[packages/php/PHP_5_3] - rel 22; fix php bug 68486 visible under apache 2.4

arekm arekm at pld-linux.org
Fri Oct 2 08:47:51 CEST 2015


commit 0e621d01c58ebdf2f8cb31ec17fd2cc432dbf89f
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Fri Oct 2 08:47:44 2015 +0200

    - rel 22; fix php bug 68486 visible under apache 2.4

 php-bug-68486.patch | 33 +++++++++++++++++++++++++++++++++
 php.spec            |  6 ++++--
 2 files changed, 37 insertions(+), 2 deletions(-)
---
diff --git a/php.spec b/php.spec
index 0e1e4c0..f9f4b3f 100644
--- a/php.spec
+++ b/php.spec
@@ -117,7 +117,7 @@ ERROR: You need to select at least one Apache SAPI to build shared modules.
 %endif
 %endif
 
-%define		rel	21
+%define		rel	22
 %define		orgname	php
 %define		ver_suffix 53
 %define		php_suffix %{!?with_default_php:%{ver_suffix}}
@@ -217,8 +217,9 @@ Patch70:	mysql-lib-ver-mismatch.patch
 # git diff php-5.3.29..PHP-5.6 ./ext/fileinfo/Makefile.frag >> ~/rpm/packages/php/php-fileinfo.patch
 # git diff php-5.3.29..PHP-5.6 ./ext/fileinfo/data_file.c >> ~/rpm/packages/php/php-fileinfo.patch
 Patch71:	php-fileinfo.patch
+# Patch71-md5:  771e4934132c5f5c968248c954d1ef6e
 Patch72:	x32-suhosin.patch
-# Patch71-md5:	771e4934132c5f5c968248c954d1ef6e
+Patch73:	php-bug-68486.patch
 # Fixes for security bugs
 # https://repo.webtatic.com/yum/centos/5/SRPMS/repoview/php.html
 # also from RHEL6/CentOS7
@@ -2085,6 +2086,7 @@ gzip -dc %{SOURCE15} | tar xf - -C sapi/
 %patch67 -p1
 %patch70 -p1
 %patch71 -p1
+%patch73 -p1
 
 %patch220 -p1
 
diff --git a/php-bug-68486.patch b/php-bug-68486.patch
new file mode 100644
index 0000000..5048140
--- /dev/null
+++ b/php-bug-68486.patch
@@ -0,0 +1,33 @@
+commit af1cd45d171fbb06712f846cec7bf69438db8ec2
+Author: Stanislav Malyshev <stas at php.net>
+Date:   Sat Apr 4 15:03:46 2015 -0700
+
+    Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
+
+diff --git a/NEWS b/NEWS
+index 9c8e0ec..75aa306 100644
+--- a/NEWS
++++ b/NEWS
+@@ -2,6 +2,10 @@ PHP                                                                        NEWS
+ |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
+ ?? ??? 2015 PHP 5.4.40
+ 
++- Apache2 Handler SAPI:
++  . Fixed bug #69218 (potential remote code execution with apache 2.4
++    apache2handler). (Patrick Schaaf)
++
+ - Fileinfo:
+   . Fixed bug #68819 (Fileinfo on specific file causes spurious OOM and/or 
+     segfault). (Anatol Belski))
+diff --git a/sapi/apache2handler/sapi_apache2.c b/sapi/apache2handler/sapi_apache2.c
+index e97f11c..cfebc5f 100644
+--- a/sapi/apache2handler/sapi_apache2.c
++++ b/sapi/apache2handler/sapi_apache2.c
+@@ -688,6 +688,7 @@ zend_first_try {
+ } zend_end_try();
+ 		}
+ 		apr_brigade_cleanup(brigade);
++		apr_pool_cleanup_run(r->pool, (void *)&SG(server_context), php_server_context_cleanup);
+ 	} else {
+ 		ctx->r = parent_req;
+ 	}
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/php.git/commitdiff/0e621d01c58ebdf2f8cb31ec17fd2cc432dbf89f



More information about the pld-cvs-commit mailing list