Debian Bug report logs - #632194
php5-common: var_export output data even with return=true

version graph

Package: php5-common; Maintainer for php5-common is (unknown);

Reported by: Alexandre Leroy <alexandre.leroy@zslide.com>

Date: Thu, 30 Jun 2011 13:30:01 UTC

Severity: normal

Tags: pending

Found in version php5/5.2.6.dfsg.1-1+lenny12

Fixed in version 5.2.6.dfsg.1-1+lenny13

Done: Ondřej Surý <ondrej@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#632194; Package php5-common. (Thu, 30 Jun 2011 13:30:04 GMT) (full text, mbox, link).

Acknowledgement sent to Alexandre Leroy <alexandre.leroy@zslide.com>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Thu, 30 Jun 2011 13:30:05 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Alexandre Leroy <alexandre.leroy@zslide.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: php5-common: var_export output data even with return=true
Date: Thu, 30 Jun 2011 15:28:02 +0200
Package: php5-common
Version: 5.2.6.dfsg.1-1+lenny12
Severity: normal


This bug was introduced in 5.2.6.dfsg.1-1+lenny12
When using var_export on an object, its members will be output even when 
requesting result to be returned.

How to reproduce:
>$ cat test.php
<?php #coding: utf-8

class MyClass {

    private $value;
}

$a = array('foo' => 'bar',
           'fail' => new MyClass);

var_export($a, true);
echo ".\n";

Expected result:
>$ php test.php 
.

Actual result:
>$ php test.php 
 'value' => .

-- System Information:
Debian Release: 5.0.8
  APT prefers oldstable
  APT policy: (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-2-xen-amd64 (SMP w/16 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages php5-common depends on:
ii  libc6                       2.7-18lenny7 GNU C Library: Shared libraries
ii  sed                         4.1.5-6      The GNU sed stream editor

php5-common recommends no packages.

php5-common suggests no packages.

-- no debconf information

Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#632194; Package php5-common. (Thu, 30 Jun 2011 14:45:05 GMT) (full text, mbox, link).

Acknowledgement sent to Stefan Wendt <stefan_php@crafted.de>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Thu, 30 Jun 2011 14:45:05 GMT) (full text, mbox, link).

Message #10 received at 632194@bugs.debian.org (full text, mbox, reply):

From: Stefan Wendt <stefan_php@crafted.de>
To: Debian Bug Tracking System <632194@bugs.debian.org>
Subject: php5: var_export of objects is causing std output even with return=true
Date: Thu, 30 Jun 2011 15:24:12 +0100
Package: php5
Version: 5.2.6.dfsg.1-1+lenny12
Followup-For: Bug #632194


<?php

class SomeClass
{
      public $someVar;
}

$myObject=new SomeClass();
$text=var_export( $myObject, TRUE );

?>

This causes the following output:

dev@xxx:~/stefan$ php ./testVarDump.php
 'someVar' =>  dev@xxx:~/stefan$ 


I have tested the same on 5.2.6.dfsg.1-1+lenny9 and it's working fine there. 


-- System Information:
Debian Release: 5.0.8
  APT prefers oldstable
  APT policy: (500, 'oldstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-2-686-bigmem (SMP w/2 CPU cores)
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages php5 depends on:
ii  libapache2-mod-ph 5.2.6.dfsg.1-1+lenny12 server-side, HTML-embedded scripti
ii  php5-common       5.2.6.dfsg.1-1+lenny12 Common files for packages built fr

php5 recommends no packages.

php5 suggests no packages.

-- no debconf information

Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#632194; Package php5-common. (Thu, 30 Jun 2011 15:46:50 GMT) (full text, mbox, link).

Acknowledgement sent to Ondřej Surý <ondrej@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Thu, 30 Jun 2011 15:46:50 GMT) (full text, mbox, link).

Message #15 received at 632194@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@debian.org>
To: Alexandre Leroy <alexandre.leroy@zslide.com>, 632194@bugs.debian.org
Subject: Re: [php-maint] Bug#632194: php5-common: var_export output data even with return=true
Date: Thu, 30 Jun 2011 17:14:54 +0200
I'll look into it tomorrow. Looks like some of the backported security
patches has caused this regression.

O.

