From 35face5e61d1f4242edd978b1fb6995a2858a8db Mon Sep 17 00:00:00 2001 From: Remi Collet Date: Mon, 15 Nov 2021 11:36:00 +0100 Subject: Fix #79971 special character is breaking the path in xml function CVE-2021-21707 --- php56.spec | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'php56.spec') diff --git a/php56.spec b/php56.spec index 657a442..9345eb8 100644 --- a/php56.spec +++ b/php56.spec @@ -143,7 +143,7 @@ Summary: PHP scripting language for creating dynamic web sites Name: php Version: 5.6.40 -Release: 31%{?dist} +Release: 32%{?dist} # All files licensed under PHP version 3.01, except # Zend is licensed under Zend # TSRM is licensed under BSD @@ -251,6 +251,7 @@ Patch250: php-bug81122.patch Patch251: php-bug76450.patch Patch252: php-bug81211.patch Patch253: php-bug81026.patch +Patch254: php-bug79971.patch # Fixes for tests (300+) # Factory is droped from system tzdata @@ -1066,6 +1067,7 @@ echo CIBLE = %{name}-%{version}-%{release} oci8=%{with_oci8} libzip=%{with_libzi %patch251 -p1 -b .bug76450 %patch252 -p1 -b .bug81211 %patch253 -p1 -b .bug81026 +%patch254 -p1 -b .bug79971 # Fixes for tests %patch300 -p1 -b .datetests @@ -2122,6 +2124,10 @@ EOF %changelog +* Mon Nov 15 2021 Remi Collet - 5.6.40-32 +- Fix #79971 special character is breaking the path in xml function + CVE-2021-21707 + * Wed Oct 20 2021 Remi Collet - 5.6.40-31 - fix PHP-FPM oob R/W in root process leading to priv escalation CVE-2021-21703 -- cgit