From 2d3b0d79f3018e54d2d3aeab873d9f6f266c4b12 Mon Sep 17 00:00:00 2001 From: Remi Collet Date: Thu, 23 Jun 2022 08:06:56 +0200 Subject: rebuild with gd 2.3.3 myqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626 --- php55.spec | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-) (limited to 'php55.spec') diff --git a/php55.spec b/php55.spec index 8701fd7..5111ba0 100644 --- a/php55.spec +++ b/php55.spec @@ -141,7 +141,7 @@ Summary: PHP scripting language for creating dynamic web sites Name: php Version: 5.5.38 -Release: 12%{?dist} +Release: 13%{?dist} # All files licensed under PHP version 3.01, except # Zend is licensed under Zend # TSRM is licensed under BSD @@ -266,6 +266,7 @@ Patch160: bug77231.patch Patch161: bug77242.patch Patch162: bug77380.patch Patch163: bug78599.patch +Patch164: bug81719.patch # Security fixes (200+) @@ -816,12 +817,7 @@ License: PHP and BSD Requires: php-common%{?_isa} = %{version}-%{release} BuildRequires: t1lib-devel %if %{with_libgd} -BuildRequires: gd-devel >= 2.1.1 -%if 0%{?fedora} <= 19 && 0%{?rhel} <= 7 -Requires: gd-last%{?_isa} >= 2.1.1 -%else -Requires: gd%{?_isa} >= 2.1.1 -%endif +BuildRequires: gd-devel >= 2.3.3 %else # Required to build the bundled GD library BuildRequires: libjpeg-devel @@ -1095,6 +1091,7 @@ rm -rf ext/json %patch161 -p1 -b .bug77242 %patch162 -p1 -b .bug77380 %patch163 -p1 -b .bug78599 +%patch164 -p1 -b .bug81719 # Fixes for tests %patch300 -p1 -b .datetests @@ -1108,7 +1105,7 @@ rm -rf ext/json # WIP patch # Prevent %%doc confusion over LICENSE files -cp Zend/LICENSE Zend/ZEND_LICENSE +cp Zend/LICENSE ZEND_LICENSE cp TSRM/LICENSE TSRM_LICENSE cp ext/ereg/regex/COPYRIGHT regex_COPYRIGHT %if ! %{with_libgd} @@ -1985,7 +1982,7 @@ EOF %files common -f files.common %defattr(-,root,root) %doc CODING_STANDARDS CREDITS EXTENSIONS LICENSE NEWS README* -%doc Zend/ZEND_* TSRM_LICENSE regex_COPYRIGHT +%doc ZEND_LICENSE TSRM_LICENSE regex_COPYRIGHT %doc libmagic_LICENSE %doc phar_LICENSE %doc php.ini-* @@ -2119,6 +2116,10 @@ EOF %changelog +* Thu Jun 23 2022 Remi Collet - 5.5.38-13 +- rebuild with gd 2.3.3 +- myqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626 + * Tue Oct 22 2019 Remi Collet - 5.5.38-12 - FPM: Fix CVE-2019-11043 env_path_info underflow in fpm_main.c -- cgit