From b2def4956b5f53325511b3f8fd8a9f0f52d8c85a Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@remirepo.net>
Date: Wed, 27 Nov 2024 11:59:13 +0100
Subject: Fix Leak partial content of the heap through heap buffer over-read

  CVE-2024-8929
---
 php80.spec | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

(limited to 'php80.spec')

diff --git a/php80.spec b/php80.spec
index a39c90d..0866f36 100644
--- a/php80.spec
+++ b/php80.spec
@@ -124,7 +124,7 @@
 Summary: PHP scripting language for creating dynamic web sites
 Name: php
 Version: %{upver}%{?rcver:~%{rcver}}
-Release: 10%{?dist}
+Release: 11%{?dist}
 # All files licensed under PHP version 3.01, except
 # Zend is licensed under Zend
 # TSRM is licensed under BSD
@@ -213,6 +213,7 @@ Patch208: php-cve-2024-11234.patch
 Patch209: php-cve-2024-8932.patch
 Patch210: php-cve-2024-11233.patch
 Patch211: php-ghsa-4w77-75f9-2c8w.patch
+Patch212: php-cve-2024-8929.patch
 
 # Fixes for tests (300+)
 # Factory is droped from system tzdata
@@ -1247,6 +1248,7 @@ rm ext/openssl/tests/p12_with_extra_certs.p12
 %patch -P209 -p1 -b .cve8932
 %patch -P210 -p1 -b .cve11233
 %patch -P211 -p1 -b .ghsa4w77
+%patch -P212 -p1 -b .cve8929
 
 # Fixes for tests related to tzdata
 %patch -P300 -p1 -b .datetests
@@ -2252,6 +2254,10 @@ EOF
 
 
 %changelog
+* Wed Nov 27 2024 Remi Collet <remi@remirepo.net> - 8.0.30-11
+- Fix Leak partial content of the heap through heap buffer over-read
+  CVE-2024-8929
+
 * Fri Nov 22 2024 Remi Collet <remi@remirepo.net> - 8.0.30-10
 - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
   GHSA-4w77-75f9-2c8w
-- 
cgit