From acaef9bcc0a215543c7cbf827b0068eac080910b Mon Sep 17 00:00:00 2001 From: Remi Collet Date: Tue, 5 Mar 2019 11:44:26 +0100 Subject: update test results + add CVEs --- php70.spec | 21 ++++++++++++++++----- 1 file changed, 16 insertions(+), 5 deletions(-) (limited to 'php70.spec') diff --git a/php70.spec b/php70.spec index 1df1c1f..638a048 100644 --- a/php70.spec +++ b/php70.spec @@ -1820,15 +1820,15 @@ rm -rf $RPM_BUILD_ROOT%{_libdir}/php/modules/*.a \ rm -f README.{Zeus,QNX,CVS-RULES} -posttrans +%posttrans %if %{?fedora}%{!?fedora:99} < 28 cat << EOF ===================================================================== - WARNING : PHP 7.0 have reached its "End of Life" in December 2018. - Even, if this package includes some of the important security fix, - backported from 7.1, - The UPGRADE to a maintained version is very strongly RECOMMENDED. + WARNING : PHP 7.0 have reached its "End of Life" in + December 2018. Even, if this package includes some of + the important security fix, backported from 7.1, the + UPGRADE to a maintained version is very strongly RECOMMENDED. ===================================================================== EOF @@ -2083,19 +2083,30 @@ fi * Wed Jan 9 2019 Remi Collet - 7.0.33-2 - core: Fix #77369 memcpy with negative length via crafted DNS response + CVE-2019-9022 - mbstring: Fix #77370 buffer overflow on mb regex functions - fetch_token + CVE-2019-9023 Fix #77371 heap buffer overflow in mb regex functions compile_string_node + CVE-2019-9023 Fix #77381 heap buffer overflow in multibyte match_at + CVE-2019-9023 Fix #77382 heap buffer overflow in expand_case_fold_string + CVE-2019-9023 Fix #77385 buffer overflow in fetch_token + CVE-2019-9023 Fix #77394 buffer overflow in multibyte case folding - unicode + CVE-2019-9023 Fix #77418 heap overflow in utf32be_mbc_to_code + CVE-2019-9023 - phar: Fix #77247 heap buffer overflow in phar_detect_phar_fname_ext + CVE-2019-9021 - xmlrpc: Fix #77242 heap out of bounds read in xmlrpc_decode + CVE-2019-9020 Fix #77380 global out of bounds read in xmlrpc base64 code + CVE-2019-9024 * Wed Dec 5 2018 Remi Collet - 7.0.33-1 - Update to 7.0.33 - http://www.php.net/releases/7_0_33.php -- cgit