diff options
| author | Remi Collet <remi@remirepo.net> | 2020-01-21 11:03:29 +0100 |
|---|---|---|
| committer | Remi Collet <remi@remirepo.net> | 2020-01-21 11:03:29 +0100 |
| commit | b8dbeb1b6f3d8edbc2a037bba97a31ee53848dbd (patch) | |
| tree | 5f3a2ef6906ba3e3dfd1b78c7d09af7c8ba1822a /php.spec | |
| parent | 2708c128c5462b69ba61c88f5ff770d492944192 (diff) | |
mbstring:
Fix #79037 global buffer-overflow in mbfl_filt_conv_big5_wchar
CVE-2020-7060
standard:
Fix #79099 OOB read in php_strip_tags_ex
CVE-2020-7059
Diffstat (limited to 'php.spec')
| -rw-r--r-- | php.spec | 14 |
1 files changed, 13 insertions, 1 deletions
@@ -141,7 +141,7 @@ Summary: PHP scripting language for creating dynamic web sites Name: %{?scl_prefix}php Version: %{upver}%{?rcver:~%{rcver}} -Release: 15%{?dist} +Release: 16%{?dist} # All files licensed under PHP version 3.01, except # Zend is licensed under Zend # TSRM is licensed under BSD @@ -239,6 +239,8 @@ Patch229: php-bug78862.patch Patch230: php-bug78863.patch Patch231: php-bug78793.patch Patch232: php-bug78910.patch +Patch233: php-bug79099.patch +Patch234: php-bug79037.patch # Fixes for tests (300+) # Factory is droped from system tzdata @@ -1013,6 +1015,8 @@ sed -e 's/php-devel/%{?scl_prefix}php-devel/' -i scripts/phpize.in %patch230 -p1 -b .bug78863 %patch231 -p1 -b .bug78793 %patch232 -p1 -b .bug78910 +%patch233 -p1 -b .bug79099 +%patch234 -p1 -b .bug79037 : --------------------------- #exit 1 @@ -1961,6 +1965,14 @@ EOF %changelog +* Tue Jan 21 2020 Remi Collet <remi@remirepo.net> - 7.0.33-16 +- mbstring: + Fix #79037 global buffer-overflow in mbfl_filt_conv_big5_wchar + CVE-2020-7060 +- standard: + Fix #79099 OOB read in php_strip_tags_ex + CVE-2020-7059 + * Tue Dec 17 2019 Remi Collet <remi@remirepo.net> - 7.0.33-15 - bcmath: Fix #78878 Buffer underflow in bc_shift_addsub |