From ad578fac5ca84ea0050f4b25cd51fbd8535404a1 Mon Sep 17 00:00:00 2001 From: Remi Collet Date: Wed, 15 Feb 2023 10:38:28 +0100 Subject: fix #81744: Password_verify() always return true with some hash CVE-2023-0567 fix #81746: 1-byte array overrun in common path resolve code CVE-2023-0568 fix DOS vulnerability when parsing multipart request body CVE-2023-0662 --- failed.txt | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) (limited to 'failed.txt') diff --git a/failed.txt b/failed.txt index cf12e07..c2cb23f 100644 --- a/failed.txt +++ b/failed.txt @@ -1,15 +1,12 @@ -===== 7.1.33-12 (2021-02-03) +===== 7.1.33-24 (2023-02-15) $ grep -r 'Tests failed' /var/lib/mock/*/build.log -/var/lib/mock/el7x/build.log:Tests failed : 4 +/var/lib/mock/el7x/build.log:Tests failed : 18 -el7x - 4 Bug #33414 [1] (Comprehensive list of incorrect days returned after strotime() / date() tests) [ext/date/tests/bug33414-1.phpt] - 4 Bug #33415 [2] (Possibly invalid non-one-hour DST or timezone shifts) [ext/date/tests/bug33415-2.phpt] - 4 Bug #73837: Milliseconds in DateTime() [ext/date/tests/bug73837.phpt] - 4 date_modify() function [1] [ext/date/tests/date_modify-1.phpt] +el7x: + 2 related to tzdata, expired test cert and openssl policy 1 proc_open give erratic test results :( -- cgit