OpenPOWER buildroot sources https://git.raptorcs.com/git/buildroot/atom?h=2016.02 2016-02-05T22:23:07+00:00 2016-02-05T22:23:07+00:00 Bernd Kuhls bernd.kuhls@t-online.de 2016-02-04T21:16:08+00:00 urn:sha1:b420e0b55983d44e7bad854da5ca00907a77f868 Changelog: http://www.php.net/ChangeLog-5.php#5.6.18 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Acked-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2016-01-08T17:51:46+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2016-01-07T18:46:52+00:00 urn:sha1:2f52641294f187829257d9c2f823cb2ede3f30a0 Bug #70976 (Memory Read via gdImageRotateInterpolated Array Index Out of Bounds). Bug #70755 (fpm_log.c memory leak and buffer overflow). Bug #70661 (Use After Free Vulnerability in WDDX Packet Deserialization). Bug #70741 (Session WDDX Packet Deserialization Type Confusion Vulnerability). Bug #70728 (Type Confusion Vulnerability in PHP_to_XMLRPC_worker()). No CVEs assigned yet. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2015-11-28T13:32:10+00:00 Bernd Kuhls bernd.kuhls@t-online.de 2015-11-28T11:32:20+00:00 urn:sha1:f67ffb437566562be47188097f846ade231daf3c Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-10-31T08:39:01+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-10-30T12:33:32+00:00 urn:sha1:567a7c3dfadbe0304b5990a465000fba130dfa46 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2015-10-02T19:00:50+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-10-02T16:01:22+00:00 urn:sha1:48518f428bb78f8a7b04ff3c780cd48f1c4b1f76 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2015-09-06T08:48:22+00:00 Bernd Kuhls bernd.kuhls@t-online.de 2015-09-05T09:29:25+00:00 urn:sha1:59dda508e59e3603cb58a9737a5b3383301ac66f Link to release announcement: http://php.net/archive/2015.php#id2015-09-04-2 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2015-08-10T13:43:17+00:00 Bernd Kuhls bernd.kuhls@t-online.de 2015-08-09T12:01:21+00:00 urn:sha1:5ccc4c9cf5e3e7377081e61b43253aacf9f3aa97 http://www.php.net/ChangeLog-5.php#5.6.12 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-07-10T23:00:26+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-07-10T11:22:04+00:00 urn:sha1:3ddda416accf7465e048a330f2b458f21600abbe Fixes: CVE-2015-3152 - mysqlnd is vulnerable to BACKRONYM And other security bugs with no CVE assigned yet: Bug #69972 - Use-after-free vulnerability in sqlite3SafetyCheckSickOrOk() Bug # 69970 - Use-after-free vulnerability in spl_recursive_it_move_forward_ex() Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-06-12T19:28:33+00:00 Gustavo Zacarias gustavo@zacarias.com.ar 2015-06-12T19:22:38+00:00 urn:sha1:039bc77719e14164b9d9907ba669e443760e8029 Fixes: CVE-2015-3414, CVE-2015-3415, CVE-2015-3416 (via bundled sqlite upgrade). CVE-2015-2325, CVE-2015-2326 (via bundled pcre upgrade). Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-05-20T11:13:50+00:00 Floris Bos bos@je-eigen-domein.nl 2015-05-18T19:52:03+00:00 urn:sha1:50a34eeb1bf5ff15443bec0f3f11fe90c0e97b70 Signed-off-by: Floris Bos <bos@je-eigen-domein.nl> Acked-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>