From 039db88c6b500bbc1863e11a1141f12b1842af82 Mon Sep 17 00:00:00 2001 From: Gustavo Zacarias Date: Fri, 1 Apr 2016 09:02:19 -0300 Subject: php: security bump to version 5.6.20 Fixes (no CVEs yet): Buffer over-write in finfo_open with malformed magic file. Invalid memory write in phar on filename with \0 in name. Parsing of tar file with duplicate filenames causes memory leak. php_snmp_error() Format String Vulnerability. Integer Overflow in php_raw_url_encode. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni --- package/php/php.hash | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package/php/php.hash') diff --git a/package/php/php.hash b/package/php/php.hash index 9cfbcad65..e359bf7cd 100644 --- a/package/php/php.hash +++ b/package/php/php.hash @@ -1,2 +1,2 @@ # From http://php.net/downloads.php -sha256 bb32337f93a00b71789f116bddafa8848139120e7fb6f4f98a84f52dbcb8329f php-5.6.19.tar.xz +sha256 2b87d40213361112af49157a435e0d4cdfd334c9b7c731c8b844932b1f444e7a php-5.6.20.tar.xz -- cgit v1.2.3