<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-openembedded.git/meta-webserver/recipes-php/modphp/files, branch krogoth</title>
<subtitle>Mirror of git.openembedded.org/meta-openembedded</subtitle>
<id>https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=krogoth</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=krogoth'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/'/>
<updated>2015-01-08T11:04:26+00:00</updated>
<entry>
<title>modphp: remove</title>
<updated>2015-01-08T11:04:26+00:00</updated>
<author>
<name>Paul Eggleton</name>
<email>paul.eggleton@linux.intel.com</email>
</author>
<published>2015-01-01T23:34:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=06af52095b5be1cb21a7dc9a6a6e05d01f6e7a00'/>
<id>urn:sha1:06af52095b5be1cb21a7dc9a6a6e05d01f6e7a00</id>
<content type='text'>
This is now built out of the standard php recipe.

Signed-off-by: Paul Eggleton &lt;paul.eggleton@linux.intel.com&gt;
</content>
</entry>
<entry>
<title>modphp: Security Advisory - php - CVE-2014-3597</title>
<updated>2014-10-30T08:00:07+00:00</updated>
<author>
<name>Yue Tao</name>
<email>Yue.Tao@windriver.com</email>
</author>
<published>2014-10-23T08:29:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=8d50adfe536f3dc94313318f834946e634441c8a'/>
<id>urn:sha1:8d50adfe536f3dc94313318f834946e634441c8a</id>
<content type='text'>
Multiple buffer overflows in the php_parserr function in
ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow
remote DNS servers to cause a denial of service (application crash) or
possibly execute arbitrary code via a crafted DNS record, related to the
dns_get_record function and the dn_expand function. NOTE: this issue
exists because of an incomplete fix for CVE-2014-4049.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3597

Signed-off-by: Yue Tao &lt;Yue.Tao@windriver.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>modphp: Security Advisory - php - CVE-2014-3587</title>
<updated>2014-10-30T08:00:07+00:00</updated>
<author>
<name>Yue Tao</name>
<email>Yue.Tao@windriver.com</email>
</author>
<published>2014-10-23T08:29:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=700078d6646c79a784cec2cb0a491687e3edd21b'/>
<id>urn:sha1:700078d6646c79a784cec2cb0a491687e3edd21b</id>
<content type='text'>
Integer overflow in the cdf_read_property_info function in cdf.c in file
through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and
5.5.x before 5.5.16, allows remote attackers to cause a denial of
service (application crash) via a crafted CDF file. NOTE: this
vulnerability exists because of an incomplete fix for CVE-2012-1571.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3587

Signed-off-by: Yue Tao &lt;Yue.Tao@windriver.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>modphp: Security Advisory - php - CVE-2014-5120</title>
<updated>2014-10-30T08:00:07+00:00</updated>
<author>
<name>Yue Tao</name>
<email>Yue.Tao@windriver.com</email>
</author>
<published>2014-10-23T08:29:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=81aecee0eda7600e6a6ae3f8264b2a1bc7a57f04'/>
<id>urn:sha1:81aecee0eda7600e6a6ae3f8264b2a1bc7a57f04</id>
<content type='text'>
gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before
5.5.16 does not ensure that pathnames lack %00 sequences, which might
allow remote attackers to overwrite arbitrary files via crafted input to
an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif,
(4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-5120

Signed-off-by: Yue Tao &lt;Yue.Tao@windriver.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>modphp: using PKGCONFIG and PACKAGECONFIG for libxml and soap</title>
<updated>2014-10-14T09:48:58+00:00</updated>
<author>
<name>Roy.Li</name>
<email>rongqing.li@windriver.com</email>
</author>
<published>2014-10-13T04:39:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=d1951db22a9971a1bb7cf25810ec3bdc9669a6f1'/>
<id>urn:sha1:d1951db22a9971a1bb7cf25810ec3bdc9669a6f1</id>
<content type='text'>
Signed-off-by: Roy.Li &lt;rongqing.li@windriver.com&gt;
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>modphp: update to 5.4.14</title>
<updated>2013-04-29T09:24:29+00:00</updated>
<author>
<name>Marcin Juszkiewicz</name>
<email>marcin.juszkiewicz@linaro.org</email>
</author>
<published>2013-04-25T08:44:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=e0851379ef6c3f3b4e6a63edba2a099211b70693'/>
<id>urn:sha1:e0851379ef6c3f3b4e6a63edba2a099211b70693</id>
<content type='text'>
Only build tested.

Signed-off-by: Marcin Juszkiewicz &lt;marcin.juszkiewicz@linaro.org&gt;
</content>
</entry>
<entry>
<title>modphp: enable mysql option in PACKAGECONFIG</title>
<updated>2013-04-15T09:56:19+00:00</updated>
<author>
<name>Jackie Huang</name>
<email>jackie.huang@windriver.com</email>
</author>
<published>2013-04-09T07:11:05+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=29fa7f9ea7dd545c1c8e72e703f30cce9076832d'/>
<id>urn:sha1:29fa7f9ea7dd545c1c8e72e703f30cce9076832d</id>
<content type='text'>
* enable mysql option in PACKAGECONFIG
* add patch to support autoconf 2.59+ so we can use
  autotools do_configure to fix a libtool cross-compile issue

Signed-off-by: Jackie Huang &lt;jackie.huang@windriver.com&gt;
</content>
</entry>
<entry>
<title>modphp: revert pthread-check.patch and add one against threads.m4</title>
<updated>2013-04-15T09:56:19+00:00</updated>
<author>
<name>Jackie Huang</name>
<email>jackie.huang@windriver.com</email>
</author>
<published>2013-04-09T07:11:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=12b72e1eaf552843bbd12a22075efa5f44c01d34'/>
<id>urn:sha1:12b72e1eaf552843bbd12a22075efa5f44c01d34</id>
<content type='text'>
revert pthread-check.patch which hacks the old configure,
instead, add one against threads.m4 to enable pthread support
when cross-compiling.

Signed-off-by: Jackie Huang &lt;jackie.huang@windriver.com&gt;
</content>
</entry>
<entry>
<title>modphp: add from OE-Classic, update to 5.3.14 and fix</title>
<updated>2012-10-03T13:36:40+00:00</updated>
<author>
<name>Paul Eggleton</name>
<email>paul.eggleton@linux.intel.com</email>
</author>
<published>2012-07-17T10:31:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=418650c55d05724af398dc5fe1185b47bf788135'/>
<id>urn:sha1:418650c55d05724af398dc5fe1185b47bf788135</id>
<content type='text'>
* Use working SRC_URI
* Fix to use correct headers and apxs script for cross-compiling
* Enable threading
* Install headers and scripts for building extension modules
* Use proper variables instead of /etc, /usr/lib etc.
* Fix rpath QA issues
* Add LIC_FILES_CHKSUM
* Put apache config file into SRC_URI instead of referring to it using
  FILESDIR

Signed-off-by: Paul Eggleton &lt;paul.eggleton@linux.intel.com&gt;
</content>
</entry>
</feed>
