/session.c?r1=1.458&r2=1.459
     - http://cvs.php.net/viewvc.cgi/php-src/ext/session/session.c?r1=1.417.2.8.2.24&r2=1.417.2.8.2.26
     - http://cvs.php.net/viewvc.cgi/php-src/main/php_variables.c?r1=1.104.2.10.2.3&r2=1.104.2.10.2.4
   * Add debian/patches/CVE-2007-0988.patch:
     - Fix infinite loop in zend_hash_init() when unserializing untrusted data
       on 64 bit systems.
     - http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_hash.c?r1=1.121.2.4.2.5&r2=1.121.2.4.2.6
Files: 
 4eaf5e7ccc2304836f7c55a64857c145 1707 web optional php5_5.0.5-2ubuntu1.7.dsc
 e86f9657167213b8990f391018b28e8e 116000 web optional php5_5.0.5-2ubuntu1.7.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFF3BxVDecnbV4Fd/IRAlO3AKDJiZvN0lETgPpa29zMDz5V6unWIACfd/zi
YM+HulDO5x9si2JPjdpAKWA=
=tHcl
-----END PGP SIGNATURE-----