Accepted php5 5.1.6-1ubuntu2 (source)

Martin Pitt martin.pitt at ubuntu.com
Tue Oct 10 18:25:13 BST 2006


Accepted:
 OK: php5_5.1.6-1ubuntu2.dsc
     -> Component: main Section: web
 OK: php5_5.1.6-1ubuntu2.diff.gz

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Tue, 10 Oct 2006 18:25:01 +0200
Source: php5
Binary: php5-mysqli php5-gd php5-ldap php5 php5-xmlrpc libapache2-mod-php5 php5-xsl php5-cgi php-pear php5-pgsql php5-cli php5-recode php5-mhash php5-sybase php5-curl php5-odbc php5-mysql php5-common php5-dev php5-snmp php5-sqlite
Architecture: source
Version: 5.1.6-1ubuntu2
Distribution: edgy
Urgency: low
Maintainer: Debian PHP Maintainers <pkg-php-maint at lists.alioth.debian.org>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description: 
 libapache2-mod-php5 - server-side, HTML-embedded scripting language (apache 2.0 module)
 php-pear   - PEAR - PHP Extension and Application Repository
 php5       - server-side, HTML-embedded scripting language (meta-package)
 php5-cgi   - server-side, HTML-embedded scripting language (CGI binary)
 php5-cli   - command-line interpreter for the php5 scripting language
 php5-common - Common files for packages built from the php5 source
 php5-curl  - CURL module for php5
 php5-dev   - Files for PHP5 module development
 php5-gd    - GD module for php5
 php5-ldap  - LDAP module for php5
 php5-mhash - MHASH module for php5
 php5-mysql - MySQL module for php5
 php5-mysqli - MySQL Improved module for php5
 php5-odbc  - ODBC module for php5
 php5-pgsql - PostgreSQL module for php5
 php5-recode - recode module for php5
 php5-snmp  - SNMP module for php5
 php5-sqlite - SQLite module for php5
 php5-sybase - Sybase / MS SQL Server module for php5
 php5-xmlrpc - XML-RPC module for php5
 php5-xsl   - XSL module for php5
Changes: 
 php5 (5.1.6-1ubuntu2) edgy; urgency=low
 .
   * SECURITY UPDATE: Safe mode bypass, remote arbitrary code execution.
   * Fix/add CVE numbers in/to 5.1.4-0.1 and 5.1.6-1 changelogs.
   * Add debian/patches/CVE-2006-4625.patch:
     - Fix open_basedir/safe_mode bypass with ini_restore().
     - Ported from upstream CVS:
       http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_ini.c?r1=1.39.2.2&r2=1.39.2.3
   * Add debian/patches/CVE-2006-4812.patch:
     - Fix integer overflow in Zend's ecalloc().
     - Ported from upstream CVS:
       http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162
Files: 
 2545a4e6cc0de08af8dbd3445ca33bc1 1761 web optional php5_5.1.6-1ubuntu2.dsc
 ed22da05025d51ab44d673f8f0e143f3 99795 web optional php5_5.1.6-1ubuntu2.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFFK802DecnbV4Fd/IRAmXYAJ9PPgzZ07Is4fOvKcJD8arcP0ZhOQCghtHG
Gf051S8FIXvVsvz0fnIkLqE=
=cX/I
-----END PGP SIGNATURE-----





More information about the edgy-changes mailing list