summaryrefslogtreecommitdiffstats
path: root/php.spec
diff options
context:
space:
mode:
Diffstat (limited to 'php.spec')
-rw-r--r--php.spec13
1 files changed, 10 insertions, 3 deletions
diff --git a/php.spec b/php.spec
index 38c74b4..9eb972c 100644
--- a/php.spec
+++ b/php.spec
@@ -126,7 +126,7 @@
Summary: PHP scripting language for creating dynamic web sites
Name: %{?scl_prefix}php
Version: %{upver}%{?rcver:~%{rcver}}
-Release: 1%{?dist}
+Release: 2%{?dist}
# All files licensed under PHP version 3.01, except
# Zend is licensed under Zend
# TSRM is licensed under BSD
@@ -196,6 +196,7 @@ Patch100: php-bug80682.patch
Patch101: php-bug80783.patch
# Security fixes (200+)
+Patch200: php-bug81026.patch
# Fixes for tests (300+)
# Factory is droped from system tzdata
@@ -858,7 +859,7 @@ Group: System Environment/Libraries
License: PHP
Requires: %{?scl_prefix}php-common%{?_isa} = %{version}-%{release}
# Upstream requires 4.0, we require 50 to ensure use of libicu-last / libicu65
-BuildRequires: libicu-devel >= 50
+BuildRequires: libicu-devel >= 69
%description intl
@@ -968,6 +969,7 @@ sed -e 's/php-devel/%{?scl_prefix}php-devel/' -i scripts/phpize.in
%patch101 -p1 -b .bug80783
# security patches
+%patch200 -p1 -b .bug81026
# Fixes for tests
%patch300 -p1 -b .datetests
@@ -1375,7 +1377,7 @@ popd
%check
%if %runselftest
-cd build-apache
+cd build-fpm
# Run tests, using the CLI SAPI
export NO_INTERACTION=1 REPORT_EXIT_STATUS=1 MALLOC_CHECK_=2
@@ -1919,6 +1921,11 @@ fi
%changelog
+* Wed Oct 20 2021 Remi Collet <remi@remirepo.net> - 7.3.31-2
+- fix PHP-FPM oob R/W in root process leading to priv escalation
+ CVE-2021-21703
+- use libicu version 69
+
* Tue Sep 21 2021 Remi Collet <remi@remirepo.net> - 7.3.31-1
- Update to 7.3.31 - http://www.php.net/releases/7_3_31.php
- use oracle client library version 21.3