summaryrefslogtreecommitdiffstats
path: root/failed.txt
Commit message (Collapse)AuthorAgeFilesLines
* use oracle client library version 21.13 on x86_64, 19.19 on aarch64HEADmasterRemi Collet9 days1-2/+2
| | | | | | | Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096
* fix #81744: Password_verify() always return true with some hashRemi Collet2023-02-151-7/+3
| | | | | | | | CVE-2023-0567 fix #81746: 1-byte array overrun in common path resolve code CVE-2023-0568 fix DOS vulnerability when parsing multipart request body CVE-2023-0662
* Core:Remi Collet2020-09-291-2/+4
| | | | | Fix #79699 PHP parses encoded cookie names so malicious `__Host-` cookies can be sent CVE-2020-7070
* mbstring:Remi Collet2020-01-211-4/+2
| | | | | | | | Fix #79037 global buffer-overflow in mbfl_filt_conv_big5_wchar CVE-2020-7060 standard: Fix #79099 OOB read in php_strip_tags_ex CVE-2020-7059
* - bcmath:Remi Collet2019-12-171-1/+3
| | | | | | | | | | | | | | | | Fix #78878 Buffer underflow in bc_shift_addsub CVE-2019-11046 - core: Fix #78862 link() silently truncates after a null byte on Windows CVE-2019-11044 Fix #78863 DirectoryIterator class silently truncates after a null byte CVE-2019-11045 - exif Fix #78793 Use-after-free in exif parsing under memory sanitizer CVE-2019-11050 Fix #78910 Heap-buffer-overflow READ in exif CVE-2019-11047 - use oracle client library version 19.5 (18.5 on EL-6)
* Fix CVE-2019-11043 env_path_info underflow in fpm_main.cRemi Collet2019-10-221-1/+3
|
* From 7.1.32Remi Collet2019-08-281-1/+1
| | | | | | | - mbstring: Fix CVE-2019-13224 don't allow different encodings for onig_new_deluxe - pcre: Fix #75457 heap use-after-free in pcrelib
* - exif:Remi Collet2019-07-301-1/+1
| | | | | | | | | Fix #78256 heap-buffer-overflow on exif_process_user_comment CVE-2019-11042 Fix #78222 heap-buffer-overflow on exif_scan_thumbnail CVE-2019-11041 - phar: Fix #77919 Potential UAF in Phar RSHUTDOWN
* - iconv:Remi Collet2019-05-281-1/+1
| | | | | | | | | | Fix #78069 Out-of-bounds read in iconv.c:_php_iconv_mime_decode() CVE-2019-11039 - exif: Fix #77988 Heap-buffer-overflow on php_jpg_get16 CVE-2019-11040 - sqlite3: Fix #77967 Bypassing open_basedir restrictions via file uris
* - exif:Remi Collet2019-04-301-1/+1
| | | | | Fix #77950 Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG CVE-2019-11036
* - exif:Remi Collet2019-04-021-4/+2
| | | | | | | Fix #77753 Heap-buffer-overflow in php_ifd_get32s Fix #77831 Heap-buffer-overflow in exif_iif_add_value - sqlite3: Added sqlite3.defensive INI directive
* update test results + add CVEsRemi Collet2019-03-051-2/+4
|
* - core:Remi Collet2019-01-091-1/+1
| | | | | | | | | | | | | | | | | Fix #77369 memcpy with negative length via crafted DNS response - mbstring: Fix #77370 buffer overflow on mb regex functions - fetch_token Fix #77371 heap buffer overflow in mb regex functions compile_string_node Fix #77381 heap buffer overflow in multibyte match_at Fix #77382 heap buffer overflow in expand_case_fold_string Fix #77385 buffer overflow in fetch_token Fix #77394 buffer overflow in multibyte case folding - unicode Fix #77418 heap overflow in utf32be_mbc_to_code - phar: Fix #77247 heap buffer overflow in phar_detect_phar_fname_ext - xmlrpc: Fix #77242 heap out of bounds read in xmlrpc_decode Fix #77380 global out of bounds read in xmlrpc base64 code
* Update to 7.0.33 - http://www.php.net/releases/7_0_33.phpRemi Collet2018-12-051-3/+1
| | | | use oracle client library version 18.3
* Update to 7.0.32 - http://www.php.net/releases/7_0_32.phpRemi Collet2018-09-111-1/+1
|
* Update to 7.0.31 - http://www.php.net/releases/7_0_31.phpRemi Collet2018-07-171-1/+1
|
* Update to 7.0.30 - http://www.php.net/releases/7_0_30.phpRemi Collet2018-04-241-1/+1
| | | | use systemd RuntimeDirectory instead of /etc/tmpfiles.d
* Update to 7.0.29 - http://www.php.net/releases/7_0_29.phpRemi Collet2018-03-281-1/+1
| | | | FPM: update default pool configuration for process.dumpable
* Update to 7.0.28 - http://www.php.net/releases/7_0_28.phpRemi Collet2018-02-271-3/+1
|
* v7.0.27Remi Collet2018-01-021-4/+2
|
* v7.0.27RC1Remi Collet2017-12-051-2/+4
|
* v7.0.26Remi Collet2017-11-211-1/+1
|
* v7.0.26RC1Remi Collet2017-11-071-9/+5
|
* v7.0.25Remi Collet2017-10-241-5/+7
|
* Update to 7.0.25RC1Remi Collet2017-10-111-2/+4
| | | | oci8 version is now 2.1.8
* v7.0.24Remi Collet2017-09-261-6/+4
|
* v7.0.24RC1Remi Collet2017-09-121-9/+11
|
* Update to 7.0.23 - http://www.php.net/releases/7_0_23.phpRemi Collet2017-08-291-3/+3
|
* Update to 7.0.23RC1Remi Collet2017-08-151-4/+2
| | | | oci8 version is now 2.1.7
* v7.0.22Remi Collet2017-08-021-2/+4
|
* v7.0.22RC1Remi Collet2017-07-181-4/+2
|
* retagRemi Collet2017-07-051-1/+3
|
* v7.0.21Remi Collet2017-07-041-1/+1
|
* 7.0.21RC1Remi Collet2017-06-211-4/+2
|
* v7.0.20Remi Collet2017-06-071-2/+4
|
* 7.0.20RC1Remi Collet2017-05-241-4/+2
|
* v7.0.19Remi Collet2017-05-091-2/+4
|
* 7.0.19RC1 new tagRemi Collet2017-04-271-2/+0
|
* 7.0.19RC1Remi Collet2017-04-251-10/+6
|
* v7.0.18Remi Collet2017-04-111-8/+7
|
* 7.0.18RC1Remi Collet2017-03-291-12/+16
|
* PHP 7.0.17Remi Collet2017-03-141-5/+5
|
* PHP 7.0.17RC1Remi Collet2017-02-281-5/+5
|
* PHP 7.0.15Remi Collet2017-02-141-2/+4
|
* PHP 7.0.16RC1 rebuild with new sourcesRemi Collet2017-02-021-3/+1
|
* PHP 7.0.16RC1Remi Collet2017-02-011-10/+7
|
* PHP 7.0.15Remi Collet2017-01-171-6/+9
|
* PHP 7.0.15RC1Remi Collet2017-01-051-7/+5
|
* PHP 7.0.14Remi Collet2016-12-071-18/+8
|
* PHP 7.0.14RC1Remi Collet2016-11-231-4/+10
|