Revisions of php5

Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 34)
- security update
- added patches
  fix CVE-2015-9253 [bsc#1081790], The php-fpm master process restarts a child process in an endless loop when using program execution functions
  + php5-CVE-2015-9253.patch
  fix CVE-2021-21702 [bsc#1182049], NULL pointer dereference in SoapClient
  + php5-CVE-2021-21702.patch
  fix CVE-2021-21703 [bsc#1192050], Local privilege escalation via PHP-FPM
  + php5-CVE-2021-21703.patch
  fix CVE-2021-21704 [bsc#1188035], security issues in pdo_firebase module
  + php5-CVE-2021-21704.patch
  fix CVE-2021-21705 [bsc#1188037], SSRF bypass in FILTER_VALIDATE_URL
  + php5-CVE-2021-21705.patch
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php5-CVE-2021-21707.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 33)
- security update
- added patches
  fix CVE-2020-7071 [bsc#1180706], FILTER_VALIDATE_URL accepts URLs with invalid userinfo
  + php5-CVE-2020-7071.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 32)
- security update
- added patches
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php5-CVE-2020-7070.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 31)
- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php5-CVE-2020-7068.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 30)
- security update
- added patches
  fix CVE-2019-11048 [bsc#1171999], supplying overly long filenames or field names if HTTP file uploads are allowed could lead to exhausting disk space on the server
  + php5-CVE-2019-11048.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 29)
- security update
- added patches
  fix CVE-2020-7064 [bsc#1168326], read one byte of uninitialized memory via malicious data
  + php5-CVE-2020-7064.patch
  fix CVE-2020-7066 [bsc#1168352], URL truncation if the URL contains zero (\0) character
  + php5-CVE-2020-7066.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 28)
- security update
- added patches
  fix CVE-2020-7062 [bsc#1165280], null pointer dereference when using file upload functionality under specific circumstances
  + php5-CVE-2020-7062.patch
  fix CVE-2020-7063 [bsc#1165289], creating PHAR archive using PharData:buildFromIterator() function will add files with default permissions
  + php5-CVE-2020-7063.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 27)
- fix the logic
- modified patches
  % php5-pspell-do-not-allow-ucs.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 26)
- add %apache_rex_deps
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 25)
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 24)
- added patches
  Do not allow ucs-2 and ucs-4 encodings [bsc#1161982].
  + php5-pspell-do-not-allow-ucs.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 23)
- security update
- added patches
  CVE-2019-11045 [bsc#1159923]
  + php5-CVE-2019-11045.patch
  CVE-2019-11046 [bsc#1159924]
  + php5-CVE-2019-11046.patch
  CVE-2019-11047 [bsc#1159922]
  + php5-CVE-2019-11047.patch
  CVE-2019-11050 [bsc#1159927]
  + php5-CVE-2019-11050.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 22)
- test with apache-rex
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 21)
- security update
- added patches
  CVE-2020-7059 [bsc#1162629]
  + php5-CVE-2020-7059.patch
  CVE-2020-7060 [bsc#1162632]
  + php5-CVE-2020-7060.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 20)
- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php5-CVE-2019-11036.patch
  CVE-2019-11041 [bsc#1146360]
  + php5-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php5-CVE-2019-11042.patch
  CVE-2019-11043 [bsc#1154999]
  + php5-CVE-2019-11043.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 19)
- security update
- added patches
  CVE-2019-11038 [bsc#1140118]
  + php-CVE-2019-11038.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 18)
- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 17)
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 16)
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
Petr Gajdos's avatar Petr Gajdos (pgajdos) committed (revision 15)
- security update
- added patches
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch
Displaying revisions 1 - 20 of 34
openSUSE Build Service is sponsored by