rpms/php/php56.git, branch master

Fix filter bypass in filter_var FILTER_VALIDATE_URL

2024-06-05T10:39:27+00:00

  CVE-2024-5458

use oracle client library version 21.13 on x86_64, 19.19 on aarch64

2024-04-10T13:11:27+00:00

Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096

use official Oracle Instant Client RPM

2023-09-22T08:15:46+00:00

Fix Security issue with external entity loading in XML without enabling it

2023-08-02T09:54:41+00:00

  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824

fix possible buffer overflow in date

2023-06-21T09:10:12+00:00

Fix insufficient random bytes in HTTP Digest authentication for SOAP

2023-06-07T11:08:13+00:00

  GHSA-76gg-c692-v2mw
use oracle client library version 21.10
define __phpize and __phpconfig

fix #81744: Password_verify() always return true with some hash

2023-02-15T10:41:42+00:00

  CVE-2023-0567
fix #81746: 1-byte array overrun in common path resolve code
  CVE-2023-0568
fix DOS vulnerability when parsing multipart request body
  CVE-2023-0662

pdo: fix #81740: PDO::quote() may return unquoted string

2022-12-20T08:00:00+00:00

  CVE-2022-31631
use oracle client library version 21.8

fix NEWS

2022-09-30T07:28:21+00:00

phar: fix #81726 DOS when using quine gzip file. CVE-2022-31628

2022-09-28T09:00:54+00:00

core: fix #81727 Don't mangle HTTP variable names that clash with ones
  that have a specific semantic meaning. CVE-2022-31629
use oracle client library version 21.7