php: security bump to version 5.5.22
authorGustavo Zacarias <gustavo@zacarias.com.ar>
Thu, 19 Feb 2015 14:59:56 +0000 (11:59 -0300)
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>
Thu, 19 Feb 2015 20:27:31 +0000 (21:27 +0100)
Fixes:
CVE-2015-0273 - Use after free vulnerability in unserialize() with
DateTimeZone.
CVE-2015-0235 - Mitigation for GHOST: glibc gethostbyname buffer
overflow.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
package/php/php.hash
package/php/php.mk

index cd27b1020f67428209ac33913c62200149d8290b..f8a1715f5c0e438cf82e17095860fc0cf580fe0e 100644 (file)
@@ -1,2 +1,2 @@
 # From http://php.net/downloads.php
-md5    79664ce44f7c93f355a25a3fe3dcc91b        php-5.5.21.tar.xz
+md5    fb1704131d495f5b3e6ab3b087a8dbe6        php-5.5.22.tar.xz
index 4bcbe1866dff0d4418c89dc461d99ef6ecb101a1..dd52508cc8c9f5601ff78e2f16d6c73821196470 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PHP_VERSION = 5.5.21
+PHP_VERSION = 5.5.22
 PHP_SITE = http://www.php.net/distributions
 PHP_SOURCE = php-$(PHP_VERSION).tar.xz
 PHP_INSTALL_STAGING = YES