Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix #77423 FILTER_VALIDATE_URL accepts URLs with invalid userinfo | Remi Collet | 2021-01-04 | 3 | -9/+218 |
| | | | | CVE-2020-7071 | ||||
* | fix obsoletes | Remi Collet | 2020-10-28 | 1 | -1/+1 |
| | |||||
* | Core: | Remi Collet | 2020-09-29 | 3 | -1/+384 |
| | | | | | | | | | Fix #79699 PHP parses encoded cookie names so malicious `__Host-` cookies can be sent CVE-2020-7070 OpenSSL: Fix #79601 Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV CVE-2020-7069 Fix bug #78079 openssl_encrypt_ccm.phpt fails with OpenSSL 1.1.1c | ||||
* | Core: | Remi Collet | 2020-08-04 | 3 | -1/+122 |
| | | | | | | | Fix #79877 getimagesize function silently truncates after a null byte Phar: Fix #79797 use of freed hash key in the phar_parse_zipfile function CVE-2020-7068 | ||||
* | Core: | Remi Collet | 2020-05-12 | 3 | -1/+123 |
| | | | | | | | Fix #78875 Long filenames cause OOM and temp files are not cleaned CVE-2019-11048 Fix #78876 Long variables in multipart/form-data cause OOM and temp files are not cleaned | ||||
* | standard: | Remi Collet | 2020-04-14 | 3 | -1/+100 |
| | | | | | | Fix #79330 shell_exec silently truncates after a null byte Fix #79465 OOB Read in urldecode CVE-2020-7067 | ||||
* | standard: | Remi Collet | 2020-03-17 | 3 | -2/+176 |
| | | | | | | | | | Fix #79329 get_headers() silently truncates after a null byte CVE-2020-7066 exif: Fix #79282 Use-of-uninitialized-value in exif CVE-2020-7064 use oracle client library version 19.6 (18.5 on EL-6) | ||||
* | Renew openssl certs | Remi Collet | 2020-02-18 | 2 | -0/+152 |
| | |||||
* | dom: | Remi Collet | 2020-02-18 | 5 | -2/+347 |
| | | | | | | | | | | Fix #77569 Write Access Violation in DomImplementation phar: Fix #79082 Files added to tar with Phar::buildFromIterator have all-access permissions CVE-2020-7063 session: Fix #79221 Null Pointer Dereference in PHP Session Upload Progress CVE-2020-7062 | ||||
* | rebuild with 1 more fix | Remi Collet | 2020-01-23 | 2 | -2/+35 |
| | |||||
* | mbstring: | Remi Collet | 2020-01-21 | 5 | -3/+307 |
| | | | | | | | | | | Fix #79037 global buffer-overflow in mbfl_filt_conv_big5_wchar CVE-2020-7060 session: Fix #79091 heap use-after-free in session_create_id standard: Fix #79099 OOB read in php_strip_tags_ex CVE-2020-7059 | ||||
* | - bcmath: | Remi Collet | 2019-12-17 | 7 | -4/+439 |
| | | | | | | | | | | | | | | | | Fix #78878 Buffer underflow in bc_shift_addsub CVE-2019-11046 - core: Fix #78862 link() silently truncates after a null byte on Windows CVE-2019-11044 Fix #78863 DirectoryIterator class silently truncates after a null byte CVE-2019-11045 - exif Fix #78793 Use-after-free in exif parsing under memory sanitizer CVE-2019-11050 Fix #78910 Heap-buffer-overflow READ in exif CVE-2019-11047 - use oracle client library version 19.5 (18.5 on EL-6) | ||||
* | Update to 7.1.33 - http://www.php.net/releases/7_1_33.php | Remi Collet | 2019-10-23 | 2 | -4/+15 |
| | |||||
* | Update to 7.1.32 - http://www.php.net/releases/7_1_32.php | Remi Collet | 2019-08-28 | 2 | -2/+5 |
| | |||||
* | Update to 7.1.31 - http://www.php.net/releases/7_1_31.php | Remi Collet | 2019-07-31 | 2 | -5/+6 |
| | |||||
* | disable opcache.huge_code_pages in default configuration | Remi Collet | 2019-07-02 | 1 | -5/+3 |
| | |||||
* | use oracle client library version 19.3 | Remi Collet | 2019-06-17 | 1 | -5/+10 |
