Ubuntu
php7.4 package

php7.4 7.4.9-1ubuntu1.2 source package in Ubuntu

Changelog

php7.4 (7.4.9-1ubuntu1.2) groovy-security; urgency=medium

  * SECURITY UPDATE: incorrect URL validation
    - debian/patches/CVE-2020-7071-1.patch: make sure userinfo is valid
      according to RFC 3986 in ext/filter/tests/bug77423.phpt,
      ext/standard/url.c.
    - debian/patches/CVE-2020-7071-2.patch: revert previous fix and use a
      better one in ext/filter/logical_filters.c,
      ext/filter/tests/bug77423.phpt, ext/standard/url.c.
    - debian/patches/CVE-2020-7071-3.patch: remove unneeded function in
      ext/standard/url.c.
    - CVE-2020-7071
  * SECURITY UPDATE: crash via malformed XML data in SOAP extension
    - debian/patches/CVE-2021-21702-1.patch: check strings in
      ext/soap/php_sdl.c, ext/soap/php_xml.c, ext/soap/tests/bug80672.phpt,
      ext/soap/tests/bug80672.xml.
    - debian/patches/CVE-2021-21702-2.patch: fix compiler warning in
      ext/soap/php_sdl.c.
    - CVE-2021-21702
  * SECURITY UPDATE: multiple issues in the pdo_firebase module
    - debian/patches/CVE-2021-21704-1.patch: prevent overflow in
      ext/pdo_firebird/firebird_statement.c.
    - debian/patches/CVE-2021-21704-2.patch: verify result_size in
      ext/pdo_firebird/firebird_statement.c.
    - debian/patches/CVE-2021-21704-3.patch: verify result_size in
      ext/pdo_firebird/firebird_driver.c.
    - debian/patches/CVE-2021-21704-4.patch: don't overflow stack in
      ext/pdo_firebird/firebird_driver.c.
    - CVE-2021-21704
  * SECURITY UPDATE: SSRF bypass
    - debian/patches/CVE-2021-21705.patch: check password in
      ext/filter/logical_filters.c, ext/filter/tests/bug81122.phpt.
    - debian/patches/CVE-2021-21705-2.patch: fix compiler warning in
      ext/filter/logical_filters.c.
    - CVE-2021-21705

 -- Marc Deslauriers <email address hidden>  Mon, 05 Jul 2021 09:33:00 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Groovy
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
php
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
php7.4_7.4.9.orig.tar.xz 10.1 MiB 31e5f03304f9f7b746d9727a3f51c63a6047a8738caa6313b147d05fdf68c871
php7.4_7.4.9-1ubuntu1.2.debian.tar.xz 71.6 KiB 633bd57a83e82a40e2f58955202fa36ab85e12d9a826d4d2b25d3e08080787f6
php7.4_7.4.9-1ubuntu1.2.dsc 5.4 KiB 462aa19b66c56d3bc00c889b1e694569458741f33217406c5801211ec2e2e614

View changes file

Binary packages built by this source

libapache2-mod-php7.4: No summary available for libapache2-mod-php7.4 in ubuntu groovy.

No description available for libapache2-mod-php7.4 in ubuntu groovy.

libapache2-mod-php7.4-dbgsym: No summary available for libapache2-mod-php7.4-dbgsym in ubuntu groovy.

No description available for libapache2-mod-php7.4-dbgsym in ubuntu groovy.

libphp7.4-embed: No summary available for libphp7.4-embed in ubuntu groovy.

No description available for libphp7.4-embed in ubuntu groovy.

libphp7.4-embed-dbgsym: No summary available for libphp7.4-embed-dbgsym in ubuntu groovy.

No description available for libphp7.4-embed-dbgsym in ubuntu groovy.

php7.4: No summary available for php7.4 in ubuntu groovy.

No description available for php7.4 in ubuntu groovy.

php7.4-bcmath: No summary available for php7.4-bcmath in ubuntu groovy.

No description available for php7.4-bcmath in ubuntu groovy.

php7.4-bcmath-dbgsym: No summary available for php7.4-bcmath-dbgsym in ubuntu groovy.

No description available for php7.4-bcmath-dbgsym in ubuntu groovy.

php7.4-bz2: No summary available for php7.4-bz2 in ubuntu groovy.

No description available for php7.4-bz2 in ubuntu groovy.

php7.4-bz2-dbgsym: No summary available for php7.4-bz2-dbgsym in ubuntu groovy.

No description available for php7.4-bz2-dbgsym in ubuntu groovy.

php7.4-cgi: No summary available for php7.4-cgi in ubuntu groovy.

No description available for php7.4-cgi in ubuntu groovy.

php7.4-cgi-dbgsym: No summary available for php7.4-cgi-dbgsym in ubuntu groovy.

No description available for php7.4-cgi-dbgsym in ubuntu groovy.

php7.4-cli: No summary available for php7.4-cli in ubuntu groovy.

