<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="63">
<package pkgid="f912456f1bca3217ddddc608e6f993de467cae771ac3c35e77f9e8bf2e2afc96" name="apache2-mod_php7" arch="src">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="18800fff50e972955dedb48f868bcdf4ea8619380c443911c03e997caa1429e0" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="abdee41bf79775b536eb42e27a9e065b8e7626ea81e860bbd460c621fc9c799c" name="php7" arch="src">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="81183a482e51581c6d7c8b2231694522297f031e94a447df6c76f892397878bb" name="php7" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="c6568be13851733f0912feeddeda1470db8681e7bfce099eac24bdcb6d194e99" name="php7-bcmath" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="2b41941ab80fc8ef25c63156604bbdaf8e822889f67e584aa63ce6a0c80e87ac" name="php7-bz2" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="4e430f813e0a65e5884719c54fbd5972c4ac0aa93d7b0c22c2b478212e3dde84" name="php7-calendar" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="23c4bafd82b53e563dc90237bde48977c51fb7842356f33b92b88963cea8cba5" name="php7-cli" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="0b80e710c38aec7193550c7621214b17c3b8b6a599e57c3ce52b3bd5d6aa8b8f" name="php7-ctype" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="7d09701ca9dd9262efd62806a2bcaed623d1862463875438a8b05972e060c548" name="php7-curl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="e43ec00df4e2a1c115b83e367f435b88d81f43d4cb9c1ca6546ce72395cebd4a" name="php7-dba" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="3d3034c39b6dd063addc5ddb9d295cd54894de3ad598862f7bfdf7f35c22c8f1" name="php7-devel" arch="noarch">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="89bf3cdb653e0cfe45a29db123ad451104efc504e417ee0c092fda12c02c92e7" name="php7-dom" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="20aa6e5e14b2c8673e79ae31e13514bbc77bba2d46ff6b5af0937c077f441d4c" name="php7-embed" arch="src">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="2792a27956ca1a818571165a0ae9ff42d7cdc59590283e979cedf60452530e73" name="php7-embed" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="c19fffad145f25241b6eacf105c4fcd641d9f98a169094c171364e90e475c5ca" name="php7-enchant" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="e9fc443d82278e8a109866bffd937e0060d5c9183bbb9cf08d8d8423dd5e90b6" name="php7-exif" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="9140b4e77a63b355cfe43495ae6f36cde06d1ce106f1b22105bccfc6ed992101" name="php7-fastcgi" arch="src">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="9f5c96cbde75c0d90a5fd1c9d9f987840df450547e71288a757592916a199062" name="php7-fastcgi" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="4ff0d303d0d4ff26b0d4ed8fa201898ad5007d9bb0fc18094c97d35da95338f5" name="php7-fileinfo" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b972a4f205b27e3115b2efb06fa8508d6c55c0beade6e6251f76834e061ffb13" name="php7-fpm" arch="src">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="43555cdf244fbc70071741947999714536c80784e3180a1818a20bf47d1b2ead" name="php7-fpm" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="da4575918c4f11a9db897c30b678e953c16c980dd989da5ab348947bff69a51c" name="php7-ftp" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="fb26d0974e229a4ec0147386657c22f44f6b55fe92aac367e8a5e2f0995bbadd" name="php7-gd" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="42d6924892874cc274da84358f22c8decbf9f9b7f6b70084e68a87142514a967" name="php7-gettext" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="4e6b95496506b79f514e889b65455119242f6b2fb30741fa39e321eb36b41a96" name="php7-gmp" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="9d082bf688d609ea9ac5cd93843102c716cc5f97146d240d91e905c06a42ec02" name="php7-iconv" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="009bc8fd696730b1acdd9b68f5625c99dde3b1dc4bb2c32a30ea9648cc231ed9" name="php7-intl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="846fc3a6d7054985aabe5e3d41b175e1b54a8f028dbaca1ac8de55117890aeff" name="php7-json" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="4202f7926d9e603e47769925a12fbcb657bbe1eaaa03a84b2e4aacc17379cd0d" name="php7-ldap" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="99d645a79c3002f65f0e088a841157ad3cd87f75352cd0ee8d0236f43d9b0ed4" name="php7-mbstring" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="877800957b1e3102d0d08f0ae3a003b2ffaeaa5aeae6c3aed09439f7f0619f90" name="php7-mysql" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="36a99f5ac2af11b027740e2269d054bd1ac13111b216259a8a28f62f570163d4" name="php7-odbc" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="f599a95426b69d5100d3dafabb0cc7177ae0f8591310165206b1c7e3660454a8" name="php7-opcache" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="671e0b280268c11cef517cbd5b45c425ca968660d6e3374fc6a40aa3b85777c1" name="php7-openssl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="5c4e36bfa600ca7092376df6e8c409f5e0eb6a6ba5e054e26bbd87723a0e7084" name="php7-pcntl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="f2a1d055ca34f9c1bbb61d746415e59b286c0cf5608115e393cba722b6ebf218" name="php7-pdo" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="d23df66300c92b6daf6ee6a77f08a7809c4a711a035e78303befa2015986a31d" name="php7-pear" arch="noarch">
  <version epoch="0" ver="1.10.25" rel="150300.1.1"/>
  <changelog author="suse+build@de-korte.org" date="1574510400">- Update to version 1.10.17
- Package separately, as builtin PEAR was deprecated in PHP-7.4</changelog>
  <changelog author="suse+build@de-korte.org" date="1574683200">- Create php7-pecl subpackage for PECL builds</changelog>
  <changelog author="suse+build@de-korte.org" date="1574769600">- Install metadata files (registry, filemap, channels, ...) in
  /var/lib/pear/ instead of /usr/share/php7/PEAR/</changelog>
  <changelog author="suse+build@de-korte.org" date="1574769601">- Only use the GPG keys of Chuck Burgess. Extracted from the
  Release Manager public keys.
