php: security bump to version 5.5.23
authorGustavo Zacarias <gustavo@zacarias.com.ar>
Fri, 20 Mar 2015 12:49:51 +0000 (09:49 -0300)
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>
Fri, 20 Mar 2015 13:02:40 +0000 (14:02 +0100)
Fixes:
CVE-2015-0231 - Use After Free Vulnerability in unserialize()
CVE-2015-2305 - heap overflow vulnerability in regcomp.c
CVE-2015-2331 - ZIP Integer Overflow leads to writing past heap boundary

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
package/php/php.hash
package/php/php.mk

index f8a1715f5c0e438cf82e17095860fc0cf580fe0e..0794db8991d43c8704fced0fdbcf14a36a7948e1 100644 (file)
@@ -1,2 +1,2 @@
 # From http://php.net/downloads.php
-md5    fb1704131d495f5b3e6ab3b087a8dbe6        php-5.5.22.tar.xz
+md5    692f9bc5649806f2053eee1e7323b7ea        php-5.5.23.tar.xz
index b5daeb6b0a4db600a75f094d8899df5f97920587..055bc0b8c711c2970982644652bfc6604e07eda6 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PHP_VERSION = 5.5.22
+PHP_VERSION = 5.5.23
 PHP_SITE = http://www.php.net/distributions
 PHP_SOURCE = php-$(PHP_VERSION).tar.xz
 PHP_INSTALL_STAGING = YES