summaryrefslogtreecommitdiffstats
path: root/php73.spec
diff options
context:
space:
mode:
authorRemi Collet <remi@remirepo.net>2026-07-02 08:53:31 +0200
committerRemi Collet <remi@php.net>2026-07-02 08:53:31 +0200
commitde3a042206b3a0671d2c76eb268d58c79b5649b2 (patch)
treeb624015f250b3216e2c21a0ff436ab323e95720c /php73.spec
parentfea2058e67e90dab8a7366fbde98941a3b61bf33 (diff)
Fix Memory corruption in openssl_encrypt with AES-WRAP-PADHEADmaster
Diffstat (limited to 'php73.spec')
-rw-r--r--php73.spec9
1 files changed, 7 insertions, 2 deletions
diff --git a/php73.spec b/php73.spec
index e7429e2..37f1bb0 100644
--- a/php73.spec
+++ b/php73.spec
@@ -117,7 +117,7 @@
Summary: PHP scripting language for creating dynamic web sites
Name: php
Version: %{upver}%{?rcver:~%{rcver}}
-Release: 20%{?dist}
+Release: 21%{?dist}
# All files licensed under PHP version 3.01, except
# Zend is licensed under Zend
# TSRM is licensed under BSD
@@ -220,6 +220,7 @@ Patch226: php-cve-2026-7261.patch
Patch227: php-cve-2026-7262.patch
Patch228: php-cve-2026-6735.patch
Patch229: php-cve-2026-7568.patch
+Patch230: php-gh22187.patch
# Fixes for tests (300+)
# Factory is droped from system tzdata
@@ -1231,6 +1232,7 @@ low-level PHP extension for the libsodium cryptographic library.
%patch -P227 -p1 -b .cve7262
%patch -P228 -p1 -b .cve6735
%patch -P229 -p1 -b .cve7268
+%patch -P230 -p1 -b .gh22187
# Fixes for tests
%if 0%{?fedora} >= 25 || 0%{?rhel} >= 6
@@ -2137,7 +2139,7 @@ cat << EOF
WARNING : PHP 7.3 have reached its "End of Life" in
December 2021. Even, if this package includes some of
- the important security fixes, backported from 8.1, the
+ the important security fixes, backported from 8.2, the
UPGRADE to a maintained version is very strongly RECOMMENDED.
=====================================================================
@@ -2325,6 +2327,9 @@ EOF
%changelog
+* Thu Jul 2 2026 Remi Collet <remi@remirepo.net> - 7.3.33-21
+- Fix Memory corruption in openssl_encrypt with AES-WRAP-PAD
+
* Tue May 12 2026 Remi Collet <remi@remirepo.net> - 7.3.33-20
- Fix XSS within status endpoint
CVE-2026-6735