openbsd-ports/www/php5
sthen 1956488b57 SECURITY: limited fixes cherry picked from 5.2.14. If upstream had
mentioned the release on their announcements list maybe we would have
had time to get the full update in but, as it is, we just found out
about it and there are too many changes to test properly at short
notice, so we are just fixing these for now.

CVE-2010-2225: fix SplObjectStorage unserialization, upstream r300843

CVE-2010-0397: null pointer dereference when processing invalid XML-RPC
requests, upstream r296152

ok espie@
2010-08-08 10:46:34 +00:00
..
core SECURITY: limited fixes cherry picked from 5.2.14. If upstream had 2010-08-08 10:46:34 +00:00
extensions SECURITY: limited fixes cherry picked from 5.2.14. If upstream had 2010-08-08 10:46:34 +00:00
patches update Suhosin extension to 0.9.29; fixes segfaults with session encryption. 2009-08-21 09:44:12 +00:00
distinfo update to version 5.2.13 2010-03-21 09:05:55 +00:00
Makefile SUBDIR += is wrong: it means the makefile will pick up SUBDIR from env, thus 2010-02-01 17:00:12 +00:00
Makefile.inc drop USE_GCC3 here as well. 2010-07-21 17:04:29 +00:00