No description available for php7.4-cli in ubuntu groovy.

php7.4-cli-dbgsym: No summary available for php7.4-cli-dbgsym in ubuntu groovy.

No description available for php7.4-cli-dbgsym in ubuntu groovy.

php7.4-common: No summary available for php7.4-common in ubuntu groovy.

No description available for php7.4-common in ubuntu groovy.

php7.4-common-dbgsym: No summary available for php7.4-common-dbgsym in ubuntu groovy.

No description available for php7.4-common-dbgsym in ubuntu groovy.

php7.4-curl: No summary available for php7.4-curl in ubuntu groovy.

No description available for php7.4-curl in ubuntu groovy.

php7.4-curl-dbgsym: No summary available for php7.4-curl-dbgsym in ubuntu groovy.

No description available for php7.4-curl-dbgsym in ubuntu groovy.

php7.4-dba: No summary available for php7.4-dba in ubuntu groovy.

No description available for php7.4-dba in ubuntu groovy.

php7.4-dba-dbgsym: No summary available for php7.4-dba-dbgsym in ubuntu groovy.

No description available for php7.4-dba-dbgsym in ubuntu groovy.

php7.4-dev: No summary available for php7.4-dev in ubuntu groovy.

No description available for php7.4-dev in ubuntu groovy.

php7.4-enchant: No summary available for php7.4-enchant in ubuntu groovy.

No description available for php7.4-enchant in ubuntu groovy.

php7.4-enchant-dbgsym: No summary available for php7.4-enchant-dbgsym in ubuntu groovy.

No description available for php7.4-enchant-dbgsym in ubuntu groovy.

php7.4-fpm: No summary available for php7.4-fpm in ubuntu groovy.

No description available for php7.4-fpm in ubuntu groovy.

php7.4-fpm-dbgsym: No summary available for php7.4-fpm-dbgsym in ubuntu groovy.

No description available for php7.4-fpm-dbgsym in ubuntu groovy.

php7.4-gd: No summary available for php7.4-gd in ubuntu groovy.

No description available for php7.4-gd in ubuntu groovy.

php7.4-gd-dbgsym: No summary available for php7.4-gd-dbgsym in ubuntu groovy.

No description available for php7.4-gd-dbgsym in ubuntu groovy.

php7.4-gmp: No summary available for php7.4-gmp in ubuntu groovy.

No description available for php7.4-gmp in ubuntu groovy.

php7.4-gmp-dbgsym: No summary available for php7.4-gmp-dbgsym in ubuntu groovy.

No description available for php7.4-gmp-dbgsym in ubuntu groovy.

php7.4-imap: No summary available for php7.4-imap in ubuntu groovy.

No description available for php7.4-imap in ubuntu groovy.

php7.4-imap-dbgsym: No summary available for php7.4-imap-dbgsym in ubuntu groovy.

No description available for php7.4-imap-dbgsym in ubuntu groovy.

php7.4-interbase: No summary available for php7.4-interbase in ubuntu groovy.

No description available for php7.4-interbase in ubuntu groovy.

php7.4-interbase-dbgsym: No summary available for php7.4-interbase-dbgsym in ubuntu groovy.

No description available for php7.4-interbase-dbgsym in ubuntu groovy.

php7.4-intl: No summary available for php7.4-intl in ubuntu groovy.

No description available for php7.4-intl in ubuntu groovy.

php7.4-intl-dbgsym: No summary available for php7.4-intl-dbgsym in ubuntu groovy.

No description available for php7.4-intl-dbgsym in ubuntu groovy.

php7.4-json: No summary available for php7.4-json in ubuntu groovy.

No description available for php7.4-json in ubuntu groovy.

php7.4-json-dbgsym: No summary available for php7.4-json-dbgsym in ubuntu groovy.

No description available for php7.4-json-dbgsym in ubuntu groovy.

php7.4-ldap: No summary available for php7.4-ldap in ubuntu groovy.

No description available for php7.4-ldap in ubuntu groovy.

php7.4-ldap-dbgsym: No summary available for php7.4-ldap-dbgsym in ubuntu groovy.

No description available for php7.4-ldap-dbgsym in ubuntu groovy.

php7.4-mbstring: No summary available for php7.4-mbstring in ubuntu groovy.

No description available for php7.4-mbstring in ubuntu groovy.

php7.4-mbstring-dbgsym: No summary available for php7.4-mbstring-dbgsym in ubuntu groovy.

No description available for php7.4-mbstring-dbgsym in ubuntu groovy.

php7.4-mysql: No summary available for php7.4-mysql in ubuntu groovy.

No description available for php7.4-mysql in ubuntu groovy.

php7.4-mysql-dbgsym: No summary available for php7.4-mysql-dbgsym in ubuntu groovy.

