/[smeserver]/rpms/php/sme8/php-5.3.3-CVE-2013-6712.patch
ViewVC logotype

Annotation of /rpms/php/sme8/php-5.3.3-CVE-2013-6712.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph

Revision 1.1 - (hide annotations) (download)
Thu Aug 7 07:05:52 2014 UTC (9 years, 10 months ago) by vip-ire
Branch: MAIN
CVS Tags: php-5_3_3-17_el5_sme, php-5_3_3-15_el5_sme, php-5_3_3-16_el5_sme, HEAD 
* Thu Aug 7 2014 Daniel Berteaud <daniel@firewall-services.com> - 5.3.3-15.sme
- Resync with upstream php53, which include (see [SME: 8515])
- core: type confusion issue in phpinfo(). CVE-2014-4721
- date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
- core: fix heap-based buffer overflow in DNS TXT record parsing.
  CVE-2014-4049
- core: unserialize() SPL ArrayObject / SPLObjectStorage type
  confusion flaw. CVE-2014-3515
- fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
- fileinfo: unrestricted recursion in handling of indirect type
  rules. CVE-2014-1943
- fileinfo: out of bounds read in CDF parser. CVE-2012-1571
- fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
- fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
- fileinfo: cdf_unpack_summary_info() excessive looping
  DoS. CVE-2014-0237
- fileinfo: CDF property info parsing nelements infinite
  loop. CVE-2014-0238
1 vip-ire 1.1 From 12fe4e90be7bfa2a763197079f68f5568a14e071 Mon Sep 17 00:00:00 2001
2     From: Remi Collet <remi@php.net>
3     Date: Wed, 27 Nov 2013 11:13:16 +0100
4     Subject: [PATCH] Fixed bug #66060 (Heap buffer over-read in DateInterval)
5    
6     ---
7     NEWS | 3 +++
8     ext/date/lib/parse_iso_intervals.c | 4 ++--
9     ext/date/lib/parse_iso_intervals.re | 2 +-
10     3 files changed, 6 insertions(+), 3 deletions(-)
11    
12     diff --git a/ext/date/lib/parse_iso_intervals.c b/ext/date/lib/parse_iso_intervals.c
13     index bd1ad05..480ea38 100644
14     --- a/ext/date/lib/parse_iso_intervals.c
15     +++ b/ext/date/lib/parse_iso_intervals.c
16     @@ -415,7 +415,7 @@ yy6:
17     break;
18     }
19     ptr++;
20     - } while (*ptr);
21     + } while (!s->errors->error_count && *ptr);
22     s->have_period = 1;
23     TIMELIB_DEINIT;
24     return TIMELIB_PERIOD;
25     diff --git a/ext/date/lib/parse_iso_intervals.re b/ext/date/lib/parse_iso_intervals.re
26     index 56aa34d..c5e9f67 100644
27     --- a/ext/date/lib/parse_iso_intervals.re
28     +++ b/ext/date/lib/parse_iso_intervals.re
29     @@ -383,7 +383,7 @@ isoweek = year4 "-"? "W" weekofyear;
30     break;
31     }
32     ptr++;
33     - } while (*ptr);
34     + } while (!s->errors->error_count && *ptr);
35     s->have_period = 1;
36     TIMELIB_DEINIT;
37     return TIMELIB_PERIOD;
38     --
39     1.8.4.3
40    
admin@koozali.org
 ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed