<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-openembedded.git/meta-webserver/recipes-php/modphp/files/php-CVE-2014-3597.patch, branch hardknott</title>
<subtitle>Mirror of git.openembedded.org/meta-openembedded</subtitle>
<id>https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=hardknott</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=hardknott'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/'/>
<updated>2015-01-08T11:04:26+00:00</updated>
<entry>
<title>modphp: remove</title>
<updated>2015-01-08T11:04:26+00:00</updated>
<author>
<name>Paul Eggleton</name>
<email>paul.eggleton@linux.intel.com</email>
</author>
<published>2015-01-01T23:34:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=06af52095b5be1cb21a7dc9a6a6e05d01f6e7a00'/>
<id>urn:sha1:06af52095b5be1cb21a7dc9a6a6e05d01f6e7a00</id>
<content type='text'>
This is now built out of the standard php recipe.

Signed-off-by: Paul Eggleton &lt;paul.eggleton@linux.intel.com&gt;
</content>
</entry>
<entry>
<title>modphp: Security Advisory - php - CVE-2014-3597</title>
<updated>2014-10-30T08:00:07+00:00</updated>
<author>
<name>Yue Tao</name>
<email>Yue.Tao@windriver.com</email>
</author>
<published>2014-10-23T08:29:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=8d50adfe536f3dc94313318f834946e634441c8a'/>
<id>urn:sha1:8d50adfe536f3dc94313318f834946e634441c8a</id>
<content type='text'>
Multiple buffer overflows in the php_parserr function in
ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow
remote DNS servers to cause a denial of service (application crash) or
possibly execute arbitrary code via a crafted DNS record, related to the
dns_get_record function and the dn_expand function. NOTE: this issue
exists because of an incomplete fix for CVE-2014-4049.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3597

Signed-off-by: Yue Tao &lt;Yue.Tao@windriver.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
</feed>
