rottame
committed
5 months ago
(revision 10)
- restore old apxs2 in 15.5
rottame
committed
5 months ago
(revision 9)
- fix build on 15.6
rottame
committed
9 months ago
(revision 8)
- add dependency on gettext-tools to -devel package
rottame
committed
9 months ago
(revision 7)
- set session.save_path to /tmp
rottame
committed
over 1 year ago
(revision 6)
- add provides php-cli(vhng)
rottame
committed
over 1 year ago
(revision 5)
- fix missing versions
rottame
committed
over 1 year ago
(revision 4)
- vhng versioning
rottame
committed
over 1 year ago
(revision 3)
- fix error in spec
rottame
committed
over 1 year ago
(revision 2)
- normalize ini names
rottame
committed
almost 2 years ago
(revision 1)
* Included several patches. Webtatic, thank you for porting back.
- php-5.3.3-CVE-2014-2497.patch CVE-2014-2497 bug#880905
#66901 php-gd 'c_color' NULL pointer dereference
- php-5.3.3-CVE-2014-3587.patch CVE-2014-3587
Bug #67716. Prevent wrap around
- php-5.3.29-CVE-2014-3597.patch CVE-2014-3597 bnc#8938498
Bug #67717.
Multiple buffer overflows in the php_parserr function in
ext/standard/dns.c
- php-5.3.3-CVE-2014-4698.patch CVE-2014-4698 bnc#886059
Bug #67539 ArrayIterator use-after-free due to object
- php-5.3.3-CVE-2014-4670.patch CVE-2014-4670 bnc#885961
Bug #67538 (SPL Iterators use-after-free)
- php-5.3.3-CVE-2014-3668.patch CVE-2014-3668 bnc#902368
Bug #68027 - fix date parsing in XMLRPC lib
- php-5.3.3-CVE-2014-3669.patch CVE-2014-3669 bnc#902360
Bug #68044: Integer overflow in unserialize() (32-bits only)
- php-5.3.3-CVE-2014-3670.patch CVE-2014-3670 bnc#902368
Bug #68113 (Heap corruption in exif_thumbnail())
- php-5.3.3-CVE-2014-3710.patch CVE-2014-3710 bnc#902367
Bug #68283: fileinfo: out-of-bounds read in elf note
- php-5.3.29-CVE-2014-8142.patch CVE-2014-8142 bnc#907519
Bug #68594: Use-after-free vulnerability in the process_nested_data
function
- php-5.3.29-CVE-2015-0231.patch CVE-2015-0231 bnc#911664
Bug #68710 Use after free vulnerability in unserialize()
(bypassing the CVE-2014-8142 fix)
- php-5.3.29-CVE-2015-0232.patch CVE-2015-0232 bnc#914690
Bug #68799 The exif_process_unicode function allows remote attackers to
execute arbitrary code or cause a denial of service