delta/php-git.git - git.php.net: repository/php-src.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Merge branch 'PHP-5.6'PHP-5.4	Matteo Beccati	2015-09-02	1	-0/+2
\| \| \| \| \|	* PHP-5.6: Added missing skipif for phar+zlib test
*	bump version	Stanislav Malyshev	2015-09-01	3	-4/+6
\|
*	fix unit tests	Stanislav Malyshev	2015-09-01	3	-3/+3
\|
*	add NEWS for fixes	Stanislav Malyshev	2015-09-01	1	-1/+35
\|
*	Merge branch 'PHP-5.4.45' into PHP-5.4	Stanislav Malyshev	2015-09-01	24	-877/+1018
\|\ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	* PHP-5.4.45: Improve fix for #70172 Fix bug #70312 - HAVAL gives wrong hashes in specific cases fix test add test Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoublyLinkedList Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObjectStorage Fix bug #70172 - Use After Free Vulnerability in unserialize() Fix bug #70388 - SOAP serialize_function_call() type confusion Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when creating directories Improve fix for #70385 Fix bug #70345 (Multiple vulnerabilities related to PCRE functions) Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes) Fix bug #70219 (Use after free vulnerability in session deserializer) Fix for bug #69782
\| *	Improve fix for #70172	Stanislav Malyshev	2015-09-01	3	-1/+72
\| \|
\| *	Fix bug #70312 - HAVAL gives wrong hashes in specific cases	Stanislav Malyshev	2015-09-01	2	-5/+23
\| \|
\| *	fix test	Stanislav Malyshev	2015-09-01	1	-1/+1
\| \|
\| *	add test	Stanislav Malyshev	2015-09-01	1	-0/+50
\| \|
\| *	Fix bug #70366 - use-after-free vulnerability in unserialize() with ↵	Stanislav Malyshev	2015-09-01	3	-1/+56
\| \| \| \| \| \| \| \|	SplDoublyLinkedList
\| *	Fix bug #70365 - use-after-free vulnerability in unserialize() with ↵	Stanislav Malyshev	2015-09-01	2	-0/+52
\| \| \| \| \| \| \| \|	SplObjectStorage
\| *	Fix bug #70172 - Use After Free Vulnerability in unserialize()	Stanislav Malyshev	2015-08-31	4	-42/+121
\| \|
\| *	Fix bug #70388 - SOAP serialize_function_call() type confusion	Stanislav Malyshev	2015-08-31	2	-44/+69
\| \|
\| *	Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when ↵	Stanislav Malyshev	2015-08-30	2	-39/+72
\| \| \| \| \| \| \| \|	creating directories
\| *	Improve fix for #70385	Stanislav Malyshev	2015-08-29	1	-2/+2
\| \|
\| *	Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)	Stanislav Malyshev	2015-08-28	2	-76/+100
\| \|
\| *	Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte ↵	Stanislav Malyshev	2015-08-28	1	-104/+104
\| \| \| \| \| \| \| \|	value of 32 bytes)
\| *	Fix bug #70219 (Use after free vulnerability in session deserializer)	Stanislav Malyshev	2015-08-23	6	-498/+228
\| \|
\| *	Fix for bug #69782	Stanislav Malyshev	2015-08-16	1	-69/+73
\| \|
* \|	Add CVE IDs asigned (post release) to PHP 5.4.43	Lior Kaplan	2015-08-10	1	-3/+4
\| \|
* \|	Add CVE IDs asigned to #69085 (PHP 5.4.39)	Lior Kaplan	2015-08-10	1	-1/+1
\|/
*	5.4.45 next	Stanislav Malyshev	2015-08-04	3	-5/+7
