-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 07 Dec 2018 11:36:49 +0000 Source: php7.0 Binary: libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-cgi php7.0-cli php7.0-dev php7.0-fpm php7.0-phpdbg php7.0-xsl php7.0-odbc php7.0-readline php7.0-recode php7.0-sqlite3 php7.0-tidy php7.0-xml php7.0-sybase php7.0-gd php7.0-mcrypt php7.0-zip php7.0-common php7.0-intl php7.0-snmp php7.0-curl php7.0-json php7.0-pgsql php7.0-mbstring php7.0-enchant php7.0-opcache php7.0-imap php7.0-gmp php7.0-mysql php7.0-bcmath php7.0-soap php7.0-dba php7.0-interbase php7.0-xmlrpc php7.0-pspell php7.0-bz2 php7.0-ldap Architecture: source Version: 7.0.33-0+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org> Changed-By: Ondřej Surý <ondrej@debian.org> Description: libapache2-mod-php7.0 - server-side, HTML-embedded scripting language (Apache 2 module) libphp7.0-embed - HTML-embedded scripting language (Embedded SAPI library) php7.0 - server-side, HTML-embedded scripting language (metapackage) php7.0-bcmath - Bcmath module for PHP php7.0-bz2 - bzip2 module for PHP php7.0-cgi - server-side, HTML-embedded scripting language (CGI binary) php7.0-cli - command-line interpreter for the PHP scripting language php7.0-common - documentation, examples and common module for PHP php7.0-curl - CURL module for PHP php7.0-dba - DBA module for PHP php7.0-dev - Files for PHP7.0 module development php7.0-enchant - Enchant module for PHP php7.0-fpm - server-side, HTML-embedded scripting language (FPM-CGI binary) php7.0-gd - GD module for PHP php7.0-gmp - GMP module for PHP php7.0-imap - IMAP module for PHP php7.0-interbase - Interbase module for PHP php7.0-intl - Internationalisation module for PHP php7.0-json - JSON module for PHP php7.0-ldap - LDAP module for PHP php7.0-mbstring - MBSTRING module for PHP php7.0-mcrypt - libmcrypt module for PHP php7.0-mysql - MySQL module for PHP php7.0-odbc - ODBC module for PHP php7.0-opcache - Zend OpCache module for PHP php7.0-pgsql - PostgreSQL module for PHP php7.0-phpdbg - server-side, HTML-embedded scripting language (PHPDBG binary) php7.0-pspell - pspell module for PHP php7.0-readline - readline module for PHP php7.0-recode - recode module for PHP php7.0-snmp - SNMP module for PHP php7.0-soap - SOAP module for PHP php7.0-sqlite3 - SQLite3 module for PHP php7.0-sybase - Sybase module for PHP php7.0-tidy - tidy module for PHP php7.0-xml - DOM, SimpleXML, WDDX, XML, and XSL module for PHP php7.0-xmlrpc - XMLRPC-EPI module for PHP php7.0-xsl - XSL module for PHP (dummy) php7.0-zip - Zip module for PHP Changes: php7.0 (7.0.33-0+deb9u1) stretch-security; urgency=high . * New upstream version 7.0.33 * Fixed security bugs: + [CVE-2018-19518]: imap_open() function command injection + [CVE-2018-14851]: heap-buffer-overflow (READ of size 48) while reading exif data + [CVE-2018-14883]: Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.c + [CVE-2018-17082]: XSS due to the header Transfer-Encoding: chunked Checksums-Sha1: c48c6e986821bafd2ae06a24d68bdfd5f8f97e35 5790 php7.0_7.0.33-0+deb9u1.dsc fef2bfd1285325a4ac2c367fab6a9062c144a790 12033040 php7.0_7.0.33.orig.tar.xz c79d9ad37f3f638682694b471e3bfc211a8ae2b5 65588 php7.0_7.0.33-0+deb9u1.debian.tar.xz 39407205a2533fe41fb6677ab3ba5005281a231d 35995 php7.0_7.0.33-0+deb9u1_amd64.buildinfo Checksums-Sha256: 0723e18be75acac5018b75faa1ca9612a8a2f27765182b7e7fb490adc9f22032 5790 php7.0_7.0.33-0+deb9u1.dsc ab8c5be6e32b1f8d032909dedaaaa4bbb1a209e519abb01a52ce3914f9a13d96 12033040 php7.0_7.0.33.orig.tar.xz d51b8d4010d3e0f79fdeb0516161430b25d529cc3aeb02287204e30f080a5957 65588 php7.0_7.0.33-0+deb9u1.debian.tar.xz cad10bbefc53c686826954260cb0e1d8ad4353246c3b9d8232ecce6e3576863c 35995 php7.0_7.0.33-0+deb9u1_amd64.buildinfo Files: 4f523663e15aeaf28aa4c0857368e015 5790 php optional php7.0_7.0.33-0+deb9u1.dsc a6d7c355d023301a1a9ec8b4f32a4856 12033040 php optional php7.0_7.0.33.orig.tar.xz 76ff47b9cf4c55f4349d39d6bf595051 65588 php optional php7.0_7.0.33-0+deb9u1.debian.tar.xz f512cc2cc8823144dc9d6abb719d04a2 35995 php optional php7.0_7.0.33-0+deb9u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAlwK0VZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u WcI1nQ//RcWERRmfqS+wx8nYSrkphtLto5y/VfEeR55VUjTtVILdy/NRfhoA6uW3 p9AU8jMmxiKATtw2auv0Xm2UVkn+SncGQgDnerdFi3CMe3FKIzGq4MNdmgchM59A T4YHG/OIvT+XQCehH4GCPoKdRyuH5jbYObWScIHgGtnIquHqXM7ryKvMkMWLBmAR GLDFphUqURbVjL3qos45TU76bwFcnn28GPW1yBOGG1uAdxjJ9Ak8nJ89dofgF5uV d06jAY0udw2F9gDWmOi4UH682rf8dasQVKGSsKbJ2f3KGp66ZvFh48eKYqQATo1a 7+MAssX409dS4JTBSYZDG0CPYPaX5VoeJGKTLzI4dympHb8Pe0i6rgswGGs+C2RE pGtVqL53TAzONzGKz0af8iT3Kwb8irODs0BVvJoRJcs+9iroSxInR1MMzFcz/vH8 s4hO79LhIPPVk8OEhbeJpPsw3HTfNOYYOx8YZJWrANKfW7siKkks6UIW74eUEXI6 IC3IQCC41uw3psMlokErFeT9sLMNmUHhNG9tCEVlEstUqvbm4vRCn8wouRqgOXDr j30wCGRKOeCY/wVFXndG482/6VNVr3iO40abJ8QbXyf+bpxS+OHc/wWn9tu6KN9O O9op+0uT+ZRza8TfN/HpVoKt7RMn2rT9YcmJ+09PAz3ZavzK3t8= =Pgaw -----END PGP SIGNATURE-----