20 |
Summary: PHP scripting language for creating dynamic web sites |
Summary: PHP scripting language for creating dynamic web sites |
21 |
Name: php |
Name: php |
22 |
Version: 5.3.3 |
Version: 5.3.3 |
23 |
Release: 16%{?dist} |
Release: 17%{?dist} |
24 |
License: PHP and LGPLv2 and LGPLv2+ |
License: PHP and LGPLv2 and LGPLv2+ |
25 |
Group: Development/Languages |
Group: Development/Languages |
26 |
URL: http://www.php.net/ |
URL: http://www.php.net/ |
120 |
Patch249: php-5.3.3-CVE-2014-3597.patch |
Patch249: php-5.3.3-CVE-2014-3597.patch |
121 |
Patch250: php-5.3.3-CVE-2014-4698.patch |
Patch250: php-5.3.3-CVE-2014-4698.patch |
122 |
Patch251: php-5.3.3-CVE-2014-4670.patch |
Patch251: php-5.3.3-CVE-2014-4670.patch |
123 |
|
Patch252: php-5.3.3-CVE-2014-3668.patch |
124 |
|
Patch253: php-5.3.3-CVE-2014-3669.patch |
125 |
|
Patch254: php-5.3.3-CVE-2014-3670.patch |
126 |
|
Patch255: php-5.3.3-CVE-2014-3710.patch |
127 |
|
|
128 |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
129 |
|
|
499 |
%patch249 -p1 -b .cve3597 |
%patch249 -p1 -b .cve3597 |
500 |
%patch250 -p1 -b .cve4698 |
%patch250 -p1 -b .cve4698 |
501 |
%patch251 -p1 -b .cve4670 |
%patch251 -p1 -b .cve4670 |
502 |
|
%patch252 -p1 -b .cve3668 |
503 |
|
%patch253 -p1 -b .cve3669 |
504 |
|
%patch254 -p1 -b .cve3670 |
505 |
|
%patch255 -p1 -b .cve3710 |
506 |
|
|
507 |
# Prevent %%doc confusion over LICENSE files |
# Prevent %%doc confusion over LICENSE files |
508 |
cp -p Zend/LICENSE Zend/ZEND_LICENSE |
cp -p Zend/LICENSE Zend/ZEND_LICENSE |
882 |
%files process -f files.process |
%files process -f files.process |
883 |
|
|
884 |
%changelog |
%changelog |
885 |
|
* Sat Nov 1 2014 Daniel Berteaud <daniel@firewall-services.com> - 5.3.3-17.sme |
886 |
|
- Resync with upstream php53, which include (see [SME: 8633]) |
887 |
|
- fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710 |
888 |
|
- xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668 |
889 |
|
- core: fix integer overflow in unserialize() CVE-2014-3669 |
890 |
|
- exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670 |
891 |
|
|
892 |
* Sat Oct 18 2014 Daniel Berteaud <daniel@firewall-services.com> - 5.3.3-16.sme |
* Sat Oct 18 2014 Daniel Berteaud <daniel@firewall-services.com> - 5.3.3-16.sme |
893 |
- Resync with upstream php53, which include (see [SME: 8574]) |
- Resync with upstream php53, which include (see [SME: 8574]) |
894 |
- spl: fix use-after-free in ArrayIterator due to object |
- spl: fix use-after-free in ArrayIterator due to object |