linux/meta-openembedded.git/meta-webserver/recipes-php/modphp/files/php-CVE-2014-5120.patch, branch hardknottMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=hardknott2015-01-08T11:04:26+00:00modphp: remove2015-01-08T11:04:26+00:00Paul Eggletonpaul.eggleton@linux.intel.com2015-01-01T23:34:29+00:00urn:sha1:06af52095b5be1cb21a7dc9a6a6e05d01f6e7a00
This is now built out of the standard php recipe.
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
modphp: Security Advisory - php - CVE-2014-51202014-10-30T08:00:07+00:00Yue TaoYue.Tao@windriver.com2014-10-23T08:29:13+00:00urn:sha1:81aecee0eda7600e6a6ae3f8264b2a1bc7a57f04
gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before
5.5.16 does not ensure that pathnames lack %00 sequences, which might
allow remote attackers to overwrite arbitrary files via crafted input to
an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif,
(4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5120
Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>