Skip to contentSkip to conversation

php: security bump to version 5.5.16

PATCH New Gustavo Zacarias 2 participants 2 messages Aug 22, 2014 – Aug 25, 2014

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 php: security bump to version 5.5.16

Fixes:
CVE-2014-3538 - Extensive backtracking in rule regular expression CVE-2014-3587 - Segfault in cdf.c
CVE-2014-2497 - php-gd 'c_color' NULL pointer dereference CVE-2014-5120 - Null byte injection possible with imagexxx functions CVE-2014-3597 - segfault in dns_get_record

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/php/php.mk | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
package/php/php.mk +1 -1
index de7d668..d174533 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PHP_VERSION = 5.5.15
+PHP_VERSION = 5.5.16
 PHP_SITE = http://www.php.net/distributions
 PHP_INSTALL_STAGING = YES
 PHP_INSTALL_STAGING_OPT = INSTALL_ROOT=$(STAGING_DIR) install
Signature · 1 line
1.8.5.5
Applied
#1 lore raw

PATCH 1/1 php: security bump to version 5.5.16

Dear Gustavo Zacarias,

Quoted 11 lines · Gustavo Zacarias

Fixes:
CVE-2014-3538 - Extensive backtracking in rule regular expression CVE-2014-3587 - Segfault in cdf.c
CVE-2014-2497 - php-gd 'c_color' NULL pointer dereference CVE-2014-5120 - Null byte injection possible with imagexxx functions CVE-2014-3597 - segfault in dns_get_record

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/php/php.mk | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Applied to the master branch, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com