summaryrefslogtreecommitdiffstats
path: root/php.spec
Commit message (Collapse)AuthorAgeFilesLines
* Fix XSS within status endpointHEADmasterRemi Collet3 days1-3/+37
| | | | | | | | | | | | | | | | | | CVE-2026-6735 Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 Fix SQL injection via NUL bytes in quoted strings CVE-2025-14179 Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 Fix Broken Apache map value NULL check CVE-2026-7262 Fix Signed integer overflow of char array offset CVE-2026-7568 Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258
* Fix Null byte termination in dns_get_record()Remi Collet2025-12-181-2/+23
| | | | | | | | GHSA-www2-q4fc-65wf Fix Heap buffer overflow in array_merge() CVE-2025-14178 Fix Information Leak of Memory in getimagesize CVE-2025-14177
* Fix pgsql extension does not check for errors during escapingRemi Collet2025-07-031-2/+16
| | | | | | | | CVE-2025-1735 Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 Fix Null byte termination in hostnames CVE-2025-1220
* Fix libxml streams use wrong `content-type` header when requesting a ↵Remi Collet2025-03-131-24/+35
| | | | | | | | | | | | | | | redirected resource CVE-2025-1219 Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 use oracle client library version 23.7 on x86_64 and aarch64
* better fixRemi Collet2025-02-131-1/+2
|
* backport fix for ICU 74+Remi Collet2025-02-131-8/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+ backport fix for ICU 74+
* update Oracle versionRemi Collet2025-01-211-2/+2
|
* Fix Leak partial content of the heap through heap buffer over-readRemi Collet2024-11-271-1/+7
| | | | CVE-2024-8929
* Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI InterfaceRemi Collet2024-11-221-2/+28
| | | | | | | | | | | | GHSA-4w77-75f9-2c8w Fix OOB access in ldap_escape CVE-2024-8932 Fix Integer overflow in the dblib/firebird quoter causing OOB writes CVE-2024-11236 Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233
* Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGIRemi Collet2024-09-261-5/+26
| | | | | | | | | | | | | CVE-2024-4577 Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability CVE-2024-8926 Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 Fix Logs from childrens may be altered CVE-2024-9026 Fix Erroneous parsing of multipart form data CVE-2024-8925 use ICU 74.2
* add backport for https://bugs.php.net/79589Remi Collet2024-08-261-3/+7
| | | | error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading
* use oracle client library version 23.5 on x86_64Remi Collet2024-07-311-7/+15
|
* Fix filter bypass in filter_var FILTER_VALIDATE_URLRemi Collet2024-06-041-3/+9
| | | | CVE-2024-5458
* Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fixRemi Collet2024-04-101-1/+11
| | | | | | CVE-2024-2756 Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096
* use oracle client library version 21.13 on x86_64Remi Collet2024-03-061-2/+22
| | | | | patch test suite for zlib-ng add EOL message
* use ICU 73.2Remi Collet2023-12-121-7/+15
| | | | | use oracle client library version 21.12 on x86_64, 19.19 on aarch64 add fixes for libxml 2.11 and 2.12 from 8.1
* use oracle client library version 21.11 on x86_64, 19.19 on aarch64Remi Collet2023-09-221-13/+26
| | | | use official Oracle Instant Client RPM
* Update to 8.0.30 - http://www.php.net/releases/8_0_30.phpv8.0.30Remi Collet2023-08-031-6/+10
| | | | move httpd/nginx wants directive to config files in /etc
* Update to 8.0.29 - http://www.php.net/releases/8_0_29.phpv8.0.29Remi Collet2023-06-081-2/+5
|
* define %php80___phpize and %php80___phpconfigRemi Collet2023-05-111-25/+24
|
* use ICU 72.1Remi Collet2023-04-211-5/+14
| | | | | | use oracle client library version 21.10 fix missing TZData version in intl phpinfo fix possible buffer overflow in date
* F38: enable imap extensionRemi Collet2023-02-211-6/+4
|
* Update to 8.0.28 - http://www.php.net/releases/8_0_28.phpv8.0.28Remi Collet2023-02-141-1/+10
| | | | add dependency on pcre2 minimal version
* add dependency on pcre2 minimal versionRemi Collet2023-02-011-1/+7
|
* Update to 8.0.27 - http://www.php.net/releases/8_0_27.phpv8.0.27Remi Collet2023-01-031-3/+6
| | | | use oracle client library version 21.8
* Update to 8.0.26 - http://www.php.net/releases/8_0_26.phpv8.0.26Remi Collet2022-11-231-1/+4
|
* update to 8.0.26RC1Remi Collet2022-11-091-2/+5
|
* Update to 8.0.25 - http://www.php.net/releases/8_0_25.phpv8.0.25Remi Collet2022-10-251-1/+4
|
* update to 8.0.25RC1Remi Collet2022-10-111-2/+5
|
* Update to 8.0.24 - http://www.php.net/releases/8_0_24.phpv8.0.24Remi Collet2022-09-291-1/+4
|
* update to 8.0.24RC1Remi Collet2022-09-141-2/+8
|
* Update to 8.0.23 - http://www.php.net/releases/8_0_23.phpv8.0.23Remi Collet2022-08-301-1/+4
|
* update to 8.0.23RC1Remi Collet2022-08-171-7/+9
| | | | | use oracle client library version 21.7 use ICU 71.1
* use libicu version 71.1Remi Collet2022-08-161-5/+8
|
* Update to 8.0.22 - http://www.php.net/releases/8_0_22.phpv8.0.22Remi Collet2022-08-021-2/+5
|
* fix snmp backportRemi Collet2022-07-291-1/+4
|
* update to 8.0.22RC1Remi Collet2022-07-191-3/+6
|
* Update to 8.0.21 - http://www.php.net/releases/8_0_21.phpv8.0.21Remi Collet2022-07-061-1/+5
| | | | rebuild with new sources
* Update to 8.0.21 - http://www.php.net/releases/8_0_21.phpRemi Collet2022-07-051-1/+4
|
* update to 8.0.21RC1Remi Collet2022-06-211-7/+9
|
* Update to 8.0.20 - http://www.php.net/releases/8_0_20.phpv8.0.20Remi Collet2022-06-081-2/+5
|
* add upstream patch to initialize pcre before mbstringRemi Collet2022-06-031-1/+6
|
* update to 8.0.20RC1Remi Collet2022-05-251-2/+5
|
* Update to 8.0.19 - http://www.php.net/releases/8_0_19.phpv8.0.19Remi Collet2022-05-101-2/+6
| | | | use oracle client library version 21.6
* update to 8.0.19RC1Remi Collet2022-04-261-4/+7
|
* Update to 8.0.18 - http://www.php.net/releases/8_0_18.phpv8.0.18Remi Collet2022-04-131-1/+4
|
* update to 8.0.18RC1Remi Collet2022-03-311-3/+6
|
* Update to 8.0.17 - http://www.php.net/releases/8_0_17.phpv8.0.17Remi Collet2022-03-151-1/+4
|
* update to 8.0.17RC1Remi Collet2022-03-021-5/+6
|
* retrieve tzdata versionRemi Collet2022-02-221-7/+7
| | | | use oracle client library version 21.5
generated by cgit (git 2.34.1) at 2026-05-13 20:05:47 +0000