Stanislav Malyshev
b1bd4119bc
Fixed bug #71587 - Use-After-Free / Double-Free in WDDX Deserialize
2016-02-14 22:34:39 -08:00
Anatol Belski
377d353c9f
add error check to sysconf call
2016-02-02 14:19:10 +01:00
Julien Pauli
7d875fb9df
Going for 5.5.33 now
2016-02-02 10:42:49 +01:00
Stanislav Malyshev
2a7d8c0a06
fix tests
2016-02-01 18:58:02 -08:00
Stanislav Malyshev
e7051cb47a
fix NEWS
2016-02-01 18:47:56 -08:00
Stanislav Malyshev
0d86a98c31
update NEWS
2016-02-01 18:44:33 -08:00
Stanislav Malyshev
b5ef8ed168
Merge branch 'PHP-5.5' into PHP-5.5.32
...
* PHP-5.5:
Upgrade bundled PCRE to 8.38
Fixed NEWS file entry
2016-02-01 18:28:49 -08:00
Stanislav Malyshev
ca02d9c2d6
Upgrade bundled PCRE to 8.38
2016-01-31 20:37:47 -08:00
Stanislav Malyshev
07c7df68bd
Fixed bug #71488 : Stack overflow when decompressing tar archives
2016-01-31 19:37:56 -08:00
Anatol Belski
a1c675e3f2
update NEWS
2016-01-28 13:57:44 +01:00
Anatol Belski
686a17893a
add missing headers for SIZE_MAX
2016-01-28 13:46:34 +01:00
Anatol Belski
f4d7bbf4ac
backport the escapeshell* functions hardening branch
2016-01-28 13:45:43 +01:00
Anatol Belski
828364e59c
add tests
2016-01-28 13:27:26 +01:00
Julien Pauli
df78eacc2f
Fixed NEWS file entry
2016-01-28 12:47:53 +01:00
Stanislav Malyshev
54c210d2ea
Fix bug #71459 - Integer overflow in iptcembed()
2016-01-26 17:26:52 -08:00
Stanislav Malyshev
6297a117d7
Fixed bug #71323 - Output of stream_get_meta_data can be falsified by its input
2016-01-16 22:10:54 -08:00
Stanislav Malyshev
1c1b8b6998
Fix bug #71391 : NULL Pointer Dereference in phar_tar_setupmetadata()
2016-01-16 20:43:43 -08:00
Stanislav Malyshev
285cd3417f
Fix bug #71335 : Type Confusion in WDDX Packet Deserialization
2016-01-13 16:43:04 -08:00
Stanislav Malyshev
635ba1f2c3
Merge branch 'bug71354' into PHP-5.5.32
...
* bug71354:
Fix bug #71354 - remove UMR when size is 0
2016-01-13 16:33:37 -08:00
Stanislav Malyshev
13ad4d3e97
Fix bug #71354 - remove UMR when size is 0
2016-01-13 16:32:29 -08:00
Remi Collet
aa8d3a8cc6
fix the fix for bug #70976 (imagerotate)
2016-01-12 14:03:35 +01:00
Julien Pauli
a6734f70e1
5.5.32 now
2016-01-07 13:07:23 +01:00
Stanislav Malyshev
74dcbe1299
Update NEWS
2016-01-05 19:28:24 -08:00
Stanislav Malyshev
2baeb167a0
Improve fix for bug #70976
2015-12-28 23:44:14 -08:00
Stanislav Malyshev
dcf3c9761c
Fixed bug #70661 (Use After Free Vulnerability in WDDX Packet Deserialization)
2015-12-28 14:46:35 -08:00
Stanislav Malyshev
1785d2b805
Fixed bug #70741 : Session WDDX Packet Deserialization Type Confusion Vulnerability
2015-12-28 12:44:10 -08:00
Julien Pauli
4df84a648e
Fixed #70728
2015-12-22 17:12:49 +01:00
Stanislav Malyshev
be19dbcb84
Fixed bug #70755 : fpm_log.c memory leak and buffer overflow
2015-12-08 00:10:07 -08:00
Stanislav Malyshev
4bb422343f
Fix bug #70976 : fix boundary check on gdImageRotateInterpolated
2015-12-07 23:33:05 -08:00
Stanislav Malyshev
2e157c5275
typofix
2015-12-06 14:07:39 -08:00
Ferenc Kovacs
f3838a9c35
Merge branch 'pr-1483' into PHP-5.5
...
