summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI InterfaceRemi Collet2024-11-266-4/+559
| | | | | | | | | | GHSA-4w77-75f9-2c8w Fix OOB access in ldap_escape CVE-2024-8932 Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233
* Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGIRemi Collet2024-09-275-7/+601
| | | | | | | | | | CVE-2024-4577 Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability CVE-2024-8926 Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 Fix Erroneous parsing of multipart form data CVE-2024-8925
* use oracle client library version 23.5 on x86_64Remi Collet2024-07-311-7/+12
|
* Fix filter bypass in filter_var FILTER_VALIDATE_URLRemi Collet2024-06-052-1/+275
| | | | CVE-2024-5458
* use oracle client library version 21.13Remi Collet2024-04-104-5/+311
| | | | | | | Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096
* use official Oracle Instant Client RPMRemi Collet2023-09-222-28/+37
|
* Fix Security issue with external entity loading in XML without enabling itRemi Collet2023-08-023-5/+560
| | | | | | | GHSA-3qrf-m4j2-pcrr CVE-2023-3823 Fix Buffer mismanagement in phar_dir_read() GHSA-jqcx-ccgc-xwhv CVE-2023-3824 move httpd/nginx wants directive to config files in /etc
* fix possible buffer overflow in dateRemi Collet2023-06-214-82/+117
| | | | define %php56___phpize and %php56___phpconfig
* Fix insufficient random bytes in HTTP Digest authentication for SOAPRemi Collet2023-06-072-2/+57
| | | | | GHSA-76gg-c692-v2mw use oracle client library version 21.10
* fix #81744: Password_verify() always return true with some hashRemi Collet2023-02-156-21/+579
| | | | | | | | CVE-2023-0567 fix #81746: 1-byte array overrun in common path resolve code CVE-2023-0568 fix DOS vulnerability when parsing multipart request body CVE-2023-0662
* fix NEWSRemi Collet2022-09-301-0/+33
|
* phar: fix #81726 DOS when using quine gzip file. CVE-2022-31628Remi Collet2022-09-283-4/+248
| | | | | | core: fix #81727 Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. CVE-2022-31629 use oracle client library version 21.7
* use oracle client library version 21.6Remi Collet2022-06-073-9/+161
| | | | | mysqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626 pgsql: fix #81720: Uninitialized array in pg_query_params(). CVE-2022-31625
* Fix #79971 special character is breaking the path in xml functionRemi Collet2021-11-152-1/+242
| | | | CVE-2021-21707
* fix PHP-FPM oob R/W in root process leading to priv escalationRemi Collet2021-10-202-5/+444
| | | | | | CVE-2021-21703 use libicu version 69 use oracle client library version 21.3
* fix intl build on F35Remi Collet2021-09-072-2/+5
|
* Fix #81211 Symlinks are followed when creating PHAR archiveRemi Collet2021-08-262-1/+170
|
* missing changelogRemi Collet2021-06-291-0/+2
|
* Fix #81122 SSRF bypass in FILTER_VALIDATE_URLRemi Collet2021-06-284-3/+542
| | | | | | | | | CVE-2021-21705 Fix #76448 Stack buffer overflow in firebird_info_cb Fix #76449 SIGSEGV in firebird_handle_doer Fix #76450 SIGSEGV in firebird_stmt_execute Fix #76452 Crash while parsing blob data in firebird_fetch_blob CVE-2021-21704
* fix snmp extension build with net-snmp without DESRemi Collet2021-05-272-1/+45
|
* Fix #80710 imap_mail_compose() header injectionRemi Collet2021-04-282-17/+380
| | | | use oracle client library version 21.1
* Fix #80672 Null Dereference in SoapClientRemi Collet2021-02-033-1/+470
| | | | | CVE-2021-21702 better fix for #77423
* Fix #77423 FILTER_VALIDATE_URL accepts URLs with invalid userinfoRemi Collet2021-01-043-8/+369
| | | | CVE-2020-7071
* F33 buildRemi Collet2020-08-201-5/+19
|
* Core:Remi Collet2020-08-043-2/+149
| | | | | | | Fix #79877 getimagesize function silently truncates after a null byte Phar: Fix #79797 use of freed hash key in the phar_parse_zipfile function CVE-2020-7068
* Core:Remi Collet2020-05-132-1/+79
