From ea276d3f2e14d8458ebc417057c5e983a9b58264 Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@remirepo.net>
Date: Wed, 27 Nov 2024 17:09:50 +0100
Subject: Fix Leak partial content of the heap through heap buffer over-read
CVE-2024-8929
---
php74.spec | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
(limited to 'php74.spec')
diff --git a/php74.spec b/php74.spec
index d3d693e..d9a91d1 100644
--- a/php74.spec
+++ b/php74.spec
@@ -116,7 +116,7 @@
Summary: PHP scripting language for creating dynamic web sites
Name: php
Version: %{upver}%{?rcver:~%{rcver}}
-Release: 20%{?dist}
+Release: 21%{?dist}
# All files licensed under PHP version 3.01, except
# Zend is licensed under Zend
# TSRM is licensed under BSD
@@ -202,6 +202,7 @@ Patch215: php-cve-2024-11234.patch
Patch216: php-cve-2024-8932.patch
Patch217: php-cve-2024-11233.patch
Patch218: php-ghsa-4w77-75f9-2c8w.patch
+Patch219: php-cve-2024-8929.patch
# Fixes for tests (300+)
# Factory is droped from system tzdata
@@ -1232,6 +1233,7 @@ rm ext/openssl/tests/p12_with_extra_certs.p12
%patch -P216 -p1 -b .cve8932
%patch -P217 -p1 -b .cve11233
%patch -P218 -p1 -b .ghsa4w77
+%patch -P219 -p1 -b .cve8929
# Fixes for tests related to tzdata
%patch -P300 -p1 -b .datetests
@@ -2251,6 +2253,10 @@ EOF
%changelog
+* Wed Nov 27 2024 Remi Collet <remi@remirepo.net> - 7.4.33-21
+- Fix Leak partial content of the heap through heap buffer over-read
+ CVE-2024-8929
+
* Fri Nov 22 2024 Remi Collet <remi@remirepo.net> - 7.4.33-20
- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
GHSA-4w77-75f9-2c8w
--
cgit