From ea276d3f2e14d8458ebc417057c5e983a9b58264 Mon Sep 17 00:00:00 2001 From: Remi Collet Date: Wed, 27 Nov 2024 17:09:50 +0100 Subject: Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 --- php74.spec | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'php74.spec') diff --git a/php74.spec b/php74.spec index d3d693e..d9a91d1 100644 --- a/php74.spec +++ b/php74.spec @@ -116,7 +116,7 @@ Summary: PHP scripting language for creating dynamic web sites Name: php Version: %{upver}%{?rcver:~%{rcver}} -Release: 20%{?dist} +Release: 21%{?dist} # All files licensed under PHP version 3.01, except # Zend is licensed under Zend # TSRM is licensed under BSD @@ -202,6 +202,7 @@ Patch215: php-cve-2024-11234.patch Patch216: php-cve-2024-8932.patch Patch217: php-cve-2024-11233.patch Patch218: php-ghsa-4w77-75f9-2c8w.patch +Patch219: php-cve-2024-8929.patch # Fixes for tests (300+) # Factory is droped from system tzdata @@ -1232,6 +1233,7 @@ rm ext/openssl/tests/p12_with_extra_certs.p12 %patch -P216 -p1 -b .cve8932 %patch -P217 -p1 -b .cve11233 %patch -P218 -p1 -b .ghsa4w77 +%patch -P219 -p1 -b .cve8929 # Fixes for tests related to tzdata %patch -P300 -p1 -b .datetests @@ -2251,6 +2253,10 @@ EOF %changelog +* Wed Nov 27 2024 Remi Collet - 7.4.33-21 +- Fix Leak partial content of the heap through heap buffer over-read + CVE-2024-8929 + * Fri Nov 22 2024 Remi Collet - 7.4.33-20 - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface GHSA-4w77-75f9-2c8w -- cgit