[ol8_appstream] php-ldap-7.4.33-2.module+el8.10.0+90472+f810484b.aarch64

The php-ldap adds Lightweight Directory Access Protocol (LDAP)
support to PHP. LDAP is a set of protocols for accessing directory
services over the Internet. PHP is an HTML-embedded scripting
language.

Changelog (Show File list) (Show related packages)

• Wed Nov 13 2024 Remi Collet <rcollet@redhat.com> - 7.4.33-2

  - fix low/moderate CVEs
    RHEL-66589
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096
  - Fix Security issue with external entity loading in XML without enabling it
    CVE-2023-3823
  - Fix Buffer mismanagement in phar_dir_read()
    CVE-2023-3824
  - Fix Missing error check and insufficient random bytes in HTTP Digest
    authentication for SOAP
    CVE-2023-3247
  - fix #81744: Password_verify() always return true with some hash
    CVE-2023-0567
  - fix #81746: 1-byte array overrun in common path resolve code
    CVE-2023-0568
  - fix DOS vulnerability when parsing multipart request body
    CVE-2023-0662

• Fri Jan 13 2023 Remi Collet <rcollet@redhat.com> - 7.4.33-1

  - rebase to 7.4.33
  - fix: due to an integer overflow PDO::quote() may return unquoted string
    CVE-2022-31631

• Thu Jul 07 2022 Remi Collet <rcollet@redhat.com> - 7.4.30-1

  - rebase to 7.4.30 #2099615

• Wed Jun 22 2022 Remi Collet <rcollet@redhat.com> - 7.4.19-3

  - fix password of excessive length triggers buffer overflow leading to RCE
    CVE-2022-31626

• Wed Jan 19 2022 Remi Collet <rcollet@redhat.com> - 7.4.19-2

  - fix SSRF bypass in FILTER_VALIDATE_URL
    CVE-2021-21705
  - fix Local privilege escalation via PHP-FPM
    CVE-2021-21703

• Thu May 20 2021 Remi Collet <rcollet@redhat.com> - 7.4.19-1

  - rebase to 7.4.19 #1944110

• Mon Jun 15 2020 Remi Collet <rcollet@redhat.com> - 7.4.6-4

  - fix regression in 7.4.6 with generators and exception

• Wed May 27 2020 Remi Collet <rcollet@redhat.com> - 7.4.6-3

  - build phpdbg only once
  - fix regression in 7.4.6 when yielding an array based generator

• Wed May 20 2020 Remi Collet <rcollet@redhat.com> - 7.4.6-2

  - use php-config from embed SAPI to reduce used libs

• Fri May 15 2020 Remi Collet <rcollet@redhat.com> - 7.4.6-1

  - update to 7.4.6
  - add ffi extension
  - add /usr/share/php/preload as default ffi.preload configuration
  - run FPM tests
  - set opcache.enable_cli in provided default configuration
  - ensure all shared extensions can be loaded
  - drop wddx, recode and extensions
  - run test suite using 4 concurrent workers