From 61237ab76efb8967c10932820da1a19ef21f20c4 Mon Sep 17 00:00:00 2001 From: Remi Collet Date: Tue, 29 Sep 2020 10:53:09 +0200 Subject: Core: Fix #79699 PHP parses encoded cookie names so malicious `__Host-` cookies can be sent CVE-2020-7070 --- failed.txt | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'failed.txt') diff --git a/failed.txt b/failed.txt index 3ef0d58..603794a 100644 --- a/failed.txt +++ b/failed.txt @@ -1,12 +1,14 @@ -===== 7.0.33-16 (2020-01-21) +===== 7.0.33-23 (2020-01-21) $ grep -r 'Tests failed' /var/lib/mock/*/build.log /var/lib/mock/el6i/build.log:Tests failed : 0 -/var/lib/mock/el6x/build.log:Tests failed : 0 +/var/lib/mock/el6x/build.log:Tests failed : 1 /var/lib/mock/el7x/build.log:Tests failed : 1 +el6x: + Bug #54992: Stream not closed and error not returned when SSL CN_match fails [ext/openssl/tests/bug54992.phpt] el7x: Bug #75457 (heap-use-after-free in php7.0.25) [ext/pcre/tests/bug75457.phpt] -- cgit