20 |
Summary: PHP scripting language for creating dynamic web sites |
Summary: PHP scripting language for creating dynamic web sites |
21 |
Name: php |
Name: php |
22 |
Version: 5.3.3 |
Version: 5.3.3 |
23 |
Release: 15%{?dist} |
Release: 16%{?dist} |
24 |
License: PHP and LGPLv2 and LGPLv2+ |
License: PHP and LGPLv2 and LGPLv2+ |
25 |
Group: Development/Languages |
Group: Development/Languages |
26 |
URL: http://www.php.net/ |
URL: http://www.php.net/ |
115 |
Patch244: php-5.3.3-CVE-2013-6712.patch |
Patch244: php-5.3.3-CVE-2013-6712.patch |
116 |
Patch245: php-5.3.3-CVE-2014-4049.patch |
Patch245: php-5.3.3-CVE-2014-4049.patch |
117 |
Patch246: php-5.3.3-CVE-2014-3515.patch |
Patch246: php-5.3.3-CVE-2014-3515.patch |
118 |
|
Patch247: php-5.3.3-CVE-2014-2497.patch |
119 |
|
Patch248: php-5.3.3-CVE-2014-3587.patch |
120 |
|
Patch249: php-5.3.3-CVE-2014-3597.patch |
121 |
|
Patch250: php-5.3.3-CVE-2014-4698.patch |
122 |
|
Patch251: php-5.3.3-CVE-2014-4670.patch |
123 |
|
|
124 |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
125 |
|
|
490 |
%patch244 -p1 -b .cve6712 |
%patch244 -p1 -b .cve6712 |
491 |
%patch245 -p1 -b .cve4049 |
%patch245 -p1 -b .cve4049 |
492 |
%patch246 -p1 -b .cve3515 |
%patch246 -p1 -b .cve3515 |
493 |
|
%patch247 -p1 -b .cve2497 |
494 |
|
%patch248 -p1 -b .cve3587 |
495 |
|
%patch249 -p1 -b .cve3597 |
496 |
|
%patch250 -p1 -b .cve4698 |
497 |
|
%patch251 -p1 -b .cve4670 |
498 |
|
|
499 |
# Prevent %%doc confusion over LICENSE files |
# Prevent %%doc confusion over LICENSE files |
500 |
cp -p Zend/LICENSE Zend/ZEND_LICENSE |
cp -p Zend/LICENSE Zend/ZEND_LICENSE |
874 |
%files process -f files.process |
%files process -f files.process |
875 |
|
|
876 |
%changelog |
%changelog |
877 |
|
* Sat Oct 18 2014 Daniel Berteaud <daniel@firewall-services.com> - 5.3.3-16.sme |
878 |
|
- Resync with upstream php53, which include (see [SME: 8574]) |
879 |
|
- spl: fix use-after-free in ArrayIterator due to object |
880 |
|
change during sorting. CVE-2014-4698 |
881 |
|
- spl: fix use-after-free in SPL Iterators. CVE-2014-4670 |
882 |
|
- gd: fix NULL pointer dereference in gdImageCreateFromXpm. |
883 |
|
CVE-2014-2497 |
884 |
|
- fileinfo: fix incomplete fix for CVE-2012-1571 in |
885 |
|
cdf_read_property_info. CVE-2014-3587 |
886 |
|
- core: fix incomplete fix for CVE-2014-4049 DNS TXT |
887 |
|
record parsing. CVE-2014-3597 |
888 |
|
|
889 |
* Thu Aug 7 2014 Daniel Berteaud <daniel@firewall-services.com> - 5.3.3-15.sme |
* Thu Aug 7 2014 Daniel Berteaud <daniel@firewall-services.com> - 5.3.3-15.sme |
890 |
- Resync with upstream php53, which include (see [SME: 8515]) |
- Resync with upstream php53, which include (see [SME: 8515]) |
891 |
- core: type confusion issue in phpinfo(). CVE-2014-4721 |
- core: type confusion issue in phpinfo(). CVE-2014-4721 |