Skip to contentSkip to conversation

php: security bump to version 5.5.18

PATCH New Gustavo Zacarias 3 participants 3 messages Oct 16, 2014 – Oct 17, 2014

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 php: security bump to version 5.5.18

Fixes:
CVE-2014-3669 - Integer overflow in unserialize() (32-bits only) CVE-2014-3670 - Heap corruption in exif_thumbnail() CVE-2014-3668 - Global buffer overflow in mkgmtime() function

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/php/php.hash | 2 +-
 package/php/php.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
package/php/php.hash +1 -1
index bee8cff..6bb0d1c 100644
@@ -1,2 +1,2 @@
 # From http://php.net/downloads.php
-md5	e5f25dae73004658533ee7701a527bd0	php-5.5.17.tar.xz
+md5	3984f32985842afebe5795457e26931f	php-5.5.18.tar.xz
package/php/php.mk +1 -1
index bca4f3a..26ec67d 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PHP_VERSION = 5.5.17
+PHP_VERSION = 5.5.18
 PHP_SITE = http://www.php.net/distributions
 PHP_SOURCE = php-$(PHP_VERSION).tar.xz
 PHP_INSTALL_STAGING = YES
Signature · 1 line
2.0.4
#1 lore raw

PATCH 1/1 php: security bump to version 5.5.18

Gustavo Zacarias <[email protected]> wrote in news:1413481717-9541-1-git-send-email-gustavo at zacarias.com.ar:

package/php/php.mk line 7

Quoted 2 lines
package/php/php.mk +1 -1
-PHP_VERSION = 5.5.17
+PHP_VERSION = 5.5.18
Acked-by Bernd Kuhls <[email protected]>
Applied
#2 lore raw

PATCH 1/1 php: security bump to version 5.5.18

In reply to Gustavo Zacarias

Dear Gustavo Zacarias,

Quoted 10 lines · Gustavo Zacarias

Fixes:
CVE-2014-3669 - Integer overflow in unserialize() (32-bits only) CVE-2014-3670 - Heap corruption in exif_thumbnail() CVE-2014-3668 - Global buffer overflow in mkgmtime() function

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/php/php.hash | 2 +-
 package/php/php.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

Applied, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com