Revisions of php5 (10)
rottame
committed
over 1 year ago
(revision 1)
* Included several patches. Webtatic, thank you for porting back. - php-5.3.3-CVE-2014-2497.patch CVE-2014-2497 bug#880905 #66901 php-gd 'c_color' NULL pointer dereference - php-5.3.3-CVE-2014-3587.patch CVE-2014-3587 Bug #67716. Prevent wrap around - php-5.3.29-CVE-2014-3597.patch CVE-2014-3597 bnc#8938498 Bug #67717. Multiple buffer overflows in the php_parserr function in ext/standard/dns.c - php-5.3.3-CVE-2014-4698.patch CVE-2014-4698 bnc#886059 Bug #67539 ArrayIterator use-after-free due to object - php-5.3.3-CVE-2014-4670.patch CVE-2014-4670 bnc#885961 Bug #67538 (SPL Iterators use-after-free) - php-5.3.3-CVE-2014-3668.patch CVE-2014-3668 bnc#902368 Bug #68027 - fix date parsing in XMLRPC lib - php-5.3.3-CVE-2014-3669.patch CVE-2014-3669 bnc#902360 Bug #68044: Integer overflow in unserialize() (32-bits only) - php-5.3.3-CVE-2014-3670.patch CVE-2014-3670 bnc#902368 Bug #68113 (Heap corruption in exif_thumbnail()) - php-5.3.3-CVE-2014-3710.patch CVE-2014-3710 bnc#902367 Bug #68283: fileinfo: out-of-bounds read in elf note - php-5.3.29-CVE-2014-8142.patch CVE-2014-8142 bnc#907519 Bug #68594: Use-after-free vulnerability in the process_nested_data function - php-5.3.29-CVE-2015-0231.patch CVE-2015-0231 bnc#911664 Bug #68710 Use after free vulnerability in unserialize() (bypassing the CVE-2014-8142 fix) - php-5.3.29-CVE-2015-0232.patch CVE-2015-0232 bnc#914690 Bug #68799 The exif_process_unicode function allows remote attackers to execute arbitrary code or cause a denial of service