rottame
committed
over 1 year ago
(revision 12)
- Fix build with GCC14
- drop unmaintained apache-rex usage
- security update
- added patches
fix CVE-2024-2756 bsc#1222857, host/secure cookie bypass due to partial fix
+ php7-CVE-2024-2756.patch
fix CVE-2024-3096 bsc#1222858, password_verify can erroneously return true, opening ATO risk
+ php7-CVE-2024-3096.patch
fix CVE-2024-5458 bsc#1226073, filter bypass in filter_var FILTER_VALIDATE_URL
+ php7-CVE-2024-5458.patch
- set session.save_path to /tmp