Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (1h)  pkgsrc-2024Q1 (10d)  pkgsrc-2023Q4 (57d)  pkgsrc-2023Q2 (89d)  pkgsrc-2023Q3 (169d) 

2024-05-27 22:29:43 UTC Now

2015-08-12 20:07:45 UTC pkgsrc-2015Q2 commitmail json YAML

Pullup ticket #4790 - requested by taca
lang/php54: security update

Revisions pulled up:
- lang/php/phpversion.mk                                        1.106
- lang/php54/distinfo                                          1.62

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sat Aug  8 00:11:29 UTC 2015

  Modified Files:
  pkgsrc/lang/php: pear.mk phpversion.mk
  pkgsrc/lang/php54: distinfo

  Log Message:
  Update phpt54 to 5.4.44.

  06 Aug 2015 PHP 5.4.44

  - Core:
    . Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive
      method calls). (Stas)
    . Fixed bug #69892 (Different arrays compare indentical due to integer key
      truncation). (Nikita)
    . Fixed bug #70121 (unserialize() could lead to unexpected methods execution
      / NULL pointer deref). (Stas)

  - OpenSSL:
    . Fixed bug #70014 (openssl_random_pseudo_bytes() is not cryptographically
      secure). (Stas)

  - Phar:
    . Improved fix for bug #69441. (Anatol Belski)
    . Fixed bug #70019 (Files extracted from archive may be placed outside of
      destination directory). (Anatol Belski)

  - SOAP:
    . Fixed bug #70081 (SoapClient info leak / null pointer dereference via
        multiple type confusions). (Stas)

  - SPL:
    . Fixed bug #70068 (Dangling pointer in the unserialization of ArrayObject
      items). (sean.heelan)
    . Fixed bug #70166 (Use After Free Vulnerability in unserialize() with
      SPLArrayObject). (taoguangchen at icloud dot com)
    . Fixed bug #70168 (Use After Free Vulnerability in unserialize() with
      SplObjectStorage). (taoguangchen at icloud dot com)
    . Fixed bug #70169 (Use After Free Vulnerability in unserialize() with
      SplDoublyLinkedList). (taoguangchen at icloud dot com)

(tron)