\|
*	fix test	Stanislav Malyshev	2015-08-04	1	-2/+2
\|
*	__wakeup doesn't have to be final	Stanislav Malyshev	2015-08-04	1	-1/+1
\|
*	fix test	Stanislav Malyshev	2015-08-04	1	-4/+7
\|
*	update NEWS	Stanislav Malyshev	2015-08-04	1	-2/+30
\|
*	Merge branch 'PHP-5.4' into PHP-5.4.44	Stanislav Malyshev	2015-08-04	4	-9/+21
\|\ \| \| \| \| \| \| \| \| \| \|	* PHP-5.4: Fixed bug #69892 Adjust Git-Rules
\| *	Fixed bug #69892	Nikita Popov	2015-08-01	3	-3/+15
\| \|
\| *	Adjust Git-Rules	Julien Pauli	2015-07-29	1	-6/+6
\| \|
* \|	Fix bug #70019 - limit extracted files to given directory	Stanislav Malyshev	2015-08-04	3	-4/+68
\| \|
* \|	Do not do convert_to_* on unserialize, it messes up references	Stanislav Malyshev	2015-08-04	3	-79/+85
\| \|
* \|	Fix #69793 - limit what we accept when unserializing exception	Stanislav Malyshev	2015-08-01	3	-0/+46
\| \|
* \|	Fixed bug #70169 (Use After Free Vulnerability in unserialize() with ↵	Stanislav Malyshev	2015-08-01	2	-12/+43
\| \| \| \| \| \| \| \|	SplDoublyLinkedList)
* \|	Fixed bug #70166 - Use After Free Vulnerability in unserialize() with ↵	Stanislav Malyshev	2015-08-01	2	-0/+32
\| \| \| \| \| \| \| \|	SPLArrayObject
* \|	ignore signatures for packages too	Stanislav Malyshev	2015-08-01	2	-3/+22
\| \|
* \|	Fix bug #70168 - Use After Free Vulnerability in unserialize() with ↵	Stanislav Malyshev	2015-08-01	2	-33/+54
\| \| \| \| \| \| \| \|	SplObjectStorage
* \|	Fix bug #70014 - use RAND_bytes instead of deprecated RAND_pseudo_bytes	Stanislav Malyshev	2015-07-26	1	-4/+2
\| \|
* \|	Improved fix for Bug #69441	Stanislav Malyshev	2015-07-26	1	-5/+8
\| \|
* \|	Fix bug #70068 (Dangling pointer in the unserialization of ArrayObject items)	Stanislav Malyshev	2015-07-26	2	-43/+56
\| \|
* \|	Fix bug #70121 (unserialize() could lead to unexpected methods execution / ↵	Stanislav Malyshev	2015-07-26	2	-8/+18
\| \| \| \| \| \| \| \|	NULL pointer deref)
* \|	Fix bug #70081: check types for SOAP variables	Stanislav Malyshev	2015-07-26	1	-10/+13
\|/
*	5.4.44 next	Stanislav Malyshev	2015-07-07	3	-4/+6
\|
*	Better fix for bug #69958	Stanislav Malyshev	2015-07-07	2	-9/+15
\|
*	update news	Stanislav Malyshev	2015-07-07	1	-1/+10
\|
*	Fix bug #69669 (mysqlnd is vulnerable to BACKRONYM)	Stanislav Malyshev	2015-07-07	1	-25/+40
\|
*	Fix bug #69923 - Buffer overflow and stack smashing error in phar_fix_filepath	Stanislav Malyshev	2015-07-07	1	-2/+8
\|
*	Fix bug #69958 - Segfault in Phar::convertToData on invalid file	Stanislav Malyshev	2015-07-07	3	-34/+50
\|
*	add missing second argument for ucfirst to the proto	Ferenc Kovacs	2015-07-07	1	-1/+1
\|
*	Merge branch 'pull-request/1350' into PHP-5.4	Stanislav Malyshev	2015-06-28	4	-3/+90
\|\ \| \| \| \| \| \| \| \| \| \|	* pull-request/1350: Move strlen() check to php_mail_detect_multiple_crlf() Fixed Bug #69874 : Can't set empty additional_headers for mail()
\| *	Move strlen() check to php_mail_detect_multiple_crlf()	Yasuo Ohgaki	2015-06-19	1	-2/+2
\| \|