| | |||||
* | refresh test results | Remi Collet | 2019-05-28 | 1 | -3/+1 |
| | |||||
* | v7.1.30 | Remi Collet | 2019-05-28 | 2 | -2/+5 |
| | |||||
* | fix wording | Remi Collet | 2019-05-16 | 1 | -4/+4 |
| | |||||
* | add httpd and nginx configuration files for FPM in documentation | Remi Collet | 2019-05-16 | 1 | -1/+17 |
| | |||||
* | Update to 7.1.29 - http://www.php.net/releases/7_1_29.php | Remi Collet | 2019-05-01 | 2 | -3/+8 |
| | |||||
* | Update to 7.1.28 - http://www.php.net/releases/7_1_28.php | Remi Collet | 2019-04-02 | 3 | -33/+5 |
| | |||||
* | ensure php-devel pulls needed lilbraries from php-config output | Remi Collet | 2019-03-29 | 1 | -0/+6 |
| | |||||
* | Update to 7.1.27 - http://www.php.net/releases/7_1_27.php | Remi Collet | 2019-03-06 | 3 | -5/+37 |
| | | | | add upstream patch for OpenSSL 1.1.1b | ||||
* | fix upgrade path | Remi Collet | 2019-02-22 | 1 | -0/+1 |
| | |||||
* | drop config for ZTS mod_php | Remi Collet | 2019-02-18 | 1 | -1/+1 |
| | |||||
* | Update to 7.1.26 - http://www.php.net/releases/7_1_26.php | Remi Collet | 2019-01-09 | 3 | -78/+7 |
| | |||||
* | Fix null pointer dereference in imap_mail CVE-2018-19935 | Remi Collet | 2018-12-08 | 2 | -1/+76 |
| | |||||
* | Update to 7.1.25 - http://www.php.net/releases/7_1_25.php | Remi Collet | 2018-12-05 | 2 | -3/+8 |
| | |||||
* | v7.1.25RC1 | Remi Collet | 2018-11-22 | 2 | -3/+6 |
| | |||||
* | Update to 7.1.24 - http://www.php.net/releases/7_1_24.php | Remi Collet | 2018-11-07 | 2 | -6/+9 |
| | |||||
* | FPM: add getallheaders, backported from 7.3 | Remi Collet | 2018-10-25 | 3 | -8/+216 |
| | |||||
* | 7.1.24RC1 | Remi Collet | 2018-10-24 | 3 | -12/+21 |
| | |||||
* | Update to 7.1.23 - http://www.php.net/releases/7_1_23.php | Remi Collet | 2018-10-10 | 2 | -5/+8 |
| | |||||
* | update to 7.1.23RC1 | Remi Collet | 2018-09-29 | 2 | -7/+11 |
| | | | | use oracle client library version 18.3 | ||||
* | Update to 7.1.22 - http://www.php.net/releases/7_1_22.php | Remi Collet | 2018-09-12 | 2 | -6/+8 |
| | |||||
* | v7.1.22RC1 | Remi Collet | 2018-08-30 | 2 | -6/+10 |
| | |||||
* | Update to 7.1.21 - http://www.php.net/releases/7_1_21.php | Remi Collet | 2018-08-15 | 2 | -2/+5 |
| | |||||
* | add NCSA and PostgreSQL to License | Remi Collet | 2018-07-20 | 1 | -1/+4 |
| | |||||
* | Update to 7.1.20 - http://www.php.net/releases/7_1_20.php | Remi Collet | 2018-07-19 | 1 | -6/+2 |
| | |||||
* | Update to 7.1.20 - http://www.php.net/releases/7_1_20.php | Remi Collet | 2018-07-19 | 2 | -2/+5 |
| | |||||
* | v7.1.20RC1 | Remi Collet | 2018-07-06 | 2 | -3/+6 |
| | |||||
* | Update to 7.1.19 - http://www.php.net/releases/7_1_19.php | Remi Collet | 2018-06-21 | 2 | -9/+12 |
| | |||||
* | 7.1.19RC1 | Remi Collet | 2018-06-07 | 2 | -5/+12 |
| | |||||
* | Update to 7.1.18 - http://www.php.net/releases/7_1_18.php | Remi Collet | 2018-05-24 | 2 | -3/+6 |
| | |||||
* | rebuild against EL 7.5 | Remi Collet | 2018-05-14 | 1 | -1/+4 |
| | |||||
* | v7.1.18RC1 | Remi Collet | 2018-05-13 | 2 | -8/+9 |
| | |||||
* | Update to 7.1.17 - http://www.php.net/releases/7_1_17.php | Remi Collet | 2018-04-25 | 2 | -9/+10 |
| | |||||
* | Update to 7.1.16 - http://www.php.net/releases/7_1_16.php | Remi Collet | 2018-03-28 | 3 | -8/+20 |
| | | | | FPM: update default pool configuration for process.dumpable |