summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--php-cve-2026-14355.patch (renamed from php-gh22187.patch)0
-rw-r--r--php73.spec4
2 files changed, 3 insertions, 1 deletions
diff --git a/php-gh22187.patch b/php-cve-2026-14355.patch
index ff14469..ff14469 100644
--- a/php-gh22187.patch
+++ b/php-cve-2026-14355.patch
diff --git a/php73.spec b/php73.spec
index 37f1bb0..0e1984a 100644
--- a/php73.spec
+++ b/php73.spec
@@ -220,7 +220,8 @@ Patch226: php-cve-2026-7261.patch
Patch227: php-cve-2026-7262.patch
Patch228: php-cve-2026-6735.patch
Patch229: php-cve-2026-7568.patch
-Patch230: php-gh22187.patch
+# from 8.2.32
+Patch230: php-cve-2026-14355.patch
# Fixes for tests (300+)
# Factory is droped from system tzdata
@@ -2329,6 +2330,7 @@ EOF
%changelog
* Thu Jul 2 2026 Remi Collet <remi@remirepo.net> - 7.3.33-21
- Fix Memory corruption in openssl_encrypt with AES-WRAP-PAD
+ CVE-2026-14355
* Tue May 12 2026 Remi Collet <remi@remirepo.net> - 7.3.33-20
- Fix XSS within status endpoint