On Thu, Jun 30, 2011 at 15:28, Alexandre Leroy
<alexandre.leroy@zslide.com> wrote:
> Package: php5-common
> Version: 5.2.6.dfsg.1-1+lenny12
> Severity: normal
>
>
> This bug was introduced in 5.2.6.dfsg.1-1+lenny12
> When using var_export on an object, its members will be output even when
> requesting result to be returned.
>
> How to reproduce:
>>$ cat test.php
> <?php #coding: utf-8
>
> class MyClass {
>
>    private $value;
> }
>
> $a = array('foo' => 'bar',
>           'fail' => new MyClass);
>
> var_export($a, true);
> echo ".\n";
>
> Expected result:
>>$ php test.php
> .
>
> Actual result:
>>$ php test.php
>  'value' => .
>
> -- System Information:
> Debian Release: 5.0.8
>  APT prefers oldstable
>  APT policy: (500, 'oldstable')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 2.6.26-2-xen-amd64 (SMP w/16 CPU cores)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/bash
>
> Versions of packages php5-common depends on:
> ii  libc6                       2.7-18lenny7 GNU C Library: Shared libraries
> ii  sed                         4.1.5-6      The GNU sed stream editor
>
> php5-common recommends no packages.
>
> php5-common suggests no packages.
>
> -- no debconf information
>
>
>
> _______________________________________________
> pkg-php-maint mailing list
> pkg-php-maint@lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-php-maint
>



-- 
Ondřej Surý <ondrej@sury.org>
http://blog.rfc1925.org/

Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#632194; Package php5-common. (Thu, 30 Jun 2011 16:54:03 GMT) (full text, mbox, link).

Acknowledgement sent to Alexandre Leroy <alexandre.leroy@zslide.com>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Thu, 30 Jun 2011 16:54:03 GMT) (full text, mbox, link).

Message #20 received at 632194@bugs.debian.org (full text, mbox, reply):

From: Alexandre Leroy <alexandre.leroy@zslide.com>
To: Ondřej Surý <ondrej@debian.org>
Cc: 632194@bugs.debian.org
Subject: Re: [php-maint] Bug#632194: php5-common: var_export output data even with return=true
Date: Thu, 30 Jun 2011 18:50:50 +0200
Thank you for such a quick reply.

The issue might be caused by debian/patches/CVE-2010-2531.patch (added 
in commit 2608046bb09fd7b2e2a8d72f2f167dae6ba0298e).
At line 84:
php_printf(" '%s' => ", prop_name);
might explain this output.

Regards,
Alex

On 06/30/2011 05:14 PM, Ondřej Surý wrote:
> I'll look into it tomorrow. Looks like some of the backported security
> patches has caused this regression.
>
> O.
>
> On Thu, Jun 30, 2011 at 15:28, Alexandre Leroy
> <alexandre.leroy@zslide.com>  wrote:
>> Package: php5-common
>> Version: 5.2.6.dfsg.1-1+lenny12
>> Severity: normal
>>
>>
>> This bug was introduced in 5.2.6.dfsg.1-1+lenny12
>> When using var_export on an object, its members will be output even when
>> requesting result to be returned.
>>
>> How to reproduce:
>>> $ cat test.php
>> <?php #coding: utf-8
>>
>> class MyClass {
>>
>>     private $value;
>> }
>>
>> $a = array('foo' =>  'bar',
>>            'fail' =>  new MyClass);
>>
>> var_export($a, true);
>> echo ".\n";
>>
>> Expected result:
>>> $ php test.php
>> .
>>
>> Actual result:
>>> $ php test.php
>>   'value' =>  .
>>
>> -- System Information:
>> Debian Release: 5.0.8
>>   APT prefers oldstable
>>   APT policy: (500, 'oldstable')
>> Architecture: amd64 (x86_64)
>>
>> Kernel: Linux 2.6.26-2-xen-amd64 (SMP w/16 CPU cores)
>> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
>> Shell: /bin/sh linked to /bin/bash
>>
>> Versions of packages php5-common depends on:
>> ii  libc6                       2.7-18lenny7 GNU C Library: Shared libraries
>> ii  sed                         4.1.5-6      The GNU sed stream editor
>>
>> php5-common recommends no packages.
>>
>> php5-common suggests no packages.
>>
>> -- no debconf information
>>
>>
>>
>> _______________________________________________
>> pkg-php-maint mailing list
>> pkg-php-maint@lists.alioth.debian.org
>> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-php-maint
>>

Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#632194; Package php5-common. (Fri, 01 Jul 2011 22:15:05 GMT) (full text, mbox, link).