* pr-1483:
fixup, both catched by nikic
use another character device in this test as /dev/console seems that it is different for lxc containers
the de_DE(iso-8859-1) locale is not available on ubuntu by default, but there is no reason to require that over the utf-8 one
let's try running our testsuite without sudo
2015-10-19 22:44:19 +02:00
Julien Pauli
d7fb43e30d
Fixed test
2015-09-30 13:18:16 +02:00
Julien Pauli
3f08fc0466
5.5.31 now
2015-09-30 13:01:11 +02:00
Ferenc Kovacs
932f707177
add NEWS entries
2015-09-30 01:15:24 +02:00
Stanislav Malyshev
1ddf72180a
Better fix for bug #70433
2015-09-28 21:41:02 -07:00
Stanislav Malyshev
f98ab19dc0
fix memory leak
2015-09-28 20:43:18 -07:00
Stanislav Malyshev
e78ac461db
FIx bug #70433 - Uninitialized pointer in phar_make_dirstream when zip entry filename is "/"
2015-09-28 17:12:35 -07:00
Stanislav Malyshev
d698f0ae51
Fix bug #69720 : Null pointer dereference in phar_get_fp_offset()
2015-09-28 15:56:51 -07:00
Julien Pauli
bb98ed600a
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
Merge branch 'PHP-5.6'
bump version
Conflicts:
configure.in
main/php_version.h
2015-09-02 17:55:20 +02:00
Matteo Beccati
a12cef979d
Merge branch 'PHP-5.6'
...
* PHP-5.6:
Added missing skipif for phar+zlib test
2015-09-02 17:53:36 +02:00
Julien Pauli
ea807f9c07
5.5.30 next
2015-09-02 17:40:56 +02:00
Stanislav Malyshev
51fca4b77d
bump version
2015-09-01 13:12:16 -07:00
Stanislav Malyshev
43c2dfa7b3
Merge branch 'PHP-5.5' into PHP-5.5.29
...
* PHP-5.5:
fix unit tests
2015-09-01 12:24:06 -07:00
Stanislav Malyshev
4aeff30337
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
fix unit tests
2015-09-01 12:23:55 -07:00
Stanislav Malyshev
1922c650ba
fix unit tests
2015-09-01 12:23:22 -07:00
Stanislav Malyshev
32fe02c27d
Merge branch 'PHP-5.5' into PHP-5.5.29
...
* PHP-5.5:
update NEWS
add NEWS for fixes
2015-09-01 12:04:04 -07:00
Stanislav Malyshev
31b634bf7c
update NEWS
2015-09-01 12:03:48 -07:00
Stanislav Malyshev
0fac73a3bf
Merge branch 'PHP-5.4' into PHP-5.5
...
* PHP-5.4:
add NEWS for fixes
2015-09-01 12:00:30 -07:00
Stanislav Malyshev
7ceb0e3a18
add NEWS for fixes
2015-09-01 11:53:59 -07:00
Stanislav Malyshev
53d274beb0
Merge branch 'PHP-5.5' into PHP-5.5.29
...
* PHP-5.5:
Improve fix for #70172
Add CVE IDs asigned (post release) to PHP 5.4.43
Add CVE IDs asigned to #69085 (PHP 5.4.39)
Conflicts:
ext/pcre/php_pcre.c
2015-09-01 11:43:27 -07:00