Skip to contentSkip to conversation

php: security bump to version 5.5.23

PATCH New Gustavo Zacarias 2 participants 2 messages Mar 20, 2015

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 php: security bump to version 5.5.23

Fixes:
CVE-2015-0231 - Use After Free Vulnerability in unserialize() CVE-2015-2305 - heap overflow vulnerability in regcomp.c CVE-2015-2331 - ZIP Integer Overflow leads to writing past heap boundary

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/php/php.hash | 2 +-
 package/php/php.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
package/php/php.hash +1 -1
index f8a1715..0794db8 100644
@@ -1,2 +1,2 @@
 # From http://php.net/downloads.php
-md5	fb1704131d495f5b3e6ab3b087a8dbe6	php-5.5.22.tar.xz
+md5	692f9bc5649806f2053eee1e7323b7ea	php-5.5.23.tar.xz
package/php/php.mk +1 -1
index 1e77a97..6d35a2f 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PHP_VERSION = 5.5.22
+PHP_VERSION = 5.5.23
 PHP_SITE = http://www.php.net/distributions
 PHP_SOURCE = php-$(PHP_VERSION).tar.xz
 PHP_INSTALL_STAGING = YES
Signature · 1 line
2.0.5
Applied
#1 lore raw

PATCH 1/1 php: security bump to version 5.5.23

Dear Gustavo Zacarias,

Quoted 10 lines · Gustavo Zacarias

Fixes:
CVE-2015-0231 - Use After Free Vulnerability in unserialize() CVE-2015-2305 - heap overflow vulnerability in regcomp.c CVE-2015-2331 - ZIP Integer Overflow leads to writing past heap boundary

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/php/php.hash | 2 +-
 package/php/php.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

Applied, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com