diff options
| author | Remi Collet <remi@remirepo.net> | 2019-04-30 13:12:51 +0200 |
|---|---|---|
| committer | Remi Collet <remi@remirepo.net> | 2019-04-30 13:12:51 +0200 |
| commit | 73ce1409877bd5dd18289e69915ccb835b1ca4bf (patch) | |
| tree | e8de37485d3bc4f9950850873ef439f040ce772a /php.spec | |
| parent | b24f881bfb8a7ee8b17c9a8168aa8675d761ecf9 (diff) | |
- exif:
Fix #77950 Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG
CVE-2019-11036
Diffstat (limited to 'php.spec')
| -rw-r--r-- | php.spec | 11 |
1 files changed, 10 insertions, 1 deletions
@@ -131,7 +131,7 @@ Summary: PHP scripting language for creating dynamic web sites Name: %{?scl_prefix}php Version: %{upver}%{?rcver:~%{rcver}} -Release: 7%{?dist} +Release: 8%{?dist} # All files licensed under PHP version 3.01, except # Zend is licensed under Zend # TSRM is licensed under BSD @@ -214,6 +214,7 @@ Patch214: php-news.patch Patch215: php-sqlite3-defensive.patch Patch216: php-bug77753.patch Patch217: php-bug77831.patch +Patch218: php-bug77950.patch # Fixes for tests (300+) # Factory is droped from system tzdata @@ -972,6 +973,7 @@ support for JavaScript Object Notation (JSON) to PHP. %patch215 -p1 -b .sqlite3.defensive %patch216 -p1 -b .bug77753 %patch217 -p1 -b .bug77831 +%patch218 -p1 -b .bug77950 : --------------------------- #exit 1 @@ -1927,10 +1929,17 @@ EOF %changelog +* Tue Apr 30 2019 Remi Collet <remi@remirepo.net> - 7.0.33-8 +- exif: + Fix #77950 Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG + CVE-2019-11036 + * Tue Apr 2 2019 Remi Collet <remi@remirepo.net> - 7.0.33-7 - exif: Fix #77753 Heap-buffer-overflow in php_ifd_get32s + CVE-2019-11034 Fix #77831 Heap-buffer-overflow in exif_iif_add_value + CVE-2019-11035 - sqlite3: Added sqlite3.defensive INI directive |