From 8d3fbacab4be105a9c72cc580a8b95b8701140c5 Mon Sep 17 00:00:00 2001 From: Remi Collet Date: Tue, 21 Jan 2020 10:51:41 +0100 Subject: mbstring: Fix #79037 global buffer-overflow in mbfl_filt_conv_big5_wchar CVE-2020-7060 standard: Fix #79099 OOB read in php_strip_tags_ex CVE-2020-7059 --- php56.spec | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) (limited to 'php56.spec') diff --git a/php56.spec b/php56.spec index 654b6a9..6f36c42 100644 --- a/php56.spec +++ b/php56.spec @@ -152,7 +152,7 @@ Summary: PHP scripting language for creating dynamic web sites Name: php Version: 5.6.40 -Release: 15%{?dist} +Release: 16%{?dist} # All files licensed under PHP version 3.01, except # Zend is licensed under Zend # TSRM is licensed under BSD @@ -240,6 +240,8 @@ Patch229: php-bug78862.patch Patch230: php-bug78863.patch Patch231: php-bug78793.patch Patch232: php-bug78910.patch +Patch233: php-bug79099.patch +Patch234: php-bug79037.patch # Fixes for tests (300+) # Factory is droped from system tzdata @@ -1031,6 +1033,8 @@ echo CIBLE = %{name}-%{version}-%{release} oci8=%{with_oci8} libzip=%{with_libzi %patch230 -p1 -b .bug78863 %patch231 -p1 -b .bug78793 %patch232 -p1 -b .bug78910 +%patch233 -p1 -b .bug79099 +%patch234 -p1 -b .bug79037 # Fixes for tests %patch300 -p1 -b .datetests @@ -2083,6 +2087,14 @@ EOF %changelog +* Tue Jan 21 2020 Remi Collet - 5.6.40-16 +- mbstring: + Fix #79037 global buffer-overflow in mbfl_filt_conv_big5_wchar + CVE-2020-7060 +- standard: + Fix #79099 OOB read in php_strip_tags_ex + CVE-2020-7059 + * Tue Dec 17 2019 Remi Collet - 5.6.40-15 - bcmath: Fix #78878 Buffer underflow in bc_shift_addsub -- cgit