Publishing details
Changelog
php7.2 (7.2.24-0ubuntu0.18.04.17) bionic-security; urgency=medium
* SECURITY UPDATE: password_verify() accepts invalid Blowfish hashes
- debian/patches/CVE-2023-0567-1.patch: fix validation of malformed
BCrypt hashes in ext/standard/crypt_blowfish.c,
ext/standard/tests/crypt/bcrypt_salt_dollar.phpt.
- debian/patches/CVE-2023-0567-2.patch: fix possible buffer overread in
php_crypt() in ext/standard/crypt.c,
ext/standard/tests/password/password_bcrypt_short.phpt.
- CVE-2023-0567
* SECURITY UPDATE: off-by-one in core path resolution function
- debian/patches/CVE-2023-0568.patch: fix array overrun when appending
slash to paths in ext/dom/document.c, ext/xmlreader/php_xmlreader.c,
main/fopen_wrappers.c.
- CVE-2023-0568
* SECURITY UPDATE: DoS via excessive number of parts in HTTP form upload
- debian/patches/CVE-2023-0662-1.patch: introduce
max_multipart_body_parts INI in main/main.c, main/rfc1867.c.
- debian/patches/CVE-2023-0662-2.patch: fix repeated warning for file
uploads limit exceeding in main/rfc1867.c.
- CVE-2023-0662
-- Marc Deslauriers <email address hidden> Thu, 23 Feb 2023 08:29:25 -0500
Builds
Built packages
-
libapache2-mod-php7.2
server-side, HTML-embedded scripting language (Apache 2 module)
-
libapache2-mod-php7.2-dbgsym
debug symbols for libapache2-mod-php7.2
-
libphp7.2-embed
HTML-embedded scripting language (Embedded SAPI library)
-
libphp7.2-embed-dbgsym
debug symbols for libphp7.2-embed
-
php7.2
server-side, HTML-embedded scripting language (metapackage)
-
php7.2-bcmath
Bcmath module for PHP
-
php7.2-bcmath-dbgsym
debug symbols for php7.2-bcmath
-
php7.2-bz2
bzip2 module for PHP
-
php7.2-bz2-dbgsym
debug symbols for php7.2-bz2
-
php7.2-cgi
server-side, HTML-embedded scripting language (CGI binary)
-
php7.2-cgi-dbgsym
debug symbols for php7.2-cgi
-
php7.2-cli
command-line interpreter for the PHP scripting language
-
php7.2-cli-dbgsym
debug symbols for php7.2-cli
-
php7.2-common
documentation, examples and common module for PHP
-
php7.2-common-dbgsym
debug symbols for php7.2-common
-
php7.2-curl
CURL module for PHP
-
php7.2-curl-dbgsym
debug symbols for php7.2-curl
-
php7.2-dba
DBA module for PHP
-
php7.2-dba-dbgsym
debug symbols for php7.2-dba
-
php7.2-dev
Files for PHP7.2 module development
-
php7.2-enchant
Enchant module for PHP
-
php7.2-enchant-dbgsym
debug symbols for php7.2-enchant
-
php7.2-fpm
server-side, HTML-embedded scripting language (FPM-CGI binary)
-
php7.2-fpm-dbgsym
debug symbols for php7.2-fpm
-
php7.2-gd
GD module for PHP
-
php7.2-gd-dbgsym
debug symbols for php7.2-gd
-
php7.2-gmp
GMP module for PHP
-
php7.2-gmp-dbgsym
debug symbols for php7.2-gmp
-
php7.2-imap
IMAP module for PHP
-
php7.2-imap-dbgsym
debug symbols for php7.2-imap
-
php7.2-interbase
Interbase module for PHP
-
php7.2-interbase-dbgsym
debug symbols for php7.2-interbase
-
php7.2-intl
Internationalisation module for PHP
-
php7.2-intl-dbgsym
debug symbols for php7.2-intl
-
php7.2-json
JSON module for PHP
-
php7.2-json-dbgsym
debug symbols for php7.2-json
-
php7.2-ldap
LDAP module for PHP
-
php7.2-ldap-dbgsym
debug symbols for php7.2-ldap
-
php7.2-mbstring
MBSTRING module for PHP
-
php7.2-mbstring-dbgsym
debug symbols for php7.2-mbstring
-
php7.2-mysql
MySQL module for PHP
-
php7.2-mysql-dbgsym
debug symbols for php7.2-mysql
-
php7.2-odbc
ODBC module for PHP
-
php7.2-odbc-dbgsym
debug symbols for php7.2-odbc
-
php7.2-opcache
Zend OpCache module for PHP
-
php7.2-opcache-dbgsym
debug symbols for php7.2-opcache
-
php7.2-pgsql
PostgreSQL module for PHP
-
php7.2-pgsql-dbgsym
debug symbols for php7.2-pgsql
-
php7.2-phpdbg
server-side, HTML-embedded scripting language (PHPDBG binary)
-
php7.2-phpdbg-dbgsym
debug symbols for php7.2-phpdbg
-
php7.2-pspell
pspell module for PHP
-
php7.2-pspell-dbgsym
debug symbols for php7.2-pspell
-
php7.2-readline
readline module for PHP
-
php7.2-readline-dbgsym
debug symbols for php7.2-readline
-
php7.2-recode
recode module for PHP
-
php7.2-recode-dbgsym
debug symbols for php7.2-recode
-
php7.2-snmp
SNMP module for PHP
-
php7.2-snmp-dbgsym
debug symbols for php7.2-snmp
-
php7.2-soap
SOAP module for PHP
-
php7.2-soap-dbgsym
debug symbols for php7.2-soap
-
php7.2-sqlite3
SQLite3 module for PHP
-
php7.2-sqlite3-dbgsym
debug symbols for php7.2-sqlite3
-
php7.2-sybase
Sybase module for PHP
-
php7.2-sybase-dbgsym
debug symbols for php7.2-sybase
-
php7.2-tidy
tidy module for PHP
-
php7.2-tidy-dbgsym
debug symbols for php7.2-tidy
-
php7.2-xml
DOM, SimpleXML, WDDX, XML, and XSL module for PHP
-
php7.2-xml-dbgsym
debug symbols for php7.2-xml
-
php7.2-xmlrpc
XMLRPC-EPI module for PHP
-
php7.2-xmlrpc-dbgsym
debug symbols for php7.2-xmlrpc
-
php7.2-xsl
XSL module for PHP (dummy)
-
php7.2-zip
Zip module for PHP
-
php7.2-zip-dbgsym
debug symbols for php7.2-zip
Package files