diff options
author | Remi Collet <remi@remirepo.net> | 2022-06-23 08:07:15 +0200 |
---|---|---|
committer | Remi Collet <remi@php.net> | 2022-06-23 08:07:15 +0200 |
commit | 4d8135d7da0667c5f7ea550c2a21ff5cf038f8ed (patch) | |
tree | 8626e1f8ffa966a987337f6ea1caa8dea6b1f6f4 /php.spec | |
parent | cbf33e00e2bc74c125b5cfa97a1a57f89eca627b (diff) |
myqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626
Diffstat (limited to 'php.spec')
-rw-r--r-- | php.spec | 19 |
1 files changed, 10 insertions, 9 deletions
@@ -140,7 +140,7 @@ Summary: PHP scripting language for creating dynamic web sites Name: %{?scl_prefix}php Version: 5.5.38 -Release: 12%{?dist} +Release: 13%{?dist} # All files licensed under PHP version 3.01, except # Zend is licensed under Zend # TSRM is licensed under BSD @@ -256,6 +256,7 @@ Patch160: bug77231.patch Patch161: bug77242.patch Patch162: bug77380.patch Patch163: bug78599.patch +Patch164: bug81719.patch # Security fixes (200+) @@ -765,12 +766,7 @@ BuildRequires: libXpm-devel BuildRequires: t1lib-devel %endif %if %{with_libgd} -BuildRequires: gd-devel >= 2.1.1 -%if 0%{?fedora} <= 19 && 0%{?rhel} <= 7 -Requires: gd-last%{?_isa} >= 2.1.1 -%else -Requires: gd%{?_isa} >= 2.1.1 -%endif +BuildRequires: gd-devel >= 2.3.3 %else %if %{with_vpx} BuildRequires: libvpx-devel @@ -1012,6 +1008,7 @@ support for using the enchant library to PHP. %patch161 -p1 -b .bug77242 %patch162 -p1 -b .bug77380 %patch163 -p1 -b .bug78599 +%patch164 -p1 -b .bug81719 : ------------------------ @@ -1025,7 +1022,7 @@ support for using the enchant library to PHP. %endif # Prevent %%doc confusion over LICENSE files -cp Zend/LICENSE Zend/ZEND_LICENSE +cp Zend/LICENSE ZEND_LICENSE cp TSRM/LICENSE TSRM_LICENSE cp ext/ereg/regex/COPYRIGHT regex_COPYRIGHT %if ! %{with_libgd} @@ -1779,7 +1776,7 @@ EOF %files common -f files.common %defattr(-,root,root) %doc CODING_STANDARDS CREDITS EXTENSIONS NEWS README* -%license LICENSE Zend/ZEND_* TSRM_LICENSE regex_COPYRIGHT +%license LICENSE ZEND_LICENSE TSRM_LICENSE regex_COPYRIGHT %license libmagic_LICENSE %license phar_LICENSE %doc php.ini-* @@ -1924,6 +1921,10 @@ EOF %changelog +* Thu Jun 23 2022 Remi Collet <remi@remirepo.net> - 5.5.38-13 +- rebuild with gd 2.3.3 +- myqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626 + * Tue Oct 22 2019 Remi Collet <remi@remirepo.net> - 5.5.38-12 - FPM: Fix CVE-2019-11043 env_path_info underflow in fpm_main.c |