Acknowledgement sent to Ana Guerrero <ana@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Fri, 01 Jul 2011 22:15:05 GMT) (full text, mbox, link).

Message #25 received at 632194@bugs.debian.org (full text, mbox, reply):

From: Ana Guerrero <ana@debian.org>
To: 632194@bugs.debian.org, Ondřej Surý <ondrej@debian.org>
Subject: Re: Bug#632194: php5-common: var_export output data even with return=true
Date: Sat, 2 Jul 2011 00:14:27 +0200
On Thu, Jun 30, 2011 at 03:28:02PM +0200, Alexandre Leroy wrote:
> Package: php5-common
> Version: 5.2.6.dfsg.1-1+lenny12
> Severity: normal
> 
> 
> This bug was introduced in 5.2.6.dfsg.1-1+lenny12
> When using var_export on an object, its members will be output even when 
> requesting result to be returned.
>

Hi!

I just have seen the upload fixing this bug with 5.2.6.dfsg.1-1+lenny13, thanks 
for the quick upload!
The bug isn't closed in the changelog, did you forget this or there is something
else missing here?

Ana

Reply sent to Ondřej Surý <ondrej@sury.org>:
You have taken responsibility. (Fri, 01 Jul 2011 22:24:12 GMT) (full text, mbox, link).

Notification sent to Alexandre Leroy <alexandre.leroy@zslide.com>:
Bug acknowledged by developer. (Fri, 01 Jul 2011 22:24:12 GMT) (full text, mbox, link).

Message #30 received at 632194-done@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>
To: Ana Guerrero <ana@debian.org>
Cc: Ondřej Surý <ondrej@debian.org>, "632194-done@bugs.debian.org" <632194-done@bugs.debian.org>
Subject: Re: Bug#632194: php5-common: var_export output data even with return=true
Date: Sat, 2 Jul 2011 00:22:23 +0200
Version: 5.2.6.dfsg.1-1+lenny13

Just forgot to add it to changelog and it builds for a quite long time. Closing now.

Ondřej Surý

On 2.7.2011, at 0:14, Ana Guerrero <ana@debian.org> wrote:

> On Thu, Jun 30, 2011 at 03:28:02PM +0200, Alexandre Leroy wrote:
>> Package: php5-common
>> Version: 5.2.6.dfsg.1-1+lenny12
>> Severity: normal
>> 
>> 
>> This bug was introduced in 5.2.6.dfsg.1-1+lenny12
>> When using var_export on an object, its members will be output even when 
>> requesting result to be returned.
>> 
> 
> Hi!
> 
> I just have seen the upload fixing this bug with 5.2.6.dfsg.1-1+lenny13, thanks 
> for the quick upload!
> The bug isn't closed in the changelog, did you forget this or there is something
> else missing here?
> 
> Ana

Reply sent to Ondřej Surý <ondrej@debian.org>:
You have taken responsibility. (Sat, 02 Jul 2011 14:00:08 GMT) (full text, mbox, link).

Notification sent to Alexandre Leroy <alexandre.leroy@zslide.com>:
Bug acknowledged by developer. (Sat, 02 Jul 2011 14:00:08 GMT) (full text, mbox, link).

Message #35 received at 632194-close@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@debian.org>
To: 632194-close@bugs.debian.org
Subject: Bug#632194: fixed in php5 5.2.6.dfsg.1-1+lenny13
Date: Sat, 02 Jul 2011 13:57:56 +0000
Source: php5
Source-Version: 5.2.6.dfsg.1-1+lenny13

