diff options
author | Remi Collet <remi@remirepo.net> | 2019-04-30 13:29:45 +0200 |
---|---|---|
committer | Remi Collet <remi@remirepo.net> | 2019-04-30 13:29:45 +0200 |
commit | fca65115b933c02fe1088363a0776e17e5c7c620 (patch) | |
tree | 92ea6e17513eafc2702e717d16b4c497fbae34a8 /php70.spec | |
parent | 41459cd6c7eec2fbaafbc956d901342cfa1216fc (diff) |
- exif:
Fix #77950 Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG
CVE-2019-11036
Diffstat (limited to 'php70.spec')
-rw-r--r-- | php70.spec | 11 |
1 files changed, 10 insertions, 1 deletions
@@ -112,7 +112,7 @@ Summary: PHP scripting language for creating dynamic web sites Name: php Version: %{upver}%{?rcver:~%{rcver}} -Release: 7%{?dist} +Release: 8%{?dist} # All files licensed under PHP version 3.01, except # Zend is licensed under Zend # TSRM is licensed under BSD @@ -189,6 +189,7 @@ Patch214: php-news.patch Patch215: php-sqlite3-defensive.patch Patch216: php-bug77753.patch Patch217: php-bug77831.patch +Patch218: php-bug77950.patch # Fixes for tests (300+) # Factory is droped from system tzdata @@ -1060,6 +1061,7 @@ echo CIBLE = %{name}-%{version}-%{release} oci8=%{with_oci8} libzip=%{with_libzi %patch215 -p1 -b .sqlite3.defensive %patch216 -p1 -b .bug77753 %patch217 -p1 -b .bug77831 +%patch218 -p1 -b .bug77950 # Fixes for tests %if 0%{?fedora} >= 21 || 0%{?rhel} >= 5 @@ -2084,10 +2086,17 @@ fi %changelog +* Tue Apr 30 2019 Remi Collet <remi@remirepo.net> - 7.0.33-8 +- exif: + Fix #77950 Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG + CVE-2019-11036 + * Tue Apr 2 2019 Remi Collet <remi@remirepo.net> - 7.0.33-7 - exif: Fix #77753 Heap-buffer-overflow in php_ifd_get32s + CVE-2019-11034 Fix #77831 Heap-buffer-overflow in exif_iif_add_value + CVE-2019-11035 - sqlite3: Added sqlite3.defensive INI directive |