diff options
| author | Natanael Copa <ncopa@alpinelinux.org> | 2014-09-01 12:16:52 +0000 |
|---|---|---|
| committer | Natanael Copa <ncopa@alpinelinux.org> | 2014-09-01 12:21:51 +0000 |
| commit | 81b5df73c54e9175b33db32df0c3583fab1ca8f1 (patch) | |
| tree | 46ace48c0aa13fee47a930a387d98fedd228516c /main | |
| parent | 82028082c8599d673487c93e85cfd97d3da04094 (diff) | |
| download | aports-81b5df73c54e9175b33db32df0c3583fab1ca8f1.tar.bz2 aports-81b5df73c54e9175b33db32df0c3583fab1ca8f1.tar.xz | |
main/php: security upgrade to 5.4.32 (various CVEs)
21-Aug-2014
Core:
Fixed bug #67717 (segfault in dns_get_record) (CVE-2014-3597).
Fixed bug #67693 (incorrect push to the empty array)
COM:
Fixed missing type checks in com_event_sink.
Fileinfo:
Fixed bug #67705 (extensive backtracking in rule regular expression) (CVE-2014-3538).
Fixed bug #67716 (Segfault in cdf.c) (CVE-2014-3587).
GD:
Fixed bug #66901 (php-gd 'c_color' NULL pointer dereference) (CVE-2014-2497).
Fixed bug #67730 (Null byte injection possible with imagexxx functions) (CVE-2014-5120).
Milter:
Fixed bug #67715 (php-milter does not build and crashes randomly).
OpenSSL:
Fixed missing type checks in OpenSSL options (Yussuf Khalil, Stas).
Readline:
Fixed bug #55496 (Interactive mode doesn't force a newline before the prompt).
Fixed bug #67496 (Save command history when exiting interactive shell with control-c).
Sessions:
Fixed missing type checks in php_session_create_id.
SPL:
Fixed bug #67539 (ArrayIterator use-after-free due to object change during sorting) (CVE-2014-4698).
Fixed bug #67538 (SPL Iterators use-after-free) (CVE-2014-4670).
ODBC:
Fixed bug #60616 (odbc_fetch_into returns junk data at end of multi-byte char fields).
fixes #3341
Diffstat (limited to 'main')
| -rw-r--r-- | main/php/APKBUILD | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/main/php/APKBUILD b/main/php/APKBUILD index d8dfff6671..a07e5a439c 100644 --- a/main/php/APKBUILD +++ b/main/php/APKBUILD @@ -1,7 +1,7 @@ # Contributor: Carlo Landmeter <clandmeter@gmail.com> # Maintainer: Matt Smith <mcs@darkregion.net> pkgname=php -pkgver=5.4.30 +pkgver=5.4.32 pkgrel=0 pkgdesc="The PHP language runtime engine" url="http://www.php.net/" @@ -473,17 +473,17 @@ mssql() { _mv_ext mssql; } pdo_dblib() { _mv_ext pdo_dblib "php-pdo freetds"; } wddx() { _mv_ext wddx; } -md5sums="a8a27fdc1d9e1020c9f8922b608326de php-5.4.30.tar.bz2 +md5sums="0de30057773755c742ef4916c473292c php-5.4.32.tar.bz2 9ab162ff3428511a68aa9801c746e0d5 php-fpm.initd 67719f428f44ec004da18705cbabe2ee php5-module.conf 483bc0a85c50a9a9aedbe14a19ed4526 php-install-pear-xml.patch 3e0faaaf0abd573300d54f92325e4dba gd-iconv.patch" -sha256sums="32b83644e42d57388d6e5ec700c3502cde5f5e1207395b1e361e4cb2ce496ce6 php-5.4.30.tar.bz2 +sha256sums="26d0717669a098f18cd22dc3ae8282101d38508054500c26775ddcc26ca7c826 php-5.4.32.tar.bz2 96e68f7c545adcac56ed1f5824b33041e270680ca884a9cfe27e7f4ac8abfd3b php-fpm.initd ceec4d5b2a128c6a97e49830af604f0bb555bca1a86a9cd0366b828ba392257f php5-module.conf f739ca427a1dd53a388bad0823565299c5d4a5796b1171b892884e4d7d099bab php-install-pear-xml.patch acbbc559063e04f69b3c481af007c00541846750c7d47a6daeb72b22c1b793fe gd-iconv.patch" -sha512sums="02e1fdc49420cdf3611503e3f65ad7272fe069f9a3be4edad8ad142bed42658cef25e97dbdab4e99a3f85874505e47dafd15bfe008663e31ad5fcb78e0929a17 php-5.4.30.tar.bz2 +sha512sums="a2bf1c4977bfb36502163f5fd1ba81b6d7ac2a99f77c7e584761efbd6bbbc3ba0ec493ccc5bf61d78f956c8666b84b1b4bbfbbb778d2834541b47a9a5cfd63e0 php-5.4.32.tar.bz2 33247a1c9188eba893bb0be13456eeeec9b971c7f482a4e2bd0f318fb63d8c67d379a021840768bef8e4d630be859c5bdb424c1e90b9b816ec691c078147e915 php-fpm.initd 895e94c791bd82060ad820fef049d366a09c932097faa6b7b9a2c2e9e00a18cb7c0f9b128679c7659b404379266fd0f95dba5c0333f626194cf60f7bf6044102 php5-module.conf f1177cbf6b1f44402f421c3d317aab1a2a40d0b1209c11519c1158df337c8945f3a313d689c939768584f3e4edbe52e8bd6103fb6777462326a9d94e8ab1f505 php-install-pear-xml.patch |