php-pear 1:1.10.9+submodules+notgz-1ubuntu0.20.04.1 source package in Ubuntu
Changelog
php-pear (1:1.10.9+submodules+notgz-1ubuntu0.20.04.1) focal-security; urgency=medium * SECURITY UPDATE: unserialization attack in Archive_Tar - debian/patches/CVE-2020-2894x.patch: catch additional malicious or crafted filenames in submodules/Archive_Tar/Archive/Tar.php. - CVE-2020-28948 - CVE-2020-28949 -- Marc Deslauriers <email address hidden> Mon, 30 Nov 2020 09:55:16 -0500
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Focal
- Original maintainer:
- Ubuntu Developers
- Architectures:
- all
- Section:
- php
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
php-pear_1.10.9+submodules+notgz.orig.tar.gz | 2.1 MiB | d138578f93aaf595846e92b5bf5e1b65a5113c823d6fb9ee43138e55cd426c91 |
php-pear_1.10.9+submodules+notgz-1ubuntu0.20.04.1.debian.tar.xz | 8.3 KiB | a496e38aa4fc4741dd55b36a34f42f56d34f1a5302b2c956a0779cff07b4b582 |
php-pear_1.10.9+submodules+notgz-1ubuntu0.20.04.1.dsc | 2.2 KiB | c7823e5f7b6b3a5fee3eed59ab261ffe007f90788b0afb0d30affa0e2f53e087 |
Available diffs
Binary packages built by this source
- php-pear: PEAR Base System
The PEAR package contains:
* the PEAR installer, for creating, distributing
and installing packages
* the PEAR_Exception PHP5 error handling mechanism
* the PEAR_ErrorStack advanced error handling mechanism
* the PEAR_Error error handling mechanism
* the OS_Guess class for retrieving info about the OS
where PHP is running on
* the System class for quick handling of common operations
with files and directories
* the PEAR base class
Features in a nutshell:
* full support for channels
* pre-download dependency validation
* new package.xml 2.0 format allows tremendous flexibility while maintaining
BC
* support for optional dependency groups and limited support for
sub-packaging
* robust dependency support
* full dependency validation on uninstall
* remote install for hosts with only ftp access - no more problems with
restricted host installation
* full support for mirroring
* support for bundling several packages into a single tarball
* support for static dependencies on a url-based package
* support for custom file roles and installation tasks