We believe that the bug you reported is fixed in the latest version of
php5, which is due to be installed in the Debian FTP archive:

libapache2-mod-php5_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/libapache2-mod-php5_5.2.6.dfsg.1-1+lenny13_amd64.deb
libapache2-mod-php5filter_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/libapache2-mod-php5filter_5.2.6.dfsg.1-1+lenny13_amd64.deb
php-pear_5.2.6.dfsg.1-1+lenny13_all.deb
  to main/p/php5/php-pear_5.2.6.dfsg.1-1+lenny13_all.deb
php5-cgi_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-cgi_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-cli_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-cli_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-common_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-common_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-curl_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-curl_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-dbg_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-dbg_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-dev_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-dev_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-gd_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-gd_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-gmp_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-gmp_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-imap_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-imap_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-interbase_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-interbase_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-ldap_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-ldap_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-mcrypt_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-mcrypt_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-mhash_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-mhash_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-mysql_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-mysql_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-odbc_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-odbc_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-pgsql_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-pgsql_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-pspell_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-pspell_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-recode_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-recode_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-snmp_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-snmp_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-sqlite_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-sqlite_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-sybase_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-sybase_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-tidy_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-tidy_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-xmlrpc_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-xmlrpc_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5-xsl_5.2.6.dfsg.1-1+lenny13_amd64.deb
  to main/p/php5/php5-xsl_5.2.6.dfsg.1-1+lenny13_amd64.deb
php5_5.2.6.dfsg.1-1+lenny13.diff.gz
  to main/p/php5/php5_5.2.6.dfsg.1-1+lenny13.diff.gz
php5_5.2.6.dfsg.1-1+lenny13.dsc
  to main/p/php5/php5_5.2.6.dfsg.1-1+lenny13.dsc
php5_5.2.6.dfsg.1-1+lenny13_all.deb
  to main/p/php5/php5_5.2.6.dfsg.1-1+lenny13_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 632194@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ondřej Surý <ondrej@debian.org> (supplier of updated php5 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Fri, 01 Jul 2011 09:49:45 +0200
