Commit Graph

8 Commits

Author SHA1 Message Date
Remi Collet
1d1654b533 Fix CVEs up to 8.1.34:
Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface  GHSA-4w77-75f9-2c8w
Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs  CVE-2024-11234
Fix Single byte overread with convert.quoted-printable-decode filter  CVE-2024-11233
Fix Leak partial content of the heap through heap buffer over-read  CVE-2024-8929
Fix libxml streams use wrong `content-type` header when requesting a redirected resource  CVE-2025-1219
Fix Stream HTTP wrapper header check might omit basic auth header  CVE-2025-1736
Fix Stream HTTP wrapper truncate redirect location to 1024 bytes  CVE-2025-1861
Fix Streams HTTP wrapper does not fail for headers without colon  CVE-2025-1734
Fix Header parser of `http` stream wrapper does not handle folded headers  CVE-2025-1217
Fix pgsql extension does not check for errors during escaping  CVE-2025-1735
Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix  CVE-2025-6491
Fix Null byte termination in hostnames  CVE-2025-1220
Fix Null byte termination in dns_get_record()  GHSA-www2-q4fc-65wf
Fix Heap buffer overflow in array_merge()  CVE-2025-14178
Fix Information Leak of Memory in getimagesize  CVE-2025-14177

Resolves: RHEL-141181
2026-01-19 08:43:37 +01:00
Remi Collet
ad6da4ad66 fix low/moderate CVEs
Resolves: RHEL-66589
2024-11-13 08:57:02 +01:00
Adam Samalik
eb5b3533a9 re-import sources as agreed with the maintainer 2023-06-29 14:54:06 +02:00
Adam Samalik
2cfde60649 import sources 2023-05-16 10:31:29 +02:00
James Antill
244f7cec27 Import rpm: de86d127d3eb83106a24e8863414e59ec6b6644a 2023-02-23 23:35:21 -05:00
James Antill
cce17324d8 Import rpm: de86d127d3eb83106a24e8863414e59ec6b6644a 2023-02-23 13:13:53 -05:00
James Antill
75cd1b450d Convert from sha1 to sha512. 2022-08-31 15:59:48 -04:00
James Antill
8ce3792336 Import rpm: de86d127d3eb83106a24e8863414e59ec6b6644a 2022-08-08 13:55:56 -04:00