-
5ff4275...
by
Leonidas S. Barbosa
on 2020-02-12
-
Import patches-unapplied version 7.3.11-0ubuntu0.19.10.3 to ubuntu/eoan-security
Imported using git-ubuntu import.
Changelog parent: ca8adb32696de687f37894f2acc7823f2665092c
New changelog entries:
* SECURITY UPDATE: Out of bounds read, buffer overflow and
heap use-after-free
- debian/patches/CVE-2020-7059-and-CVE-2020-7060.patch:
fix OOB read in php_strip_tags_ex in ext/standard/string.c
and added test ext/standard/tests/file/bug79099.phpt,
fix adding a check function
is_in_cp950_pua in ext/mbstring/libmbfl/filters/mbfilter_big5.c
and added test ext/mbstring/tests/bug79037.phpt,
fix use-after-free in session_create_id() and
added tests ext/session/tests/bug79091.phpt.
- CVE-2020-7059
- CVE-2020-7060
-
ca8adb3...
by
Leonidas S. Barbosa
on 2020-01-14
-
Import patches-unapplied version 7.3.11-0ubuntu0.19.10.2 to ubuntu/eoan-security
Imported using git-ubuntu import.
Changelog parent: d638c41601cc89764c14e377dca77de7efe02ce7
New changelog entries:
* SECURITY UPDATE: silently truncates
a class after a null byte
- debian/patches/CVE-2019-11045.patch: not accept
arbitrary strings in ext/spl/spl_directory.c,
ext/spl/tests/bug78863.phpt.
- CVE-2019-11045
* SECURITY UPDATE: Buffer underflow
- debian/patches/CVE-2019-11046.patch: not rely on `isdigit()`
to detect digits in ext/bcmath/libbcmath/src/str2num.c,
ext/bcmath/tests/bug78878.phpt.
- CVE-2019-11046
* SECURITY UPDATE: Heap-buffer-overflow
- debian/patches/CVE-2019-11047.patch: fix in ext/exif/exif.c,
ext/exif/tests/bug78910.phpt.
- CVE-2019-11047
* SECURITY UPDATE: Use-after-free
- debian/patches/CVE-2019-11050.patch: fix in
ext/exif/exif.c, ext/exif/tests/bug78793.phpt.
- CVE-2019-11050
* Fixing tests bug54291 and bug78878
- debian/patches/Fixing-test-bug54291.patch: fix in
ext/spl/tests/bug54291.phpt.
- debian/patches/Fixing-test-78878.patch: fix in
ext/bcmath/tests/bug78878.phpt
-
d638c41...
by
Marc Deslauriers
on 2019-10-24
-
Import patches-unapplied version 7.3.11-0ubuntu0.19.10.1 to ubuntu/eoan-security
Imported using git-ubuntu import.
Changelog parent: f8625b9b257767343b857fe4c50b27f27c9e269f
New changelog entries:
* SECURITY UPDATE: updated to 7.3.11 to fix security issue
- CVE-2019-11043
* Refreshed patches.
* debian/rules: temporarily disable setting up MySQL for the tests as the
setup script isn't compatible with MySQL 8.0 and the MySQL tests didn't
seem to run anyway.
-
f8625b9...
by
Ondřej Surý
on 2019-08-07
-
Import patches-unapplied version 7.3.8-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 236f80630dc9f132dbd1bc607137f184cdbe3f5a
New changelog entries:
* New upstream version 7.3.8
* Rebase patches for PHP 7.3.8
* Add patch that reverts the break in symfony framework
* New upstream version 7.3.7
-
236f806...
by
Ondřej Surý
on 2019-05-31
-
Import patches-unapplied version 7.3.6-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 251c7a805b20f566429153055094c803c43c72fa
New changelog entries:
[ Ondřej Surý ]
* New upstream version 7.3.6
[ Andreas Beckmann ]
* php7.3-curl: Add Breaks against php7.0-curl for smoother upgrades from stretch. (Closes: #929689)
* New upstream version 7.3.5
-
251c7a8...
by
Ondřej Surý
on 2019-04-13
-
Import patches-unapplied version 7.3.4-2 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 4da47136d7e3e501d6b9cd9d45caf829b2ac9bda
New changelog entries:
[Andreas Beckmann]
* php7.3-common: Add Breaks against php7.0-curl for smoother upgrades from
stretch. (Closes: #925106)
* php7.3-common: Add Breaks against gforge-common from jessie which uses a
deprecated constructor syntax.
* Deterministically generate debian/control by sorting the extension
packages.
-
4da4713...
by
Ondřej Surý
on 2019-04-10
-
Import patches-unapplied version 7.3.4-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 3a31399f5825e0f5fae4f928abe92a706467a55a
New changelog entries:
* Update d/watch for new php.net pages
* New upstream version 7.3.4
* Enforce C++11 for intl compilation on older distributions
-
3a31399...
by
Ondřej Surý
on 2019-03-07
-
Import patches-unapplied version 7.3.3-1 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 78dd3280c535497ed868137200be5e8ab4df3553
New changelog entries:
* New upstream version 7.3.3
* Update systzdata patch to v18 (Courtesy of RemiRepo)
* Add patch for OpenSSL 1.1.1b (Courtesy of RemiRepo)
-
78dd328...
by
Ondřej Surý
on 2019-02-08
-
Import patches-unapplied version 7.3.2-3 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 91b07985294387c5cf0a04d3082747be65b2167e
New changelog entries:
* Update systzdata patch to v17 (Courtesy of remirepo)
-
91b0798...
by
Ondřej Surý
on 2019-02-08
-
Import patches-unapplied version 7.3.2-2 to debian/sid
Imported using git-ubuntu import.
Changelog parent: 2e31571a8a2c04bdb8bc0652608191a000e32217
New changelog entries:
* Fix the icu patch condition for icu >= 60
