Skip to contentSkip to conversation

Bump php to 5.2.14

PATCH New Gustavo Zacarias 2 participants 2 messages Aug 12, 2010 – Aug 13, 2010

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 Bump php to 5.2.14

PHP 5.2.14 fixes various security vulnerabilities:

* Rewrote var_export() to use smart_str rather than output buffering, prevents data disclosure if a fatal error occurs.
* Fixed a possible interruption array leak in strrchr().(CVE-2010-2484)
* Fixed a possible interruption array leak in strchr(), strstr(), substr(), chunk_split(), strtok(), addcslashes(), str_repeat(), trim().
* Fixed a possible memory corruption in substr_replace().
* Fixed SplObjectStorage unserialization problems (CVE-2010-2225).
* Fixed a possible stack exaustion inside fnmatch().
* Fixed a NULL pointer dereference when processing invalid XML-RPC requests (Fixes CVE-2010-0397, bug #51288).
* Fixed handling of session variable serialization on certain prefix characters.
* Fixed a possible arbitrary memory access inside sqlite extension. Reported by Mateusz Kocielski.

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: buildroot-php-5.2.14.patch
URL: <http://lists.busybox.net/pipermail/buildroot/attachments/20100812/acd71360/attachment.ksh>

Applied
#1 lore raw

PATCH 1/1 Bump php to 5.2.14

Hello,

Quoted 8 lines · On Thu, 12 Aug 2010 10:15:37 -0300 Gustavo Zacarias <[email protected]>…

* Rewrote var_export() to use smart_str rather than output buffering, prevents data disclosure if a fatal error occurs.
* Fixed a possible interruption array leak in strrchr().(CVE-2010-2484)
* Fixed a possible interruption array leak in strchr(), strstr(), substr(), chunk_split(), strtok(), addcslashes(), str_repeat(), trim().
* Fixed a possible memory corruption in substr_replace().

Quoted 8 lines

* Fixed SplObjectStorage unserialization problems (CVE-2010-2225).
* Fixed a possible stack exaustion inside fnmatch().
* Fixed a NULL pointer dereference when processing invalid XML-RPC requests (Fixes CVE-2010-0397, bug #51288).
* Fixed handling of session variable serialization on certain prefix characters.
* Fixed a possible arbitrary memory access inside sqlite extension. Reported by Mateusz Kocielski.

Thanks, applied to for-2008.11.

Thomas

Signature · 4 lines
Thomas Petazzoni, Free Electrons
Kernel, drivers, real-time and embedded Linux
development, consulting, training and support.
http://free-electrons.com