Source: php5
Binary: php5 php5-common libapache2-mod-php5 libapache2-mod-php5filter php5-cgi php5-cli php5-dev php5-dbg php-pear php5-curl php5-gd php5-gmp php5-imap php5-interbase php5-ldap php5-mcrypt php5-mhash php5-mysql php5-odbc php5-pgsql php5-pspell php5-recode php5-snmp php5-sqlite php5-sybase php5-tidy php5-xmlrpc php5-xsl
Architecture: source amd64 all
Version: 5.2.6.dfsg.1-1+lenny13
Distribution: oldstable-security
Urgency: low
Maintainer: Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description: 
 libapache2-mod-php5 - server-side, HTML-embedded scripting language (Apache 2 module)
 libapache2-mod-php5filter - server-side, HTML-embedded scripting language (apache 2 filter mo
 php-pear   - PEAR - PHP Extension and Application Repository
 php5       - server-side, HTML-embedded scripting language (metapackage)
 php5-cgi   - server-side, HTML-embedded scripting language (CGI binary)
 php5-cli   - command-line interpreter for the php5 scripting language
 php5-common - Common files for packages built from the php5 source
 php5-curl  - CURL module for php5
 php5-dbg   - Debug symbols for PHP5
 php5-dev   - Files for PHP5 module development
 php5-gd    - GD module for php5
 php5-gmp   - GMP module for php5
 php5-imap  - IMAP module for php5
 php5-interbase - interbase/firebird module for php5
 php5-ldap  - LDAP module for php5
 php5-mcrypt - MCrypt module for php5
 php5-mhash - MHASH module for php5
 php5-mysql - MySQL module for php5
 php5-odbc  - ODBC module for php5
 php5-pgsql - PostgreSQL module for php5
 php5-pspell - pspell module for php5
 php5-recode - recode module for php5
 php5-snmp  - SNMP module for php5
 php5-sqlite - SQLite module for php5
 php5-sybase - Sybase / MS SQL Server module for php5
 php5-tidy  - tidy module for php5
 php5-xmlrpc - XML-RPC module for php5
 php5-xsl   - XSL module for php5
Closes: 632194
Changes: 
 php5 (5.2.6.dfsg.1-1+lenny13) oldstable-security; urgency=low
 .
   * Remove stray php_printf from CVE-2010-2531 (Closes: #632194)
Checksums-Sha1: 
 e60970fe4b32e3aaa872c7b62e453f7d56208d70 2533 php5_5.2.6.dfsg.1-1+lenny13.dsc
 1d67dca7d70056fb9662e0c89ba412b48668478c 185536 php5_5.2.6.dfsg.1-1+lenny13.diff.gz
 9b040664b151f592750560783ddfc2d0f518997d 370926 php5-common_5.2.6.dfsg.1-1+lenny13_amd64.deb
 ad25c9ffa84bc4dcd32b9113109bdf129474b36a 2618334 libapache2-mod-php5_5.2.6.dfsg.1-1+lenny13_amd64.deb
 8b9e73359c213884757caeb8e48b2d71c1201a94 2617030 libapache2-mod-php5filter_5.2.6.dfsg.1-1+lenny13_amd64.deb
 e8e31b710937d95635065b33cfb708135b401082 5088430 php5-cgi_5.2.6.dfsg.1-1+lenny13_amd64.deb
 b76a6b918c0c3beee6b884d93f78e957d940afa1 2565060 php5-cli_5.2.6.dfsg.1-1+lenny13_amd64.deb
 7050ffe6123e4a0917d0a4310812ee44d426511c 365704 php5-dev_5.2.6.dfsg.1-1+lenny13_amd64.deb
 67eef38ba23d41306e2b7146fa4a244426b6379d 8300552 php5-dbg_5.2.6.dfsg.1-1+lenny13_amd64.deb
 3aaec0e401465c5e7f88aa341a734809e75993bf 25230 php5-curl_5.2.6.dfsg.1-1+lenny13_amd64.deb
 636dd1d5e8de81f75290d0a0dc8fefc66b3606ab 37038 php5-gd_5.2.6.dfsg.1-1+lenny13_amd64.deb
 86a245e409a0c4eb71f2ea50eab6f01cae72737d 16500 php5-gmp_5.2.6.dfsg.1-1+lenny13_amd64.deb
 0311ce883fcbe3f59a55796b0118b85e3af00468 38088 php5-imap_5.2.6.dfsg.1-1+lenny13_amd64.deb
 df3bf10709f2afe0cee5e81807d290e4409be80b 48428 php5-interbase_5.2.6.dfsg.1-1+lenny13_amd64.deb
 6f7899a69e5cd5be5a5ca17d419344a4fc2f1c27 20146 php5-ldap_5.2.6.dfsg.1-1+lenny13_amd64.deb
 a86fc43112ce58ce95e681bf09b49a58ddb29a43 14180 php5-mcrypt_5.2.6.dfsg.1-1+lenny13_amd64.deb
 07816a0d26fdb4d2fa790fd6c94ff10f4aa8a5ff 5424 php5-mhash_5.2.6.dfsg.1-1+lenny13_amd64.deb
 193af89750c14d1ebc2cb1a33eb3cd7e46f5a846 73572 php5-mysql_5.2.6.dfsg.1-1+lenny13_amd64.deb
 0bec05268d873673f51dc9816a3d9b9ac3879058 37848 php5-odbc_5.2.6.dfsg.1-1+lenny13_amd64.deb
