php: security bump to version 5.6.21

Fixes (CVEs not assigned yet):
bug #72094 - Out of bounds heap read access in exif header processing
bug #71912 - libgd: signedness vulnerability
bug #72061 - Out-of-bounds reads in zif_grapheme_stripos with negative offset
bug #71843 - null ptr deref ZEND_RETURN_SPEC_CONST_HANDLER
bug #71952 - Corruption inside imageaffinematrixget

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

diff --git a/package/php/php.hash b/package/php/php.hash
index e359bf7cd32d61a65e42428fb4b107fbd4e8edf8..4feb3ca210c1418bc24614050f1c7f4587fbc807 100644 (file)
--- a/package/php/php.hash
+++ b/package/php/php.hash
@@ -1,2 +1,2 @@
 # From http://php.net/downloads.php
-sha256 2b87d40213361112af49157a435e0d4cdfd334c9b7c731c8b844932b1f444e7a        php-5.6.20.tar.xz
+sha256 566ff1a486cb0485ed477a91ea292423f77a58671270ff73b74e67e3ce7084f9        php-5.6.21.tar.xz

diff --git a/package/php/php.mk b/package/php/php.mk
index 1c920607b1d2d1aa37372163857151da8e9f6a3c..d58c4fd1a53281abb0f8327f5072c60f0bc9e20b 100644 (file)
--- a/package/php/php.mk
+++ b/package/php/php.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PHP_VERSION = 5.6.20
+PHP_VERSION = 5.6.21
 PHP_SITE = http://www.php.net/distributions
 PHP_SOURCE = php-$(PHP_VERSION).tar.xz
 PHP_INSTALL_STAGING = YES