[ol7_software_collections] php54-php-devel-5.4.40-4.el7.x86_64

The php54-php-devel package contains the files needed for building PHP
extensions. If you need to compile your own PHP extensions, you will
need to install this package.

Changelog (Show File list) (Show related packages)

• Fri Jul 22 2016 Remi Collet <rcollet@redhat.com> - 5.4.40-4

  - don't set environmental variable based on user supplied Proxy
    request header CVE-2016-5385

• Wed Jun 10 2015 Remi Collet <rcollet@redhat.com> - 5.4.40-3

  - fix more functions accept paths with NUL character #1213407

• Mon Jun 08 2015 Remi Collet <rcollet@redhat.com> - 5.4.40-2

  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - pgsql: fix NULL pointer dereference CVE-2015-1352

• Wed Apr 15 2015 Remi Collet <rcollet@redhat.com> - 5.4.40-1

  - rebase to PHP 5.4.40 for various security fix #1209887

• Thu Jan 22 2015 Remi Collet <rcollet@redhat.com> - 5.4.37-1

  - rebase to PHP 5.4.37

• Mon Dec 22 2014 Remi Collet <rcollet@redhat.com> - 5.4.36-1

  - rebase to PHP 5.4.36 #1168193
  - fix package name in description
  - php-fpm own session dir

• Thu Oct 23 2014 Jan Kaluza <jkaluza@redhat.com> - 5.4.16-22

  - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710

• Mon Oct 20 2014 Remi Collet <rcollet@redhat.com> - 5.4.16-20

  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670

• Tue Oct 07 2014 Remi Collet <rcollet@redhat.com> - 5.4.16-18

  - fix heap-based buffer over-read in DateInterval CVE-2013-6712
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - fileinfo: fix infinite recursion. CVE-2014-1943
  - fileinfo: fix out-of-bounds memory access. CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587

• Tue Feb 04 2014 Remi Collet <rcollet@redhat.com> - 5.4.16-16

  - allow multiple paths in ini_scan_dir #1058162