From 039db88c6b500bbc1863e11a1141f12b1842af82 Mon Sep 17 00:00:00 2001 From: Gustavo Zacarias Date: Fri, 1 Apr 2016 09:02:19 -0300 Subject: php: security bump to version 5.6.20 Fixes (no CVEs yet): Buffer over-write in finfo_open with malformed magic file. Invalid memory write in phar on filename with \0 in name. Parsing of tar file with duplicate filenames causes memory leak. php_snmp_error() Format String Vulnerability. Integer Overflow in php_raw_url_encode. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni --- package/php/php.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package/php/php.mk') diff --git a/package/php/php.mk b/package/php/php.mk index 6d27c30864..1c920607b1 100644 --- a/package/php/php.mk +++ b/package/php/php.mk @@ -4,7 +4,7 @@ # ################################################################################ -PHP_VERSION = 5.6.19 +PHP_VERSION = 5.6.20 PHP_SITE = http://www.php.net/distributions PHP_SOURCE = php-$(PHP_VERSION).tar.xz PHP_INSTALL_STAGING = YES -- cgit v1.2.3