5ac5f313bd
Merge branch 'PHP-5.6' into PHP-7.0
2018-04-25 00:13:11 +02:00
fe3d53f443
5.6.37 will be next
2018-04-24 23:23:14 +02:00
090fef553d
7.0.31 next
2018-04-24 11:36:12 +02:00
31c3646757
[ci skip] Update NEWS
2018-04-24 11:21:03 +02:00
3070883bcf
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
Fix test portability
2018-04-24 10:48:22 +02:00
4371af3e19
Fix test portability
2018-04-24 10:47:32 +02:00
5a18d7a0df
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
Fix tsrm_ls
Fix #76129 - remove more potential unfiltered outputs for phar
Fix test
Fix bug #76248 - Malicious LDAP-Server Response causes Crash
Fix bug #76249 - fail on invalid sequences
Fix #76130 : Heap Buffer Overflow (READ: 1786) in exif_iif_add_value
Fix bug #75981 : prevent reading beyond buffer start
2018-04-23 21:59:57 -07:00
ee76a5ae5a
Fix tsrm_ls
2018-04-23 16:48:27 -07:00
58b0003975
Merge remote-tracking branch 'security/bug76249' into PHP-5.6
...
* security/bug76249:
Fix test
Fix bug #76249 - fail on invalid sequences
2018-04-23 13:44:19 -07:00
a4c55eefd0
Merge remote-tracking branch 'security/bug76248' into PHP-5.6
...
* security/bug76248:
Fix bug #76248 - Malicious LDAP-Server Response causes Crash
2018-04-23 13:44:12 -07:00
6e64aba47f
Fix #76129 - remove more potential unfiltered outputs for phar
2018-04-23 13:43:43 -07:00
e2dcf3cc54
Merge remote-tracking branch 'security/PHP-5.6' into PHP-5.6
...
* security/PHP-5.6:
Fix #76130 : Heap Buffer Overflow (READ: 1786) in exif_iif_add_value
Fix bug #75981 : prevent reading beyond buffer start
2018-04-23 13:42:51 -07:00
8dca5ae5ec
Fix test
2018-04-22 22:19:51 -07:00
49782c5499
Fix bug #76248 - Malicious LDAP-Server Response causes Crash
2018-04-22 22:01:35 -07:00
06d309fd7a
Fix bug #76249 - fail on invalid sequences
2018-04-22 21:26:39 -07:00
b4e4788c44
Fix #76130 : Heap Buffer Overflow (READ: 1786) in exif_iif_add_value
...
The MakerNote is not necessarily null-terminated, so we must not use
`strlen()` to avoid OOB reads. Instead `php_strnlen()` is the proper
way to handle this.
2018-04-22 20:15:02 -07:00
01f42b836c
Merge branch 'PHP-5.6' into PHP-7.0
2018-03-28 23:17:59 +02:00
cb981e39c2
[ci skip] 5.6.36 will be next
2018-03-28 23:14:30 +02:00
1e4273d881
[ci skip] Fix release date
2018-03-27 16:02:19 +02:00
48f835efbf
7.0.30 next
2018-03-27 15:00:54 +02:00
ca51458081
[ci skip] Update NEWS
2018-03-27 14:26:06 +02:00
e2b7392b96
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
[ci skip] Update NEWS
2018-03-27 14:25:24 +02:00
2885f62816
[ci skip] Update NEWS
2018-03-27 14:24:43 +02:00
276d19feaa
Do not set PR_SET_DUMPABLE by default
2018-03-27 14:19:36 +02:00
eac822e897
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
Do not set PR_SET_DUMPABLE by default
2018-03-27 14:19:22 +02:00
d20bebfe13
Do not set PR_SET_DUMPABLE by default
2018-03-27 14:18:01 +02:00
c28a6253e5
Merge branch 'PHP-5.6' into PHP-7.0
2018-02-28 00:00:12 +01:00
3db7427b71
5.6.35 is next
2018-02-27 23:57:06 +01:00
c61b56ed00
7.0.29 next
2018-02-27 11:48:49 +01:00
fed294d2a8
[ci skip] Update NEWS
2018-02-27 11:33:40 +01:00
1e0499b095
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
[ci skip] Update NEWS
2018-02-27 11:32:26 +01:00
4698a412bf
[ci skip] Update NEWS
2018-02-27 11:31:37 +01:00
dde7a05978
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
Fix bug #75981 : prevent reading beyond buffer start
2018-02-26 22:26:26 -08:00
523f230c83
Fix bug #75981 : prevent reading beyond buffer start
2018-02-26 22:25:51 -08:00
09a19e778b
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
[ci skip] Set FPM maintainership
2018-02-23 17:57:26 -08:00
1f4b057b63
[ci skip] Set FPM maintainership
...
As per http://news.php.net/php.internals/101897 , Jakub is officially
annointed as new FPM maintainer.
2018-02-23 16:43:10 -08:00
36239fee36
Fix bug #75981 : prevent reading beyond buffer start
2018-02-20 15:44:00 -08:00
e88e83d3e5
Use Z_EXPECTED_LONG to initialize FAST_ZPP parsing loop
2018-01-23 09:24:10 -05:00
27347613fe
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
2018
2018-01-03 15:12:56 +01:00
67ec3ce1ec
2018
2018-01-03 15:12:39 +01:00
1aa8e42036
2018
2018-01-03 15:04:48 +01:00
4888495178
Merge branch 'PHP-5.6' into PHP-7.0
2018-01-03 00:33:20 +01:00
028507f1f6
php 5.6.34 is next
2018-01-03 00:30:58 +01:00
5d8e298ebf
[ci skip] update NEWS
2018-01-02 07:49:09 +01:00
459ab2eef4
Merge branch 'PHP-5.6' into PHP-7.0
...
* PHP-5.6:
Update NEWS
Fixed bug #75571 : Potential infinite loop in gdImageCreateFromGifCtx
Fix bug #74782 : remove file name from output to avoid XSS
2018-01-01 20:28:01 -08:00
2881199c80
Update NEWS
2018-01-01 19:53:00 -08:00
8d6e958867
Fixed bug #75571 : Potential infinite loop in gdImageCreateFromGifCtx
...
Due to a signedness confusion in `GetCode_` a corrupt GIF file can
trigger an infinite loop. Furthermore we make sure that a GIF without
any palette entries is treated as invalid *after* open palette entries
have been removed.
2018-01-01 19:51:26 -08:00
73ca9b3773
Fix bug #74782 : remove file name from output to avoid XSS
2018-01-01 19:51:02 -08:00
e19c71e3d5
[ci skip] update NEWS
2017-12-22 18:22:33 +01:00
da61c7a2a4
Fixed bug #75579 (Interned strings buffer overflow may cause crash)
...
(cherry picked from commit 37bf8bdc14
2017-12-22 18:22:08 +01:00
Ferenc Kovacs