From 85516dbd23e25135236ffb441d61dcdefd96eeaf Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@remirepo.net>
Date: Mon, 4 Mar 2019 14:58:46 +0100
Subject: - exif:   Fix #77509 Uninitialized read in exif_process_IFD_in_TIFF  
 Fix #77540 Invalid Read on exif_process_SOFn   Fix #77563 Uninitialized read
 in exif_process_IFD_in_MAKERNOTE   Fix #77659 Uninitialized read in
 exif_process_IFD_in_MAKERNOTE

---
 php56.spec | 37 +++++++++++++++++++++++++------------
 1 file changed, 25 insertions(+), 12 deletions(-)

(limited to 'php56.spec')

diff --git a/php56.spec b/php56.spec
index a7f67f9..e4c1a87 100644
--- a/php56.spec
+++ b/php56.spec
@@ -142,7 +142,7 @@
 Summary: PHP scripting language for creating dynamic web sites
 Name: php
 Version: 5.6.40
-Release: 1%{?dist}
+Release: 3%{?dist}
 # All files licensed under PHP version 3.01, except
 # Zend is licensed under Zend
 # TSRM is licensed under BSD
@@ -203,6 +203,8 @@ Patch91: php-5.6.3-oci8conf.patch
 Patch100: php-5.6.31-oci.patch
 
 # Security fixes (200+)
+Patch210: php-bug77540.patch
+Patch211: php-bug77563.patch
 
 # Fixes for tests (300+)
 # Factory is droped from system tzdata
@@ -962,6 +964,8 @@ echo CIBLE = %{name}-%{version}-%{release} oci8=%{with_oci8} libzip=%{with_libzi
 %patch100 -p1 -b .pdo_oci
 
 # security patches
+%patch210 -p1 -b .bug77540
+%patch211 -p1 -b .bug77563
 
 # Fixes for tests
 %patch300 -p1 -b .datetests
@@ -1730,17 +1734,6 @@ rm -rf $RPM_BUILD_ROOT%{_libdir}/php/modules/*.a \
 rm -f README.{Zeus,QNX,CVS-RULES}
 
 
-%pre common
-echo -e "\nWARNING : These %{name}-* RPMs are not official Fedora / Red Hat build and"
-echo -e "overrides the official ones. Don't file bugs on Fedora Project nor Red Hat.\n"
-echo -e "Use dedicated forum at http://forum.remirepo.net/\n"
-
-%if %{?fedora}%{!?fedora:99} < 28
-echo -e "WARNING : Fedora %{fedora} is now EOL :"
-echo -e "You should consider upgrading to a supported release.\n"
-%endif
-
-
 %if ! %{with_httpd2410}
 %pre fpm
 # Add the "apache" user as we don't require httpd
@@ -1820,6 +1813,19 @@ fi
 %postun embedded -p /sbin/ldconfig
 
 
+%posttrans common
+cat << EOF
+=====================================================================
+
+ WARNING : PHP 5.6 have reached its "End of Life" in January 2019.
+ Even, if this package includes some of the important security fix,
+ backported from 7.1,
+ The UPGRADE to a maintained version is very strongly RECOMMENDED.
+
+=====================================================================
+EOF
+
+
 %{!?_licensedir:%global license %%doc}
 
 %files
@@ -1990,6 +1996,13 @@ fi
 
 
 %changelog
+* Mon Mar  4 2019 Remi Collet <remi@remirepo.net> - 5.6.40-3
+- exif:
+  Fix #77509 Uninitialized read in exif_process_IFD_in_TIFF
+  Fix #77540 Invalid Read on exif_process_SOFn
+  Fix #77563 Uninitialized read in exif_process_IFD_in_MAKERNOTE
+  Fix #77659 Uninitialized read in exif_process_IFD_in_MAKERNOTE
+
 * Wed Jan  9 2019 Remi Collet <remi@remirepo.net> - 5.6.40-1
 - Update to 5.6.40 - http://www.php.net/releases/5_6_40.php
 
-- 
cgit