[packages/php] up to 5.3.23; fixes for CVE-2013-1643 and CVE-2013-1635
glen
glen at pld-linux.org
Tue Mar 19 17:15:07 CET 2013
commit c98ae78e2dae5935ffec4657941ee1ed2a436001
Author: Elan Ruusamäe <glen at delfi.ee>
Date: Tue Mar 19 17:54:32 2013 +0200
up to 5.3.23; fixes for CVE-2013-1643 and CVE-2013-1635
php.spec | 6 +++---
suhosin.patch | 31 -------------------------------
2 files changed, 3 insertions(+), 34 deletions(-)
---
diff --git a/php.spec b/php.spec
index 121307c..079691a 100644
--- a/php.spec
+++ b/php.spec
@@ -118,7 +118,7 @@ ERROR: You need to select at least one Apache SAPI to build shared modules.
%define php_suffix %{nil}
%endif
-%define rel 2
+%define rel 1
Summary: PHP: Hypertext Preprocessor
Summary(fr.UTF-8): Le langage de script embarque-HTML PHP
Summary(pl.UTF-8): Język skryptowy PHP
@@ -126,13 +126,13 @@ Summary(pt_BR.UTF-8): A linguagem de script PHP
Summary(ru.UTF-8): PHP Версии 5 - язык препроцессирования HTML-файлов, выполняемый на сервере
Summary(uk.UTF-8): PHP Версії 5 - мова препроцесування HTML-файлів, виконувана на сервері
Name: %{orgname}%{php_suffix}
-Version: 5.3.22
+Version: 5.3.23
Release: %{rel}%{?with_type_hints:.th}%{?with_oci8:.oci}
Epoch: 4
License: PHP
Group: Libraries
Source0: http://www.php.net/distributions/%{orgname}-%{version}.tar.bz2
-# Source0-md5: bf351426fc7f97aa13914062958a6100
+# Source0-md5: ab7bd1dd3bbc8364cb9fcaa2d79fb502
Source2: %{orgname}-mod_%{orgname}.conf
Source3: %{orgname}-cgi-fcgi.ini
Source4: %{orgname}-apache.ini
diff --git a/suhosin.patch b/suhosin.patch
index b561e63..2a22f75 100644
--- a/suhosin.patch
+++ b/suhosin.patch
@@ -4504,37 +4504,6 @@ diff -Nura php-5.3.9/Zend/zend_variables.c suhosin-patch-5.3.9-0.9.10/Zend/zend_
break;
case IS_ARRAY:
case IS_CONSTANT_ARRAY:
-diff -Nura php-5.3.9/configure suhosin-patch-5.3.9-0.9.10/configure
---- php-5.3.9/configure 2012-01-10 14:37:04.000000000 +0100
-+++ suhosin-patch-5.3.9-0.9.10/configure 2012-01-11 19:29:07.000000000 +0100
-@@ -19371,6 +19371,9 @@
-
- fi
-
-+cat >> confdefs.h <<\EOF
-+#define SUHOSIN_PATCH 1
-+EOF
-
- echo $ac_n "checking for declared timezone""... $ac_c" 1>&6
- echo "configure:19377: checking for declared timezone" >&5
-@@ -115830,7 +115833,7 @@
- php_ini.c SAPI.c rfc1867.c php_content_types.c strlcpy.c \
- strlcat.c mergesort.c reentrancy.c php_variables.c php_ticks.c \
- network.c php_open_temporary_file.c php_logos.c \
-- output.c getopt.c; do
-+ output.c getopt.c suhosin_patch.c ; do
-
- IFS=.
- set $ac_src
-@@ -116034,7 +116037,7 @@
- zend_list.c zend_indent.c zend_builtin_functions.c zend_sprintf.c \
- zend_ini.c zend_qsort.c zend_multibyte.c zend_ts_hash.c zend_stream.c \
- zend_iterators.c zend_interfaces.c zend_exceptions.c zend_strtod.c zend_gc.c \
-- zend_closures.c zend_float.c; do
-+ zend_closures.c zend_float.c zend_canary.c zend_alloc_canary.c ; do
-
- IFS=.
- set $ac_src
diff -Nura php-5.3.9/configure.in suhosin-patch-5.3.9-0.9.10/configure.in
--- php-5.3.9/configure.in 2012-01-10 12:21:57.000000000 +0100
+++ suhosin-patch-5.3.9-0.9.10/configure.in 2012-01-11 19:29:07.000000000 +0100
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/php.git/commitdiff/c98ae78e2dae5935ffec4657941ee1ed2a436001
More information about the pld-cvs-commit
mailing list