 9d2c882758a7dd5e998b408750ee0c1c44872136 57222 php5-pgsql_5.2.6.dfsg.1-1+lenny13_amd64.deb
 5ce85b371a131934f355a7098a66b923f9b4779d 9466 php5-pspell_5.2.6.dfsg.1-1+lenny13_amd64.deb
 3032f5dd6f2b5c1441134b8764c08e4ebaf2140c 5098 php5-recode_5.2.6.dfsg.1-1+lenny13_amd64.deb
 fdd4d8cade3b296dfda167a88f962e3f31f98be0 12328 php5-snmp_5.2.6.dfsg.1-1+lenny13_amd64.deb
 51c21d6b4fa2e21e96566f36f6ff1dd69bd6c67c 39870 php5-sqlite_5.2.6.dfsg.1-1+lenny13_amd64.deb
 a5390bcc474f26db47deb983a08aa57b3965ccdf 28614 php5-sybase_5.2.6.dfsg.1-1+lenny13_amd64.deb
 d352ac442d86cc0766345c3378ab3e3018e62800 18126 php5-tidy_5.2.6.dfsg.1-1+lenny13_amd64.deb
 88f0413e45cee09f9f33d95cb64a27d018a55d6d 40932 php5-xmlrpc_5.2.6.dfsg.1-1+lenny13_amd64.deb
 b91d2291f4a08f7100cae64be48c8615b1c9b38d 13920 php5-xsl_5.2.6.dfsg.1-1+lenny13_amd64.deb
 f7e98431fcf5b0617be7d42f3e4fc6fce6959cc2 1084 php5_5.2.6.dfsg.1-1+lenny13_all.deb
 cc4266f6755f3bfb2bf731fb790559d0f0dfb8cf 335256 php-pear_5.2.6.dfsg.1-1+lenny13_all.deb
Checksums-Sha256: 
 1a352f753c5290ef2e1eca9d181e60a3eccf7ac2168309e011816526ffae0c2c 2533 php5_5.2.6.dfsg.1-1+lenny13.dsc
 c8bcf909e3172e96057e608da0e832e8b620266a75f2289c93fc3b32770819a9 185536 php5_5.2.6.dfsg.1-1+lenny13.diff.gz
 50e04cd9423e0d2e9fc2fd58c110f5bca2b8bd783f9bc0f065b600fa6da317ee 370926 php5-common_5.2.6.dfsg.1-1+lenny13_amd64.deb
 8a8b53731798a4e71487d49ff4c532a631cf078624ca9ad88f3db8d6b73af082 2618334 libapache2-mod-php5_5.2.6.dfsg.1-1+lenny13_amd64.deb
 b726782b435067e825f2d84a037ee0308be86cd36bf8869917b0f52873a9f17d 2617030 libapache2-mod-php5filter_5.2.6.dfsg.1-1+lenny13_amd64.deb
 d897d544de9c4109c7ade58f94339d969a13bc02e2a1ee55f925fff321350090 5088430 php5-cgi_5.2.6.dfsg.1-1+lenny13_amd64.deb
 033f6373f06336ae29a332fd81918495aa03e6ea3cb7b4148fb7115e4187cb10 2565060 php5-cli_5.2.6.dfsg.1-1+lenny13_amd64.deb
 b12699d9d2723a402d1fe67ef05b67fca5b53e295b3bfc3b480631f477040a51 365704 php5-dev_5.2.6.dfsg.1-1+lenny13_amd64.deb
 cfde105bc5bfe5c869755de2b65c9caba93916f9c59ccf3ce4c67bc355af22f6 8300552 php5-dbg_5.2.6.dfsg.1-1+lenny13_amd64.deb
 da566c5d83adc11ba9d8ca4a30d0e575fd7d1015f4d36a3c961be3d8373a844e 25230 php5-curl_5.2.6.dfsg.1-1+lenny13_amd64.deb
 855b255cc09472ae036c685d9c4f2afef553c23e064fdba5f6933fe3ea20dbbf 37038 php5-gd_5.2.6.dfsg.1-1+lenny13_amd64.deb
 656d9abedd67b936e6f6653f7ca6578580b064774983172dd6be1990225178c9 16500 php5-gmp_5.2.6.dfsg.1-1+lenny13_amd64.deb
 3d4fc937f1e496bca36a1b869e3a5507b3a156bd1345e5fdaca089789be8a294 38088 php5-imap_5.2.6.dfsg.1-1+lenny13_amd64.deb
 83f0114ef4edd1ff19ad20f00dde7f507f89c52ae3f9637768066c8ba5f3d704 48428 php5-interbase_5.2.6.dfsg.1-1+lenny13_amd64.deb
 e56bb3566b638210cea3a8ef78a4f287b125b04c6eba28c6702d63a0c38c7d36 20146 php5-ldap_5.2.6.dfsg.1-1+lenny13_amd64.deb
 9945c262ab31c7bf984938638ee39acd0c5b54f30b8dba394323ab710c90eed3 14180 php5-mcrypt_5.2.6.dfsg.1-1+lenny13_amd64.deb
 aa191c8e80d441a3ad25725518e595695ec146da8a424fae494b51aa0cede115 5424 php5-mhash_5.2.6.dfsg.1-1+lenny13_amd64.deb
 f0c0dc2d042c8503f5ad381a8fa52ae8b446a441494f912e0a6b3b80acd4f882 73572 php5-mysql_5.2.6.dfsg.1-1+lenny13_amd64.deb
 a93a42e3aaf5124aa15d10036b2fe42398c98267ed681faa53cbddf84c6f0ab1 37848 php5-odbc_5.2.6.dfsg.1-1+lenny13_amd64.deb
 d9d4a837379f6afb4d6380cec67ca41b34b26d7751b66f6d40f7c5326a246696 57222 php5-pgsql_5.2.6.dfsg.1-1+lenny13_amd64.deb
 e5ecc61cbf3fa2bc91afbc1cf8cc4634febecc573bf678cae9da23f615f27276 9466 php5-pspell_5.2.6.dfsg.1-1+lenny13_amd64.deb
 b334dc8ec5c7df8e448f045327158faa381c6b51e1401249bf61b5124994d2be 5098 php5-recode_5.2.6.dfsg.1-1+lenny13_amd64.deb
 c6ddd50f661e0cb5169d11f9c3df763c19c52f49fbf2dbf21e57f4b654979f6f 12328 php5-snmp_5.2.6.dfsg.1-1+lenny13_amd64.deb
 1c90998ed2a35a2d80a4650587ff6b5800a2da8db9b21cb0c197be405428cf70 39870 php5-sqlite_5.2.6.dfsg.1-1+lenny13_amd64.deb
