[packages/php] up to 7.0.8 - http://php.net/releases/7_0_8.php

glen glen at pld-linux.org
Mon Jun 27 00:25:45 CEST 2016


commit 06b37a2ac1701a1236a8b6b7a4d99e685c4aa698
Author: Elan Ruusamäe <glen at delfi.ee>
Date:   Mon Jun 27 01:23:03 2016 +0300

    up to 7.0.8 - http://php.net/releases/7_0_8.php
    
    - Fixed bug #66387 (Stack overflow with imagefilltoborder).  (CVE-2015-8874)
    - Fixed bug #72339 (Integer Overflow in _gd2GetHeader() resulting in heap overflow). (CVE-2016-5766)
    - Fixed bug #72446 (Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow). (CVE-2016-5767)
    - Fixed bug #72402 (_php_mb_regex_ereg_replace_exec - double free). (CVE-2016-5768)
    - Fixed bug #72455 (Heap Overflow due to integer overflows). (CVE-2016-5769)
    - Fixed bug #72340 (Double Free Courruption in wddx_deserialize). (CVE-2016-5772)
    - Fixed bug #72434 (ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize). (CVE-2016-5773)

 php.spec | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/php.spec b/php.spec
index 4175c5e..7eda0d7 100644
--- a/php.spec
+++ b/php.spec
@@ -143,7 +143,7 @@ Summary(pt_BR.UTF-8):	A linguagem de script PHP
 Summary(ru.UTF-8):	PHP Версии 7 - язык препроцессирования HTML-файлов, выполняемый на сервере
 Summary(uk.UTF-8):	PHP Версії 7 - мова препроцесування HTML-файлів, виконувана на сервері
 Name:		%{orgname}%{php_suffix}
-Version:	7.0.7
+Version:	7.0.8
 Release:	1
 Epoch:		4
 # All files licensed under PHP version 3.01, except
@@ -152,7 +152,7 @@ Epoch:		4
 License:	PHP 3.01 and Zend and BSD
 Group:		Libraries
 Source0:	http://php.net/distributions/%{orgname}-%{version}.tar.xz
-# Source0-md5:	75f8d1693a470cefe2a50abd283eb291
+# Source0-md5:	c4438583c95d3ddf746929d7fcb61045
 Source2:	%{orgname}-mod_php.conf
 Source3:	%{orgname}-cgi-fcgi.ini
 Source4:	%{orgname}-apache.ini
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/php.git/commitdiff/06b37a2ac1701a1236a8b6b7a4d99e685c4aa698



More information about the pld-cvs-commit mailing list