REDROOM

Navigation

Breadcrumbs

Create

Edit File Size: 1.08 KB

/usr/share/doc/php8.4-common/README.Debian.security

Text Base64

The Debian stable security team does not provide security support for
certain configurations known to be inherently insecure. This includes
the interpreter itself, extensions, and user scripts written in the PHP
language. Most specifically, but not exclusively, the security team will
not provide support for the following.

* Security issues which are caused by careless programming, such as:
   - extracting a tar file without first checking the contents;
   - using unserialize() on untrusted data;
   - relying on a specific value of short_open_tag.

* Vulnerabilities involving any kind of open_basedir violation, as
   this feature is not considered a security model either by us or by
   PHP upstream.

* Any "works as expected" vulnerabilities, such as "user can cause
   PHP to crash by writing a malicious PHP script", unless such
   vulnerabilities involve some kind of higher-level DoS or privilege
   escalation that would not otherwise be available.

PHP upstream has published a statement regarding their view on security
and the PHP interpreter:
http://www.php.net/security-note.php

Exit & Reset Text mode: syntax highlighting auto-detects file type.

Name	Size	Perms	Modified	Actions
changelog.Debian.gz	395 B	lrw-r--r--	2026-01-22 07:08:08	Edit Download recursive recursive
changelog.gz	25.45 KB	lrw-r--r--	2026-01-22 07:08:08	Edit Download recursive recursive
copyright	33.17 KB	lrw-r--r--	2026-01-22 07:08:08	Edit Download recursive recursive
EXTENSIONS.gz	2.97 KB	lrw-r--r--	2026-01-22 07:08:08	Edit Download recursive recursive
README.Debian.gz	3.09 KB	lrw-r--r--	2026-01-22 07:08:08	Edit Download recursive recursive
README.Debian.security	1.08 KB	lrw-r--r--	2026-01-22 07:08:08	Edit Download recursive recursive
README.md.gz	2.17 KB	lrw-r--r--	2026-01-22 07:08:08	Edit Download recursive recursive
UPGRADING.gz	16.81 KB	lrw-r--r--	2026-01-22 07:08:08	Edit Download recursive recursive
UPGRADING.INTERNALS.gz	7.48 KB	lrw-r--r--	2026-01-22 07:08:08	Edit Download recursive recursive

Directory Contents