No description available for php7.4-mysql-dbgsym in ubuntu groovy.

php7.4-odbc: No summary available for php7.4-odbc in ubuntu groovy.

No description available for php7.4-odbc in ubuntu groovy.

php7.4-odbc-dbgsym: No summary available for php7.4-odbc-dbgsym in ubuntu groovy.

No description available for php7.4-odbc-dbgsym in ubuntu groovy.

php7.4-opcache: No summary available for php7.4-opcache in ubuntu groovy.

No description available for php7.4-opcache in ubuntu groovy.

php7.4-opcache-dbgsym: No summary available for php7.4-opcache-dbgsym in ubuntu groovy.

No description available for php7.4-opcache-dbgsym in ubuntu groovy.

php7.4-pgsql: No summary available for php7.4-pgsql in ubuntu groovy.

No description available for php7.4-pgsql in ubuntu groovy.

php7.4-pgsql-dbgsym: No summary available for php7.4-pgsql-dbgsym in ubuntu groovy.

No description available for php7.4-pgsql-dbgsym in ubuntu groovy.

php7.4-phpdbg: No summary available for php7.4-phpdbg in ubuntu groovy.

No description available for php7.4-phpdbg in ubuntu groovy.

php7.4-phpdbg-dbgsym: No summary available for php7.4-phpdbg-dbgsym in ubuntu groovy.

No description available for php7.4-phpdbg-dbgsym in ubuntu groovy.

php7.4-pspell: No summary available for php7.4-pspell in ubuntu groovy.

No description available for php7.4-pspell in ubuntu groovy.

php7.4-pspell-dbgsym: No summary available for php7.4-pspell-dbgsym in ubuntu groovy.

No description available for php7.4-pspell-dbgsym in ubuntu groovy.

php7.4-readline: No summary available for php7.4-readline in ubuntu groovy.

No description available for php7.4-readline in ubuntu groovy.

php7.4-readline-dbgsym: No summary available for php7.4-readline-dbgsym in ubuntu groovy.

No description available for php7.4-readline-dbgsym in ubuntu groovy.

php7.4-snmp: No summary available for php7.4-snmp in ubuntu groovy.

No description available for php7.4-snmp in ubuntu groovy.

php7.4-snmp-dbgsym: No summary available for php7.4-snmp-dbgsym in ubuntu groovy.

No description available for php7.4-snmp-dbgsym in ubuntu groovy.

php7.4-soap: No summary available for php7.4-soap in ubuntu groovy.

No description available for php7.4-soap in ubuntu groovy.

php7.4-soap-dbgsym: No summary available for php7.4-soap-dbgsym in ubuntu groovy.

No description available for php7.4-soap-dbgsym in ubuntu groovy.

php7.4-sqlite3: No summary available for php7.4-sqlite3 in ubuntu groovy.

No description available for php7.4-sqlite3 in ubuntu groovy.

php7.4-sqlite3-dbgsym: No summary available for php7.4-sqlite3-dbgsym in ubuntu groovy.

No description available for php7.4-sqlite3-dbgsym in ubuntu groovy.

php7.4-sybase: No summary available for php7.4-sybase in ubuntu groovy.

No description available for php7.4-sybase in ubuntu groovy.

php7.4-sybase-dbgsym: No summary available for php7.4-sybase-dbgsym in ubuntu groovy.

No description available for php7.4-sybase-dbgsym in ubuntu groovy.

php7.4-tidy: No summary available for php7.4-tidy in ubuntu groovy.

No description available for php7.4-tidy in ubuntu groovy.

php7.4-tidy-dbgsym: No summary available for php7.4-tidy-dbgsym in ubuntu groovy.

No description available for php7.4-tidy-dbgsym in ubuntu groovy.

php7.4-xml: No summary available for php7.4-xml in ubuntu groovy.

No description available for php7.4-xml in ubuntu groovy.

php7.4-xml-dbgsym: No summary available for php7.4-xml-dbgsym in ubuntu groovy.

No description available for php7.4-xml-dbgsym in ubuntu groovy.

php7.4-xmlrpc: No summary available for php7.4-xmlrpc in ubuntu groovy.

No description available for php7.4-xmlrpc in ubuntu groovy.

php7.4-xmlrpc-dbgsym: No summary available for php7.4-xmlrpc-dbgsym in ubuntu groovy.

No description available for php7.4-xmlrpc-dbgsym in ubuntu groovy.

php7.4-xsl: No summary available for php7.4-xsl in ubuntu groovy.

No description available for php7.4-xsl in ubuntu groovy.

php7.4-zip: No summary available for php7.4-zip in ubuntu groovy.

No description available for php7.4-zip in ubuntu groovy.

php7.4-zip-dbgsym: No summary available for php7.4-zip-dbgsym in ubuntu groovy.

No description available for php7.4-zip-dbgsym in ubuntu groovy.