 7c3c18de922737e159976ad7715dc489381f859c3178ce7d8c405435cda560db 28614 php5-sybase_5.2.6.dfsg.1-1+lenny13_amd64.deb
 7caf38e09d5e25a0565515c14d7f740c8ff3de7cf97886e3a1c937828753e108 18126 php5-tidy_5.2.6.dfsg.1-1+lenny13_amd64.deb
 a3f2535b105e3a05c938bbe0f43552f22f7a255a41d0909c24e4667b4a936cae 40932 php5-xmlrpc_5.2.6.dfsg.1-1+lenny13_amd64.deb
 2851e3d13ceee16a7bc8b344a917ece2088e122f92fcebf3449c1a0bd550fe0d 13920 php5-xsl_5.2.6.dfsg.1-1+lenny13_amd64.deb
 79cb9cbf9120ce32c98bf381d1ada0f6ee7c851b23b364a6284c469796703cdb 1084 php5_5.2.6.dfsg.1-1+lenny13_all.deb
 e19f5f99846cec7aaf35be605108fce6ce4872c07bd36463a428e3998c18dbf8 335256 php-pear_5.2.6.dfsg.1-1+lenny13_all.deb
Files: 
 7bd64b6e144caf24a219ef05260ec116 2533 web optional php5_5.2.6.dfsg.1-1+lenny13.dsc
 a4c913275addc1c4bbde33cfe5b51571 185536 web optional php5_5.2.6.dfsg.1-1+lenny13.diff.gz
 2251b82fd900ba0b330721959a2c2f29 370926 web optional php5-common_5.2.6.dfsg.1-1+lenny13_amd64.deb
 b0c90af596506bc8082c4fdb3e487e96 2618334 web optional libapache2-mod-php5_5.2.6.dfsg.1-1+lenny13_amd64.deb
 b49c4c762f3f46923626b659fa7c98c9 2617030 web optional libapache2-mod-php5filter_5.2.6.dfsg.1-1+lenny13_amd64.deb
 428a77af4d0bc6f6c71767e8ecd78bb9 5088430 web optional php5-cgi_5.2.6.dfsg.1-1+lenny13_amd64.deb
 c12a8ae3f58dd5a35ee1d402283c0901 2565060 web optional php5-cli_5.2.6.dfsg.1-1+lenny13_amd64.deb
 96fd9d93d5a65046d0134f488f80907e 365704 devel optional php5-dev_5.2.6.dfsg.1-1+lenny13_amd64.deb
 9f659ed7da580fc8ca3c9430554eed6d 8300552 devel extra php5-dbg_5.2.6.dfsg.1-1+lenny13_amd64.deb
 6dfe41609a272347342ee7a2422305d8 25230 web optional php5-curl_5.2.6.dfsg.1-1+lenny13_amd64.deb
 f61a53ca8c47e48ffc58c6a2bcd69166 37038 web optional php5-gd_5.2.6.dfsg.1-1+lenny13_amd64.deb
 2b964dbce2eb995ec8340975d5155af4 16500 web optional php5-gmp_5.2.6.dfsg.1-1+lenny13_amd64.deb
 7604f1980ad2bd6bfcf1830a2876b9ef 38088 web optional php5-imap_5.2.6.dfsg.1-1+lenny13_amd64.deb
 5e71e3b880a87d4360244d4ca5960037 48428 web optional php5-interbase_5.2.6.dfsg.1-1+lenny13_amd64.deb
 020f3b8d3167b0dfbf1054ff437e3990 20146 web optional php5-ldap_5.2.6.dfsg.1-1+lenny13_amd64.deb
 425c34a8455334038ea5163f8895728d 14180 web optional php5-mcrypt_5.2.6.dfsg.1-1+lenny13_amd64.deb
 981504db0b14c4c04e40e077fd42a0bb 5424 web optional php5-mhash_5.2.6.dfsg.1-1+lenny13_amd64.deb
 9af2c85d151b18833cc239e0d847e646 73572 web optional php5-mysql_5.2.6.dfsg.1-1+lenny13_amd64.deb
 43ce19026b535271878d940d21202205 37848 web optional php5-odbc_5.2.6.dfsg.1-1+lenny13_amd64.deb
 04dda4d484218b2a5d3f6b14bc739ec4 57222 web optional php5-pgsql_5.2.6.dfsg.1-1+lenny13_amd64.deb
 3fac1b9f080b92215bfc6ff16ef0af0b 9466 web optional php5-pspell_5.2.6.dfsg.1-1+lenny13_amd64.deb
 22d78cbd29f332583b2372ec7e142155 5098 web optional php5-recode_5.2.6.dfsg.1-1+lenny13_amd64.deb
 317fbc33d195688a3609a9d1ef54b41d 12328 web optional php5-snmp_5.2.6.dfsg.1-1+lenny13_amd64.deb
 fdea9aa4432e35c2528a7190a8eaf891 39870 web optional php5-sqlite_5.2.6.dfsg.1-1+lenny13_amd64.deb
 eff725c9645d3688d89cd4f535857dd9 28614 web optional php5-sybase_5.2.6.dfsg.1-1+lenny13_amd64.deb
 73381b699e578e63e41fafcdb1a2e32e 18126 web optional php5-tidy_5.2.6.dfsg.1-1+lenny13_amd64.deb
 f7c0afba3471e5f8f4275968c548e101 40932 web optional php5-xmlrpc_5.2.6.dfsg.1-1+lenny13_amd64.deb
 ef6a06257c9559e65f8966e12e600935 13920 web optional php5-xsl_5.2.6.dfsg.1-1+lenny13_amd64.deb
 533b776343e7e5c20f1281bd0e04dc2d 1084 web optional php5_5.2.6.dfsg.1-1+lenny13_all.deb
 ad2ada1409593961eb5b21cb89218556 335256 web optional php-pear_5.2.6.dfsg.1-1+lenny13_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAk4N9PYACgkQ9OZqfMIN8nOE+wCeOmOBV3ZyhQIpz4IT3/Igj/rs
eqIAn2Za4gz0Uj/LQXZx1GV2sJaxFH9k
=IMWo
-----END PGP SIGNATURE-----