| | | | | | | Fix #78875 Long filenames cause OOM and temp files are not cleaned CVE-2019-11048 Fix #78876 Long variables in multipart/form-data cause OOM and temp files are not cleaned
* standard:Remi Collet2020-04-143-1/+128
| | | | | | Fix #79330 shell_exec silently truncates after a null byte Fix #79465 OOB Read in urldecode CVE-2020-7067
* standard:Remi Collet2020-03-173-2/+187
| | | | | | | | | Fix #79329 get_headers() silently truncates after a null byte CVE-2020-7066 exif: Fix #79282 Use-of-uninitialized-value in exif CVE-2020-7064 use oracle client library version 19.6 (18.5 on EL-6)
* add the gcc10 patchRemi Collet2020-02-191-0/+30
|
* add fix for GCC 10Remi Collet2020-02-192-3/+8
|
* Renew openssl certsRemi Collet2020-02-182-0/+152
|
* phar:Remi Collet2020-02-183-1/+253
| | | | | | | | Fix #79082 Files added to tar with Phar::buildFromIterator have all-access permissions CVE-2020-7063 session: Fix #79221 Null Pointer Dereference in PHP Session Upload Progress CVE-2020-7062
* rebuild with 1 more fixRemi Collet2020-01-232-2/+35
|
* mbstring:Remi Collet2020-01-214-2/+188
| | | | | | | | Fix #79037 global buffer-overflow in mbfl_filt_conv_big5_wchar CVE-2020-7060 standard: Fix #79099 OOB read in php_strip_tags_ex CVE-2020-7059
* - bcmath:Remi Collet2019-12-177-8/+463
| | | | | | | | | | | | | | | | Fix #78878 Buffer underflow in bc_shift_addsub CVE-2019-11046 - core: Fix #78862 link() silently truncates after a null byte on Windows CVE-2019-11044 Fix #78863 DirectoryIterator class silently truncates after a null byte CVE-2019-11045 - exif Fix #78793 Use-after-free in exif parsing under memory sanitizer CVE-2019-11050 Fix #78910 Heap-buffer-overflow READ in exif CVE-2019-11047 - use oracle client library version 19.5 (18.5 on EL-6)
* Fix CVE-2019-11043 env_path_info underflow in fpm_main.cRemi Collet2019-10-223-5/+65
|
* From 7.1.32Remi Collet2019-08-284-6/+181
| | | | | | | - mbstring: Fix CVE-2019-13224 don't allow different encodings for onig_new_deluxe - pcre: Fix #75457 heap use-after-free in pcrelib
* - exif:Remi Collet2019-07-305-8/+172
| | | | | | | | | Fix #78256 heap-buffer-overflow on exif_process_user_comment CVE-2019-11042 Fix #78222 heap-buffer-overflow on exif_scan_thumbnail CVE-2019-11041 - phar: Fix #77919 Potential UAF in Phar RSHUTDOWN
* bump releaseRemi Collet2019-07-031-2/+2
|
* use oracle client library version 19.3Remi Collet2019-06-171-2/+12
|
* - iconv:Remi Collet2019-05-285-2/+170
| | | | | | | | | | Fix #78069 Out-of-bounds read in iconv.c:_php_iconv_mime_decode() CVE-2019-11039 - exif: Fix #77988 Heap-buffer-overflow on php_jpg_get16 CVE-2019-11040 - sqlite3: Fix #77967 Bypassing open_basedir restrictions via file uris
* - exif:Remi Collet2019-04-303-2/+76
| | | | | Fix #77950 Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG CVE-2019-11036
* - exif:Remi Collet2019-04-025-24/+441
| | | | | | | Fix #77753 Heap-buffer-overflow in php_ifd_get32s Fix #77831 Heap-buffer-overflow in exif_iif_add_value - sqlite3: Added sqlite3.defensive INI directive
* ensure php-devel pulls needed lilbraries from php-config outputRemi Collet2019-03-291-0/+6
|
* Fix #76846 Segfault in shutdown function after memory limit errorRemi Collet2019-03-152-3/+100
|
* add CVEsRemi Collet2019-03-151-0/+5
|
* Fix #77396 Null Pointer Dereference in phar_create_or_parse_filenameRemi Collet2019-03-129-42/+335
| | | | | | | Fix #77586 - phar_tar_writeheaders_int() buffer overflow - spl: Fix #77431 openFile() silently truncates after a null byte - security fix synced with https://github.com/Microsoft/php-src/
* f30 buildRemi Collet2019-03-082-11/+12
|
* update test resultsRemi Collet2019-03-051-3/+7
|
* Fix #77630 rename() across the device may allow unwanted access during ↵Remi Collet2019-03-052-1/+97
| | | | processing
generated by cgit (git 2.34.1) at 2025-11-04 14:01:48 +0000