php: security bump to version 5.5.20
authorGustavo Zacarias <gustavo@zacarias.com.ar>
Thu, 18 Dec 2014 18:04:27 +0000 (15:04 -0300)
committerPeter Korsgaard <peter@korsgaard.com>
Thu, 18 Dec 2014 21:54:04 +0000 (22:54 +0100)
Fixes:
CVE-2014-8142 - Use after free vulnerability in unserialize()

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/php/php.hash
package/php/php.mk

index 7a2dd700e2aca250f46c6bc3c5f5ccd8064bb2ef..011728967b218a453f699cb7055c8bf3ad90c8b6 100644 (file)
@@ -1,2 +1,2 @@
 # From http://php.net/downloads.php
-md5    c63dcfd8b318d12127ba6d39ecc8a444        php-5.5.19.tar.xz
+md5    51377838dfee2d7bb4715674ac715394        php-5.5.20.tar.xz
index 86864f08d000a2b4d34c0b7a61a89f9b2f5f48b9..8c322ec1da55a833de5582ddd4fa1cb3c66fbeb5 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PHP_VERSION = 5.5.19
+PHP_VERSION = 5.5.20
 PHP_SITE = http://www.php.net/distributions
 PHP_SOURCE = php-$(PHP_VERSION).tar.xz
 PHP_INSTALL_STAGING = YES