|
|
|
|
Changelog for php7-ctype-7.4.33-37.2.x86_64.rpm :
* Thu May 30 2024 Arjen de Korte - Fix check for newer versions of ICU + php74-fix-newer-versions-icu.patch * Fri Apr 19 2024 pgajdosAATTsuse.com- security update- added patches fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix + php74-CVE-2024-2756.patch fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk + php74-CVE-2024-3096.patch * Thu Aug 24 2023 pgajdosAATTsuse.com- security update- added patches fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled + php74-CVE-2023-3823.patch fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read() + php74-CVE-2023-3824.patch * Thu Jun 15 2023 pgajdosAATTsuse.com- security update- added patches fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP + php74-CVE-2023-3247.patch * Tue Mar 21 2023 pgajdosAATTsuse.com- security update- added patches fix CVE-2022-4900 [bsc#1209537], potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable + php74-CVE-2022-4900.patch * Tue Mar 14 2023 pgajdosAATTsuse.com- fix potential buffer overflow [bsc#1208199]- modified patches % php-systzdata-v19.patch (refreshed) * Fri Feb 17 2023 pgajdosAATTsuse.com- security update- added patches fix CVE-2023-0568 [bsc#1208366], NULL byte off-by-one in php_check_specific_open_basedir + php74-CVE-2023-0568.patch fix CVE-2023-0662 [bsc#1208367], DoS vulnerability when parsing multipart request body + php74-CVE-2023-0662.patch https://github.com/php/php-src/commit/a92acbad873a05470af1a47cb785a18eadd827b5, relates to CVE-2023-0567 [bsc#1208388] + php74-crypt-possible-buffer-overread.patch * Mon Jan 09 2023 munix9AATTgooglemail.com- Add fix-NETSNMP_DISABLE_DES.patch to solve \"error: \'usmDESPrivProtocol\' undeclared\" on Factory/TW * Mon Jan 09 2023 pgajdosAATTsuse.com- security update- added patches fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string + php7-CVE-2022-31631.patch * Thu Nov 03 2022 Arjen de Korte - updated to 7.4.33: This is a security release (CVE-2022-31630, CVE-2022-37454). See https://www.php.net/ChangeLog-7.php#7.4.33 * Thu Sep 29 2022 Arjen de Korte - updated to 7.4.32: This is a security release (CVE-2022-31628, CVE-2022-31629). See https://www.php.net/ChangeLog-7.php#7.4.32 * Thu Jun 09 2022 Arjen de Korte - updated to 7.4.30: This is a security release (CVE-2022-31625, CVE-2022-31626). See https://www.php.net/ChangeLog-7.php#7.4.30 * Fri May 06 2022 pgajdosAATTsuse.com- added patches fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d + php7-signedness-php_filter_validate_domain.patch * Thu Apr 14 2022 Arjen de Korte - updated to 7.4.29: This is a bug fix release. See https://www.php.net/ChangeLog-7.php#7.4.29 * Mon Apr 11 2022 pgajdosAATTsuse.com- fpm %postrans: check whether sytemctl is available * Fri Apr 08 2022 Arjen de Korte - Disable build with \'-z now\' as it breaks the php-mysql extension (boo#1197994) * Thu Mar 31 2022 Arjen de Korte - build PHP-FPM with libacl support (boo#1196870) * Fri Feb 18 2022 Arjen de Korte - updated to 7.4.28: This is a security release (CVE-2021-21708). See https://www.php.net/ChangeLog-7.php#7.4.28 * Sun Jan 09 2022 Arjen de Korte - use /tmp to store session information (boo#1194414) % php-ini.patch * Thu Dec 16 2021 Arjen de Korte - updated to 7.4.27: This is a bug fix release. See https://www.php.net/ChangeLog-7.php#7.4.27 * Wed Dec 01 2021 Arjen de Korte - provide configuration for PHP-FPM out of the box (boo#1192414)- package missing php.ini for PHP-FPM (boo#1192672) * Thu Nov 18 2021 Arjen de Korte - updated to 7.4.26: This is a security release (CVE-2021-21707) which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.26 * Fri Oct 22 2021 Arjen de Korte - updated to 7.4.25: This is a security release (CVE-2021-21703) which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.25 * Mon Sep 27 2021 pgajdosAATTsuse.com- previous version updates fixes also: CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071, CVE-2021-21702,CVE-2021-21704,CVE-2021-21705 bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706, bsc#1182049,bsc#1188035,bsc#1188037 * Thu Sep 23 2021 Arjen de Korte - updated to 7.4.24: This is a security release (CVE-2021-21706) which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.24 * Wed Sep 15 2021 pgajdosAATTsuse.com- added patches https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f + php7-gd-removed-unused-constants.patch * Thu Aug 26 2021 Arjen de Korte - updated to 7.4.23: This is a security release which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23 * Thu Jul 29 2021 Arjen de Korte - updated to 7.4.22: This is a security and bug fix release. See https://www.php.net/ChangeLog-7.php#7.4.22 * Thu Jul 01 2021 Arjen de Korte - updated to 7.4.21: This is a security release which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21 * Thu Jun 03 2021 Arjen de Korte - updated to 7.4.20: This is a bug fix release. See https://www.php.net/ChangeLog-7.php#7.4.20 * Thu May 06 2021 Arjen de Korte - updated to 7.4.19: This release reverts a bug related to PDO_pgsql that was introduced in PHP 7.4.18. * Fri Apr 30 2021 Arjen de Korte - updated to 7.4.18: This is a security bug fix release. See https://www.php.net/ChangeLog-7.php#7.4.18 * Tue Apr 13 2021 Arjen de Korte - Do not hard-depend on systemd: use systemd_ordering instead of systemd_requires. * Thu Mar 04 2021 Arjen de Korte - updated to 7.4.16: This is a bug fix release. See https://www.php.net/ChangeLog-7.php#7.4.16 * Mon Feb 01 2021 Arjen de Korte - updated to 7.4.15: This is a security release which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15- suppress warning for all flavors not equal to \"\" in multibuild % php7.rpmlintrc * Fri Jan 29 2021 Arjen de Korte - add versioning to php-sapi as well * Sat Jan 23 2021 Arjen de Korte - require this PHP version of subpackages in Recommends/Suggests- run apache-rex tests in php7:test as packages need to be build first (otherwise tests run with previous version) * Sun Jan 17 2021 Arjen de Korte - add php_cfgdir and php_extdir macros * Fri Jan 15 2021 Arjen de Korte - deleted patch (redundant cast, both sides are already signed int) - php-odbc-cmp-int-cast.patch * Wed Jan 13 2021 Arjen de Korte - install php7-cli if no sapi is selected upon php7 installation- add conflicts with earlier version of php-cli, php-fastcgi and php-fpm * Mon Jan 11 2021 Arjen de Korte - put CLI binary in -cli subpackage so that other moduldes can depend on the php base package that remains (and provides files and maps common for all) * Fri Jan 08 2021 Arjen de Korte - use pkgconfig() to resolve BuildRequires where upstream uses it too- since php-7.4.0 when using --with-external-gd the configure options - -with-xpm, --with-freetype and --with-jpeg are not needed anymore (and neither are the respective BuildRequires)- add Recommends: php-openssl as many modules can optionally use it- use new %ldconfig macros in Tumbleweed * Thu Jan 07 2021 Arjen de Korte - build the MySQL Native Driver as a shared module (rather than builtin) to prevent a hard requirement for OpenSSL in the CLI * Thu Jan 07 2021 Arjen de Korte - updated to 7.4.14: This is a security release which also contains several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.14- make phar SOURCE_DATE_EPOCH aware so the timestamps in phar.phar are reproducible and sort filelist to include + php-build-reproducible-phar.patch + php-sort-filelist-phar.patch * Wed Jan 06 2021 Arjen de Korte - fix build failure for SLE_15 * Wed Jan 06 2021 pgajdosAATTsuse.com- deleted patches - php-openssl.patch (undocumented and not upstreamed patch for a long time) - php7-arm-build-fixes.patch (do not build for SLE12 anymore) - php-pts.patch (undocumented and not upstreamed patch for a long time)- improved patch documentation * Tue Jan 05 2021 pgajdosAATTsuse.com- use cli sapi php-config --libs * Mon Jan 04 2021 Arjen de Korte - build devel subpackage in cli configuration (otherwise include files for shared modules are missing) * Sun Jan 03 2021 Arjen de Korte - php-phar requires the php-zlib extension- trim specfile lint
|
|
|