This bug was fixed in the package php7.4 - 7.4.3-4ubuntu2.4
---
php7.4 (7.4.3-4ubuntu2.4) focal-security; urgency=medium
* SECURITY UPDATE: Incorrect encryption data
- debian/patches/CVE-2020-7069.patch: fix wrong ciphertext/tag
in AES-CCM encryption for a 12 bytes IV in
Łukasz, yes, see LP: #1895878 and LP: #1878102 which are additional SRUs
to get this thru. I'm not sure what causes those failures but they are
reproducible independently of this so evidently are unrelated.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
Thank you for the verification! Bryce, I see there's still a set of
autopkgtest failures for this upload (php-parser for all arches) - can
you take a look and assess if this is now broken in release and/or
unrelated? Thanks!
--
You received this bug notification because you are a member of
Verified as fixed.
The instructions on the listed wikipage
(https://wiki.ubuntu.com/Testing/EnableProposed) for testing a package
from proposed were complete rubbish. Couldn't get those to work any way
I could imagine. I finally got it installed using the SRU Verification
wiki page for
Greater specificity:
Also included php7.4-curl with the above testing, and the specific version of
packages tested were
(7.4.3-4ubuntu2.3)
** Tags removed: verification-needed-focal
** Tags added: verification-done-focal
--
You received this bug notification because you are a member of Ubuntu
Stephen, now that this has been accepted to -proposed, could you verify
the fix is working properly? You'll need to enable proposed on a 20.04
based system, install the package, and verify the issue no longer
reproduces.
Thanks ahead of time.
--
You received this bug notification because you
Hello Stephen, or anyone else affected,
Accepted php7.4 into focal-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/php7.4/7.4.3-4ubuntu2.3 in a few
hours, and then in the -proposed repository.
Please help us by testing this new package. See
** Description changed:
[Impact]
- * PHP7.4.3 has an issue with cURL where it is defaulting to chunked
+ * PHP7.4.3 has an issue with cURL where it is defaulting to chunked
mode when transferring a file via POST. Setting the HTTP version does
not impact it. For third-party servers that
** Merge proposal linked:
https://code.launchpad.net/~bryce/ubuntu/+source/php7.4/+git/php7.4/+merge/390343
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1887826
Title:
CURLFile POST missing
** Bug watch added: bugs.php.net/ #79013
http://bugs.php.net/bug.php?id=79013
** Also affects: php via
http://bugs.php.net/bug.php?id=79013
Importance: Unknown
Status: Unknown
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to
** Changed in: php7.4 (Ubuntu Focal)
Importance: Undecided => Medium
** Changed in: php7.4 (Ubuntu Focal)
Assignee: (unassigned) => Bryce Harrington (bryce)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
This bug was fixed in the package php7.4 - 7.4.5-1ubuntu2
---
php7.4 (7.4.5-1ubuntu2) groovy; urgency=medium
* No-change rebuild against libicu67
-- Steve Langasek Tue, 28 Jul 2020
16:14:33 +
** Changed in: php7.4 (Ubuntu)
Status: Triaged => Fix Released
--
You
** Description changed:
- See https://bugs.php.net/bug.php?id=79013 for this exact issue.
+ [Impact]
- Upgrading Ubuntu's supported PHP version to 7.4.4 *should* fix the
- issue, or backporting the patch in the link I included.
+ * PHP7.4.3 has an issue with cURL where it is defaulting to
I'm not quite sure what to say about how to reproduce.
POST a file using PHP-cURL to a server that doesn't support chunked mode.
I'm using https://sandbox.zenodo.com, but this requires a free account and
utilizing their API, which seems beyond the scope of what I should put in a
comment. Here
** Tags added: patch
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1887826
Title:
CURLFile POST missing Content-Length header
To manage notifications about this bug go to:
Here is the patch from upstream's PR https://github.com/php/php-
src/pull/5228
** Patch added: "fc8b3ab7cbb4f5e77584babeaf25b9bf16f524cd.patch"
https://bugs.launchpad.net/ubuntu/+source/php7.4/+bug/1887826/+attachment/5394460/+files/fc8b3ab7cbb4f5e77584babeaf25b9bf16f524cd.patch
--
You
Stephen Rees, can you provide steps to reproduce the problem? We'll
need to document that to get the SRU approved.
** Also affects: php7.4 (Ubuntu Focal)
Importance: Undecided
Status: New
** Changed in: php7.4 (Ubuntu Focal)
Status: New => Incomplete
--
You received this bug
** Tags added: server-next
** Changed in: php7.4 (Ubuntu)
Importance: Undecided => Medium
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1887826
Title:
CURLFile POST missing Content-Length
Hi Stephen - thanks for the report,
a merge of 7.4.5 is currently going on and will resolve this in groovy.
>From there SRUs can be considered as needed.
** Changed in: php7.4 (Ubuntu)
Status: New => Triaged
** Changed in: php7.4 (Ubuntu)
Assignee: (unassigned) => Bryce Harrington
19 matches
Mail list logo
