summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'PHP-5.4' into PHP-5.5php-5.5.29PHP-5.5.29Julien Pauli2015-09-021-0/+2
* prepare for 5.5.29Julien Pauli2015-09-023-7/+3
* Merge branch 'PHP-5.5' into PHP-5.5.29Stanislav Malyshev2015-09-013-3/+3
|\
| * Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-09-013-3/+3
| |\
| | * fix unit testsStanislav Malyshev2015-09-013-3/+3
* | | Merge branch 'PHP-5.5' into PHP-5.5.29Stanislav Malyshev2015-09-011-4/+42
|\ \ \ | |/ /
| * | update NEWSStanislav Malyshev2015-09-011-4/+42
| * | Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-09-010-0/+0
| |\ \ | | |/
| | * add NEWS for fixesStanislav Malyshev2015-09-011-1/+35
* | | Merge branch 'PHP-5.5' into PHP-5.5.29Stanislav Malyshev2015-09-013-1/+72
|\ \ \ | |/ /
| * | Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-09-0124-834/+977
| |\ \ | | |/
| | * Merge branch 'PHP-5.4.45' into PHP-5.4Stanislav Malyshev2015-09-0124-877/+1018
| | |\
| | | * Improve fix for #70172Stanislav Malyshev2015-09-013-1/+72
| | * | Add CVE IDs asigned (post release) to PHP 5.4.43Lior Kaplan2015-08-101-3/+4
| | * | Add CVE IDs asigned to #69085 (PHP 5.4.39)Lior Kaplan2015-08-101-1/+1
* | | | Merge branch 'PHP-5.4.45' into PHP-5.5.29Stanislav Malyshev2015-09-012-5/+23
|\ \ \ \ | | |_|/ | |/| |
| * | | Fix bug #70312 - HAVAL gives wrong hashes in specific casesStanislav Malyshev2015-09-012-5/+23
* | | | Merge branch 'PHP-5.4.45' into PHP-5.5.29Stanislav Malyshev2015-09-011-1/+1
|\ \ \ \ | |/ / /
| * | | fix testStanislav Malyshev2015-09-011-1/+1
* | | | Merge branch 'PHP-5.4.45' into PHP-5.5.29Stanislav Malyshev2015-09-0116-267/+587
|\ \ \ \ | |/ / /
| * | | add testStanislav Malyshev2015-09-011-0/+50
| * | | Fix bug #70366 - use-after-free vulnerability in unserialize() with SplDoubly...Stanislav Malyshev2015-09-013-1/+56
| * | | Fix bug #70365 - use-after-free vulnerability in unserialize() with SplObject...Stanislav Malyshev2015-09-012-0/+52
| * | | Fix bug #70172 - Use After Free Vulnerability in unserialize()Stanislav Malyshev2015-08-314-42/+121
| * | | Fix bug #70388 - SOAP serialize_function_call() type confusionStanislav Malyshev2015-08-312-44/+69
| * | | Fixed bug #70350: ZipArchive::extractTo allows for directory traversal when c...Stanislav Malyshev2015-08-302-39/+72
| * | | Improve fix for #70385Stanislav Malyshev2015-08-291-2/+2
| * | | Fix bug #70345 (Multiple vulnerabilities related to PCRE functions)Stanislav Malyshev2015-08-282-76/+100
| * | | Fix bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte val...Stanislav Malyshev2015-08-281-104/+104
* | | | More fixes for bug #70219Stanislav Malyshev2015-08-282-2/+51
* | | | Merge branch 'PHP-5.4.45' into PHP-5.5.29Stanislav Malyshev2015-08-257-564/+298
|\ \ \ \ | |/ / / | | / / | |/ / |/| |
| * | Fix bug #70219 (Use after free vulnerability in session deserializer)Stanislav Malyshev2015-08-236-498/+228
| * | Fix for bug #69782Stanislav Malyshev2015-08-161-69/+73
| |/
| * 5.4.45 nextStanislav Malyshev2015-08-043-5/+7
* | 5.5.29 nextStanislav Malyshev2015-08-043-5/+7
* | Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-08-041-2/+2
|\ \ | |/
| * fix testStanislav Malyshev2015-08-041-2/+2
* | Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-08-041-1/+1
|\ \ | |/
| * __wakeup doesn't have to be finalStanislav Malyshev2015-08-041-1/+1
* | update NEWSStanislav Malyshev2015-08-041-0/+29
* | Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-08-041-4/+7
|\ \ | |/
| * fix testStanislav Malyshev2015-08-041-4/+7
| * update NEWSStanislav Malyshev2015-08-041-2/+30
* | Merge branch 'PHP-5.4' into PHP-5.5Stanislav Malyshev2015-08-0421-151/+398
|\ \ | |/
| * Merge branch 'PHP-5.4' into PHP-5.4.44Stanislav Malyshev2015-08-044-9/+21
| |\
| | * Fixed bug #69892Nikita Popov2015-08-013-3/+15
| * | Fix bug #70019 - limit extracted files to given directoryStanislav Malyshev2015-08-043-4/+68
| * | Do not do convert_to_* on unserialize, it messes up referencesStanislav Malyshev2015-08-043-79/+85
| * | Fix #69793 - limit what we accept when unserializing exceptionStanislav Malyshev2015-08-013-0/+46
| * | Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoubl...Stanislav Malyshev2015-08-012-12/+43