5 Commits

Author	SHA1	Message	Date
Gustavo Zacarias	626030fb1b	php: security bump to version 5.5.21 ... Fixes: CVE-2015-0231 - Use After Free Vulnerability in PHP's unserialize() CVE-2014-9427 - Out of bounds read crashes php-cgi CVE-2015-0232 - Free called on unitialized pointer Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2015-01-23 16:44:27 +01:00
Gustavo Zacarias	d64599ccb7	php: security bump to version 5.5.20 ... Fixes: CVE-2014-8142 - Use after free vulnerability in unserialize() Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2014-12-18 22:54:04 +01:00
Gustavo Zacarias	9a5261544f	php: security bump to version 5.5.19 ... Fixes: CVE-2014-3710 - fileinfo: out-of-bounds read in elf note headers. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Reviewed-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2014-11-14 13:17:45 +01:00
Gustavo Zacarias	f8abb0b3d9	php: security bump to version 5.5.18 ... Fixes: CVE-2014-3669 - Integer overflow in unserialize() (32-bits only) CVE-2014-3670 - Heap corruption in exif_thumbnail() CVE-2014-3668 - Global buffer overflow in mkgmtime() function Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Acked-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>	2014-10-17 11:23:24 +02:00
Gustavo Zacarias	3b423f3b02	php: bump to version 5.5.17 ... Add hash and switch to xz download for space savings. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>	2014-09-19 16:18:56 +02:00