Debian Bug report logs - #535897
php: segfaults on corrupted jpeg files

Package: php4; Maintainer for php4 is (unknown);

Reported by: "Michael S. Gilbert" <michael.s.gilbert@gmail.com>

Date: Sun, 5 Jul 2009 19:57:04 UTC

Severity: important

Tags: security

Fixed in version 6:4.4.6-2+rm

Done: Marco Rodrigues <gothicx@gmail.com>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#535888; Package php5. (Sun, 05 Jul 2009 19:57:07 GMT) (full text, mbox, link).

Acknowledgement sent to "Michael S. Gilbert" <michael.s.gilbert@gmail.com>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Sun, 05 Jul 2009 19:57:07 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

package: php5
version: 5.2.0-8+etch13
severity: important
tags: security

hello,

php has is vulnerable to segfaulting on certain corrupted jpegs [1].
this is likely fixed in 5.3.0 since the commit to svn was made on May
28, but i haven't check the code to determine whether this is the case
or not.

[1] http://bugs.php.net/bug.php?id=48378

Bug 535888 cloned as bug 535897. Request was from "Michael S. Gilbert" <michael.s.gilbert@gmail.com> to control@bugs.debian.org. (Sun, 05 Jul 2009 20:06:16 GMT) (full text, mbox, link).

Bug reassigned from package `php5' to `php4'. Request was from "Michael S. Gilbert" <michael.s.gilbert@gmail.com> to control@bugs.debian.org. (Sun, 05 Jul 2009 20:06:19 GMT) (full text, mbox, link).

Reply sent to Marco Rodrigues <gothicx@gmail.com>:
You have taken responsibility. (Sat, 27 Mar 2010 18:33:23 GMT) (full text, mbox, link).

Notification sent to "Michael S. Gilbert" <michael.s.gilbert@gmail.com>:
Bug acknowledged by developer. (Sat, 27 Mar 2010 18:33:23 GMT) (full text, mbox, link).

Message #14 received at 535897-done@bugs.debian.org (full text, mbox, reply):

Version: 6:4.4.6-2+rm

You filed the bug http://bugs.debian.org/535897 in Debian BTS
against the package php4. I'm closing it at *unstable*, but it will
remain open for older distributions.

For more information about this package's removal, read
http://bugs.debian.org/428266. That bug might give the reasons why
this package was removed and suggestions of possible replacements.

Don't hesitate to reply to this mail if you have any question.

Thank you for your contribution to Debian.

--
Marco Rodrigues

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 25 Apr 2010 07:33:30 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 02:36:40 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Debian Bug report logs - #535897 php: segfaults on corrupted jpeg files

Debian Bug report logs - #535897
php: segfaults on corrupted jpeg files