4cc46b2a99
Add CVE used in PHP 5.4.39, 5.4.40, 5.4.41
2015-06-08 22:12:42 +03:00
90a8ea9827
Add CVE to #68598
2015-06-08 22:04:42 +03:00
0765623d69
improve fix for Bug #69545
2015-05-31 17:29:00 -07:00
f38ca75a3c
Update PCRE version (bug #69689 )
2015-05-30 21:17:16 -07:00
88aab478bf
move test
2015-05-20 14:03:41 +02:00
593c4b9b00
NEWS 5.4
2015-05-20 08:47:04 +02:00
3ee3066bd0
fix new test
2015-05-20 08:46:14 +02:00
f93d24aa67
Fixed Bug #69667 segfault in php_pgsql_meta_data
...
Incomplete fix for #68741
2015-05-20 08:46:01 +02:00
4ceb7b46ad
5.4.42 next
2015-05-12 22:30:43 -07:00
f473ea5464
fix format
2015-05-12 12:37:28 -07:00
2f83797a0c
update NEWS
2015-05-12 12:17:54 -07:00
9c0813fd48
Add test for bug #69522
2015-05-11 01:10:35 -07:00
634aa0a2db
Update tests
2015-05-11 00:12:39 -07:00
ba1d9cc4b7
Fix bug #69522 - do not allow int overflow
2015-05-10 23:06:08 -07:00
e2bbf0a2df
Forgot test file
2015-05-10 02:24:29 -07:00
c591f022f8
Fix bug #69403 and other int overflows
2015-05-10 02:20:08 -07:00
be9b2a95ad
Fixed bug #69418 - more s->p fixes for filenames
2015-05-10 02:09:38 -07:00
4605d536d2
Fixed bug #69364 - use smart_str to assemble strings
2015-05-09 23:04:25 -07:00
c27f012b7a
Fix bug #69453 - don't try to cut empty string
2015-04-29 22:51:43 -07:00
ac28329354
Fix bug #69545 - avoid overflow when reading list
2015-04-29 22:50:18 -07:00
95fa727992
Upgrade to PCRE 8.37 due to various bugfixes
2015-04-29 22:27:07 -07:00
9c5c3ff022
fix VC9 build with PCRE
2015-04-28 13:15:39 +02:00
23917b451b
Upgrade PCRE to 8.36, it fixes some crashes
...
We probably will need to go to 8.37 once it is released.
2015-04-27 23:16:54 -07:00
983f155e1c
phpweb now publishes SHA256s -- and please don't cc php-announce@ - make it seperate mail
2015-04-17 10:05:32 -07:00
0d562a8f44
Fixed res leak
2015-04-14 21:15:50 -07:00
cee9722028
Fixed recently introduced memory leak
2015-04-14 11:08:38 -07:00
9af582bbe0
fix non-standard C
2015-04-14 00:46:47 -07:00
e10272c628
5.4.41 next
2015-04-14 00:30:58 -07:00
d3aeb8a204
Merge branch 'PHP-5.4.40' into PHP-5.4
...
* PHP-5.4.40:
update NEWS
Fix bug #69441 (Buffer Overflow when parsing tar/zip/phar in phar_set_inode)
fix memory leak & add test
Fix tests
fix CVE num
Fix bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability)
Fix test
Additional fix for bug #69324
More fixes for bug #69152
Fixed bug #69353 (Missing null byte checks for paths in various PHP extensions)
Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar)
Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
2015-04-14 00:26:53 -07:00
ae46d1ce19
fix CVE num
2015-04-14 00:25:55 -07:00
d734e75599
update NEWS
2015-04-14 00:22:09 -07:00
aa2eca2e48
Merge branch 'PHP-5.4' into PHP-5.4.40
...
* PHP-5.4:
fix CVE num
2015-04-14 00:08:57 -07:00
f59b67ae50
Fix bug #69441 (Buffer Overflow when parsing tar/zip/phar in phar_set_inode)
2015-04-14 00:03:50 -07:00
ff70b40dc9
fix type in fix for #69085
2015-04-13 14:41:39 +02:00
45facd15fb
fix memory leak & add test
2015-04-12 22:38:34 -07:00
a643ccfb90
Fix tests
2015-04-12 20:55:35 -07:00
9bed19a1e0
fix CVE num
2015-04-12 20:47:27 -07:00
d82d68742c
Fix bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability)
2015-04-12 01:30:33 -07:00
1defbb25ed
Fix test
2015-04-12 00:56:02 -07:00
12d3bdee3d
Additional fix for bug #69324
...
Not so happy about duplication but needed due to bug #69429
2015-04-11 16:53:22 -07:00
a894a8155f
More fixes for bug #69152
2015-04-11 16:53:22 -07:00
4435b9142f
Fixed bug #69353 (Missing null byte checks for paths in various PHP extensions)
2015-04-11 16:53:22 -07:00
9faaee66fa
Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar)
2015-04-11 16:53:21 -07:00
0ea75af9be
Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER)
2015-04-11 16:53:21 -07:00
809610f5ea
Fix bug #68486 and bug #69218 (segfault in apache2handler with apache 2.4)
2015-04-11 16:53:21 -07:00
f938112c49
Fix bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault)
2015-04-11 16:53:21 -07:00
920a0afbf8
Fixed bug #68901 (use after free)
2015-04-11 16:28:07 -07:00
9a404df382
Fixed bug #68740 (NULL Pointer Dereference)
...
(cherry picked from commit 124fb22a13
2015-04-05 22:48:10 -07:00
5ae20c6247
Fix bug #66550 (SQLite prepared statement use-after-free)
2015-04-05 22:36:26 -07:00
bd31cb7563
Better fix for #68601 for perf
...
https://bitbucket.org/libgd/gd-libgd/commits/81e9a993f2893d651d225646378e3fd1b7465467
2015-04-05 17:36:47 -07:00
Lior Kaplan