[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Accepted php7.0 7.0.33-0+deb9u11 (source) into oldstable

Hash: SHA512

Format: 1.8
Date: Mon, 12 Jul 2021 20:15:58 +0200
Source: php7.0
Binary: libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-cgi php7.0-cli php7.0-dev php7.0-fpm php7.0-phpdbg php7.0-xsl php7.0-intl php7.0-odbc php7.0-readline php7.0-recode php7.0-common php7.0-sqlite3 php7.0-xml php7.0-sybase php7.0-gd php7.0-mcrypt php7.0-zip php7.0-interbase php7.0-tidy php7.0-mysql php7.0-snmp php7.0-curl php7.0-json php7.0-pgsql php7.0-mbstring php7.0-enchant php7.0-opcache php7.0-imap php7.0-gmp php7.0-bcmath php7.0-soap php7.0-dba php7.0-xmlrpc php7.0-pspell php7.0-bz2 php7.0-ldap
Architecture: source
Version: 7.0.33-0+deb9u11
Distribution: stretch-security
Urgency: high
Maintainer: Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>
Changed-By: Sylvain Beucler <beuc@debian.org>
 libapache2-mod-php7.0 - server-side, HTML-embedded scripting language (Apache 2 module)
 libphp7.0-embed - HTML-embedded scripting language (Embedded SAPI library)
 php7.0     - server-side, HTML-embedded scripting language (metapackage)
 php7.0-bcmath - Bcmath module for PHP
 php7.0-bz2 - bzip2 module for PHP
 php7.0-cgi - server-side, HTML-embedded scripting language (CGI binary)
 php7.0-cli - command-line interpreter for the PHP scripting language
 php7.0-common - documentation, examples and common module for PHP
 php7.0-curl - CURL module for PHP
 php7.0-dba - DBA module for PHP
 php7.0-dev - Files for PHP7.0 module development
 php7.0-enchant - Enchant module for PHP
 php7.0-fpm - server-side, HTML-embedded scripting language (FPM-CGI binary)
 php7.0-gd  - GD module for PHP
 php7.0-gmp - GMP module for PHP
 php7.0-imap - IMAP module for PHP
 php7.0-interbase - Interbase module for PHP
 php7.0-intl - Internationalisation module for PHP
 php7.0-json - JSON module for PHP
 php7.0-ldap - LDAP module for PHP
 php7.0-mbstring - MBSTRING module for PHP
 php7.0-mcrypt - libmcrypt module for PHP
 php7.0-mysql - MySQL module for PHP
 php7.0-odbc - ODBC module for PHP
 php7.0-opcache - Zend OpCache module for PHP
 php7.0-pgsql - PostgreSQL module for PHP
 php7.0-phpdbg - server-side, HTML-embedded scripting language (PHPDBG binary)
 php7.0-pspell - pspell module for PHP
 php7.0-readline - readline module for PHP
 php7.0-recode - recode module for PHP
 php7.0-snmp - SNMP module for PHP
 php7.0-soap - SOAP module for PHP
 php7.0-sqlite3 - SQLite3 module for PHP
 php7.0-sybase - Sybase module for PHP
 php7.0-tidy - tidy module for PHP
 php7.0-xml - DOM, SimpleXML, WDDX, XML, and XSL module for PHP
 php7.0-xmlrpc - XMLRPC-EPI module for PHP
 php7.0-xsl - XSL module for PHP (dummy)
 php7.0-zip - Zip module for PHP
Closes: 991008
 php7.0 (7.0.33-0+deb9u11) stretch-security; urgency=high
   * Non-maintainer upload by the LTS Security Team.
   * Fix CGI test suite (Closes: #991008).
   * CVE-2019-18218: fileinfo: cdf_read_property_info in cdf.c does not
     restrict the number of CDF_VECTOR elements, which allows a heap-based
     buffer overflow (4-byte out-of-bounds write).
   * CVE-2020-7071: when validating URL with functions like
     filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with
     invalid password as valid URL. This may lead to functions that rely on
     URL being valid to mis-parse the URL and produce wrong data as
     components of the URL.
   * CVE-2021-21702: when using SOAP extension to connect to a SOAP server,
     a malicious SOAP server could return malformed XML data as a response
     that would cause PHP to access a null pointer and thus cause a crash.
   * Backport Firebird test server.
   * CVE-2021-21704: multiple firebird issues.
   * CVE-2021-21705: SSRF bypass in FILTER_VALIDATE_URL.
 70e0aa32b969984d336573603a9eb01d54418369 5667 php7.0_7.0.33-0+deb9u11.dsc
 11e51f1c3c053e6713ac7f205f06d173f924935e 846024 php7.0_7.0.33-0+deb9u11.debian.tar.xz
 c85dc9f712c89e633de0089b85b9c7c3d9b76855 35539 php7.0_7.0.33-0+deb9u11_amd64.buildinfo
 8262ebb19b4c98e071def97d49c87eaf3ed287e2b20a05946c1510ba4008a30b 5667 php7.0_7.0.33-0+deb9u11.dsc
 36f26dba57eaa27985d1dee315be32d45985c2d52f19d8e0770b6dd76261469a 846024 php7.0_7.0.33-0+deb9u11.debian.tar.xz
 0084169459d07bf3f51732a0d39607a6f0ceaea2a217c10080b663d9cd115319 35539 php7.0_7.0.33-0+deb9u11_amd64.buildinfo
 07bb56e589cb4919b4f5b0de2e93c098 5667 php optional php7.0_7.0.33-0+deb9u11.dsc
 8e148ddd62414828bfd69b30bc6512a3 846024 php optional php7.0_7.0.33-0+deb9u11.debian.tar.xz
 ab890990074a2815ada0399b9ba96c3e 35539 php optional php7.0_7.0.33-0+deb9u11_amd64.buildinfo



Reply to: