Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix filter bypass in filter_var FILTER_VALIDATE_URL | Remi Collet | 2024-06-05 | 1 | -3/+9 |
| | | | | CVE-2024-5458 | ||||
* | use oracle client library version 21.13 on x86_64, 19.19 on aarch64 | Remi Collet | 2024-04-10 | 1 | -5/+16 |
| | | | | | | | Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 | ||||
* | use oracle client library version 21.11 on x86_64, 19.19 on aarch64 | Remi Collet | 2023-10-16 | 1 | -1/+5 |
| | | | | use official Oracle Instant Client RPM | ||||
* | use official Oracle Instant Client RPM | Remi Collet | 2023-09-22 | 1 | -12/+20 |
| | |||||
* | Fix Security issue with external entity loading in XML without enabling it | Remi Collet | 2023-08-01 | 1 | -5/+16 |
| | | | | | | | GHSA-3qrf-m4j2-pcrr CVE-2023-3823 Fix Buffer mismanagement in phar_dir_read() GHSA-jqcx-ccgc-xwhv CVE-2023-3824 move httpd/nginx wants directive to config files in /etc | ||||
* | fix possible buffer overflow in date | Remi Collet | 2023-06-21 | 1 | -40/+44 |
| | | | | define %php72___phpize and %php72___phpconfig | ||||
* | Fix Missing error check and insufficient random bytes in HTTP Digest | Remi Collet | 2023-06-07 | 1 | -2/+10 |
| | | | | | | authentication for SOAP GHSA-76gg-c692-v2mw use oracle client library version 21.10 | ||||
* | fix #81744: Password_verify() always return true with some hash | Remi Collet | 2023-02-14 | 1 | -1/+15 |
| | | | | | | | | CVE-2023-0567 fix #81746: 1-byte array overrun in common path resolve code CVE-2023-0568 fix DOS vulnerability when parsing multipart request body CVE-2023-0662 | ||||
* | pdo: fix #81740: PDO::quote() may return unquoted string | Remi Collet | 2022-12-19 | 1 | -3/+10 |
| | | | | | CVE-2022-31631 use oracle client library version 21.8 | ||||
* | hash: fix #81738: buffer overflow in hash_update() on long parameter. | Remi Collet | 2022-10-24 | 1 | -1/+7 |
| | | | | CVE-2022-37454 | ||||
* | phar: fix #81726 DOS when using quine gzip file. CVE-2022-31628 | Remi Collet | 2022-09-27 | 1 | -2/+2 |
| | | | | | | core: fix #81727 Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. CVE-2022-31629 use oracle client library version 21.7 | ||||
* | phar: fix #81726 DOS when using quine gzip file. CVE-2022-31628 | Remi Collet | 2022-09-27 | 1 | -5/+16 |
| | | | | | | core: fix #81727 Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. CVE-2022-31629 use oracle client library version 21.7 | ||||
* | use oracle client library version 21.6 | Remi Collet | 2022-06-07 | 1 | -9/+13 |
| | | | | | mysqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626 pgsql: fix #81720: Uninitialized array in pg_query_params(). CVE-2022-31625 | ||||
* | Fix #79971 special character is breaking the path in xml function | Remi Collet | 2021-11-15 | 1 | -1/+7 |
| | | | | CVE-2021-21707 | ||||
* | fix PHP-FPM oob R/W in root process leading to priv escalation | Remi Collet | 2021-10-20 | 1 | -5/+12 |
| | | | | | | CVE-2021-21703 use libicu version 69 use oracle client library version 21.3 | ||||
* | fix intl build on F35 | Remi Collet | 2021-09-07 | 1 | -1/+6 |
| | |||||
* | Fix #81211 Symlinks are followed when creating PHAR archive | Remi Collet | 2021-08-25 | 1 | -1/+6 |
| | |||||
* | Fix #81122 SSRF bypass in FILTER_VALIDATE_URL | Remi Collet | 2021-06-28 | 1 | -3/+16 |
| | | | | | | | | | CVE-2021-21705 Fix #76448 Stack buffer overflow in firebird_info_cb Fix #76449 SIGSEGV in firebird_handle_doer Fix #76450 SIGSEGV in firebird_stmt_execute Fix #76452 Crash while parsing blob data in firebird_fetch_blob CVE-2021-21704 | ||||
* | fix snmp extension build with net-snmp without DES | Remi Collet | 2021-05-27 | 1 | -1/+7 |
| | |||||
* | Fix #80710 imap_mail_compose() header injection | Remi Collet | 2021-04-28 | 1 | -17/+9 |
| | | | | use oracle client library version 21.1 | ||||
* | Fix #80672 Null Dereference in SoapClient | Remi Collet | 2021-02-03 | 1 | -1/+21 |
| | | | | | CVE-2021-21702 better fix for #77423 | ||||
* | Fix #77423 FILTER_VALIDATE_URL accepts URLs with invalid userinfo | Remi Collet | 2021-01-04 | 1 | -2/+10 |
| | | | | CVE-2020-7071 | ||||
* | Update to 7.2.34 - http://www.php.net/releases/7_2_34.php | Remi Collet | 2020-09-30 | 1 | -7/+4 |
| | |||||
* | F33 build | Remi Collet | 2020-08-20 | 1 | -0/+11 |
| | |||||
* | fix dates in changelog | Remi Collet | 2020-08-07 | 1 | -2/+2 |
| | |||||
* | Update to 7.2.33 - http://www.php.net/releases/7_2_33.php | Remi Collet | 2020-08-04 | 1 | -1/+4 |
| | |||||
* | Update to 7.2.32 (no change) | Remi Collet | 2020-07-08 | 1 | -5/+15 |
| | | | | display build system and provider in phpinfo (from 8.0) | ||||
* | rebuild using oniguruma5php | Remi Collet | 2020-06-09 | 1 | -3/+11 |
| | | | | build phpdbg only once | ||||
* | Update to 7.2.31 - http://www.php.net/releases/7_2_31.php | Remi Collet | 2020-05-12 | 1 | -1/+4 |
| | |||||
* | Update to 7.2.30 - http://www.php.net/releases/7_2_30.php | Remi Collet | 2020-04-15 | 1 | -1/+4 |
| | |||||
* | Update to 7.2.29 - http://www.php.net/releases/7_2_29.php | Remi Collet | 2020-03-17 | 1 | -2/+6 |
| | | | | use oracle client library version 19.6 (18.5 on EL-6) | ||||
* | Update to 7.2.28 - http://www.php.net/releases/7_2_28.php | Remi Collet | 2020-02-18 | 1 | -1/+4 |
| | |||||
* | Update to 7.2.27 - http://www.php.net/releases/7_2_27.php | Remi Collet | 2020-01-22 | 1 | -1/+5 |
| | |||||
* | - Update to 7.2.26 - http://www.php.net/releases/7_2_26.php | Remi Collet | 2019-12-17 | 1 | -2/+10 |
| | | | | - use oracle client library version 19.5 (18.5 on EL-6) | ||||
* | update to 7.2.26RC1 | Remi Collet | 2019-12-03 | 1 | -2/+5 |
| | |||||
* | Update to 7.2.25 - http://www.php.net/releases/7_2_25.php | Remi Collet | 2019-11-20 | 1 | -1/+4 |
| | |||||
* | update to 7.2.25RC1 | Remi Collet | 2019-11-05 | 1 | -2/+5 |
| | |||||
* | Update to 7.2.24 - http://www.php.net/releases/7_2_24.php | Remi Collet | 2019-10-22 | 1 | -1/+4 |
| | |||||
* | update to 7.2.24RC1 | Remi Collet | 2019-10-08 | 1 | -2/+5 |
| | |||||
* | Update to 7.2.23 - http://www.php.net/releases/7_2_23.php | Remi Collet | 2019-09-25 | 1 | -1/+4 |
| | |||||
* | add tarball signature check | Remi Collet | 2019-09-11 | 1 | -0/+6 |
| | |||||
* | 7.2.23RC1 | Remi Collet | 2019-09-10 | 1 | -4/+7 |
| | |||||
* | - Update to 7.2.22 - http://www.php.net/releases/7_2_22.php | Remi Collet | 2019-08-28 | 1 | -1/+8 |
| | | | | | - fix generator incorrectly reports non-releasable $this as GC child https://bugs.php.net/78412 | ||||
* | 7.2.22RC1 | Remi Collet | 2019-08-19 | 1 | -2/+5 |
| | |||||
* | Update to 7.2.21 - http://www.php.net/releases/7_2_21.php | Remi Collet | 2019-07-30 | 1 | -3/+4 |
| | |||||
* | - update to 7.2.21RC1 | Remi Collet | 2019-07-16 | 1 | -2/+8 |
| | | | | - add upstream patch for #78297 | ||||
* | - Update to 7.2.20 - http://www.php.net/releases/7_2_20.php | Remi Collet | 2019-07-02 | 1 | -4/+5 |
| | | | | - disable opcache.huge_code_pages in default configuration | ||||
* | 7.2.20RC3 | Remi Collet | 2019-06-20 | 1 | -1/+4 |
| | |||||
* | 7.2.20RC2 | Remi Collet | 2019-06-18 | 1 | -2/+5 |
| | |||||
* | use oracle client library version 19.3 | Remi Collet | 2019-06-17 | 1 | -2/+12 |
| |