Information forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#632194; Package php5-common. (Mon, 18 Jul 2011 21:09:08 GMT) (full text, mbox, link).

Acknowledgement sent to Ondřej Surý <ondrej@sury.org>:
Extra info received and forwarded to list. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Mon, 18 Jul 2011 21:09:08 GMT) (full text, mbox, link).

Message #40 received at 632194@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@sury.org>
To: 632194@bugs.debian.org
Cc: ,control@bugs.debian.org
Subject: [debian/debian-lenny] Remove stray php_printf from CVE-2010-2531 (Closes: #632194)
Date: Mon, 18 Jul 2011 21:07:00 +0000
tag 632194 pending
thanks

Date: Fri Jul 1 09:49:40 2011 +0200
Author: Ondřej Surý <ondrej@sury.org>
Commit ID: 18b3d5cb294bc93afca68072bbf6bde671c94f3c
Commit URL: http://git.debian.org/?p=pkg-php/php.git;a=commitdiff;h=18b3d5cb294bc93afca68072bbf6bde671c94f3c
Patch URL: http://git.debian.org/?p=pkg-php/php.git;a=commitdiff_plain;h=18b3d5cb294bc93afca68072bbf6bde671c94f3c

    Remove stray php_printf from CVE-2010-2531 (Closes: #632194)

Added tag(s) pending. Request was from Ondřej Surý <ondrej@sury.org> to control@bugs.debian.org. (Mon, 18 Jul 2011 21:09:42 GMT) (full text, mbox, link).

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Tue, 16 Aug 2011 07:37:01 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 01:08:50 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.