7122e3effd
This is security fix release, fixing several important security issues. From the ChangeLog: * Fixed strip_tags() to correctly handle '\0' characters. * Improved stability during startup when memory_limit is used. * Replace alloca() with emalloc() for better stack protection. * Added missing safe_mode checks inside ftok and itpc. * Fixed bug #28963 Fixed address allocation routine in IMAP extension. * Fixed bug #28632 Prevent open_basedir bypass via MySQL's LOAD DATA LOCAL. Note: package update also includes extra patches from PHP CVS not present in stock PHP 4.3.8 release - compilation fix for mssql extension and Zend engine memory-use-after-free fix. |
||
---|---|---|
.. | ||
patches | ||
buildlink3.mk | ||
DESCR | ||
distinfo | ||
Makefile | ||
Makefile.common | ||
Makefile.module | ||
Makefile.php | ||
MESSAGE | ||
MESSAGE.module | ||
pear.mk | ||
pear_plist.php | ||
PLIST | ||
PLIST.module |