From 6e6b257d546039b9207cda32e4c281fecba87ae1 Mon Sep 17 00:00:00 2001 From: Adam Duskett Date: Sat, 19 Jan 2019 16:29:34 -0500 Subject: php: security bump to 7.3.1 Fixes the following security issue: - CVE-2018-19935: Allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imap_mail function. https://www.cvedetails.com/cve/CVE-2018-19935/ Signed-off-by: Adam Duskett Signed-off-by: Peter Korsgaard --- package/php/php.hash | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package/php/php.hash') diff --git a/package/php/php.hash b/package/php/php.hash index c1c6e8c3e9..2cb89e0366 100644 --- a/package/php/php.hash +++ b/package/php/php.hash @@ -1,5 +1,5 @@ # From http://php.net/downloads.php -sha256 7d195cad55af8b288c3919c67023a14ff870a73e3acc2165a6d17a4850a560b5 php-7.3.0.tar.xz +sha256 cfe93e40be0350cd53c4a579f52fe5d8faf9c6db047f650a4566a2276bf33362 php-7.3.1.tar.xz # License file sha256 f689b8fa63bea7950ce6a21bf52ed88ea0d77673ee76e6de12f51191174d91b8 LICENSE -- cgit v1.2.3