diff options
Diffstat (limited to 'ChangeLog.txt')
| -rw-r--r-- | ChangeLog.txt | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt index 20725e05c..5f217951b 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,38 @@ +Thu Feb 7 22:28:19 UTC 2019 +n/php-7.2.15-x86_64-1.txz: Upgraded. +xap/network-manager-applet-1.8.20-x86_64-1.txz: Upgraded. +extra/pure-alsa-system/ffmpeg-3.4.5-x86_64-2_alsa.txz: Rebuilt. + Recompiled against libvpx-1.8.0. + Reenabled libsmbclient support. +extra/pure-alsa-system/gst-plugins-good-1.14.4-x86_64-2_alsa.txz: Rebuilt. + Recompiled against libvpx-1.8.0. +extra/pure-alsa-system/xine-lib-1.2.9-x86_64-4_alsa.txz: Rebuilt. + Recompiled against libvpx-1.8.0. +pasture/php-5.6.40-x86_64-1.txz: Upgraded. + Several security bugs have been fixed in this release: + GD: + Fixed bug #77269 (efree() on uninitialized Heap data in imagescale leads + to use-after-free). + Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap). + Mbstring: + Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token). + Fixed bug #77371 (heap buffer overflow in mb regex functions - + compile_string_node). + Fixed bug #77381 (heap buffer overflow in multibyte match_at). + Fixed bug #77382 (heap buffer overflow due to incorrect length in + expand_case_fold_string). + Fixed bug #77385 (buffer overflow in fetch_token). + Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode). + Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code). + Phar: + Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext). + Xmlrpc: + Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()). + Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code). + For more information, see: + https://php.net/ChangeLog-5.php#5.6.40 + (* Security fix *) ++--------------------------+ Wed Feb 6 22:44:32 UTC 2019 a/hwdata-0.320-noarch-1.txz: Upgraded. a/kernel-generic-4.19.20-x86_64-1.txz: Upgraded. |