- Add release versions of PEAR modules</changelog>
  <changelog author="suse+build@de-korte.org" date="1575720000">- Apply upstream patch for https://bugs.php.net/78890
  + pear-cacheid-array-check.patch
- Recommend php7-openssl to allow https sources to be used
- Modify metadata_dir for system configuration only
- Add /var/lib/pear directory where xml files are stored
- Cleanup %files section</changelog>
  <changelog author="suse+build@de-korte.org" date="1582891200">- Sort contents of .filemap to make build reproducible</changelog>
  <changelog author="suse+build@de-korte.org" date="1586520000">- Update to version 1.10.18
- Remove pear-cacheid-array-check.patch (upstreamed)
- Contents of .filemap are now sorted internally</changelog>
  <changelog author="suse+build@de-korte.org" date="1587297600">- Update to version 1.10.19
  - PEAR 1.10.12
  * adjust dependencies based on new releases
  - XML_Util 1.4.5
  * fix Trying to access array offset on value of type int</changelog>
  <changelog author="pgajdos@suse.com" date="1589889600">- provides and obsoletes php7-pear-Archive_Tar, former location
  of PEAR/Archive/Tar.php</changelog>
  <changelog author="suse+build@de-korte.org" date="1610452800">- (Build)Requires php-cli to make sure the CLI is installed</changelog>
  <changelog author="suse+build@de-korte.org" date="1610539200">- (Build)Requires php7-cli to make sure the php7 CLI is installed</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- added patches
  fix bsc#1187372 -- https://github.com/pear/pear-core/pull/115
  + php7-pear-undefined-variables.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1628683200">- Update to 1.10.21
  - PEAR 1.10.13
  * unsupported protocol - use --force to continue
  * Add $this operator to _determineIfPowerpc calls
- Update to 1.10.20
  - Archive_Tar 1.4.14
  * Properly fix symbolic link path traversal (CVE-2021-32610)
  - Archive_Tar 1.4.13
  * Relative symlinks failing (out-of path file extraction)
  - Archive_Tar 1.4.12
  - Archive_Tar 1.4.11
  - Archive_Tar 1.4.10
  * Fix block padding when the file buffer length is a multiple
    of 512 and smaller than Archive_Tar buffer length
  * Don't try to copy username/groupname in chroot jail
  - ------------------------------------------------------------------</changelog>
  <changelog author="suse+build@de-korte.org" date="1701000000">- Update to 1.10.22
  - PEAR 1.10.14
  * Put glue and pieces parameters to implode in correct order for
    PHP 7.4+
  * Fix PHP bug 81653: Typo in install-pear-nozlib.phar
  * Add %S EXPECTF capability
  * Fix: Creation of dynamic property PEAR_Error::$callback is
    deprecated
  * Fixed extension loaded check for pecl binaries
  * Remove -n option from pecl.bat for shared extensions
  * Fix Using ${var} in strings is deprecated
  * Fix lingering license references to PHP license
  * Exclude tests from composer classmap
  * Fix private lastError name
- Removed upstreamed patch php7-pear-undefined-variables.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1709985600">- Update to 1.10.23
  - PEAR 1.10.15
  * Cleanup uneeded test
  * Fix PHP Deprecated: Calling get_class() without arguments</changelog>
  <changelog author="suse+build@de-korte.org" date="1733054400">- Update to 1.10.24
  - PEAR 1.10.16
  * Fix bug #27796: "Array to string" conversion warnings on
    installs/other actions
  * Never reference E_STRICT on PHP 8.4+
  * Fix tests 8.1+
  - Archive_Tar 1.5.0
  * Fix @return true... to @return bool true... on some functions
  * Use 775 default for mkdirs, to avoid world-write
  - Structures_Graph 1.2.0
  * Update composer info (adds PHP/PEAR deps)
  * Update phpunit tests
  * Composer shows wrong license</changelog>
  <changelog author="suse+build@de-korte.org" date="1765713600">- Update to 1.10.25
  - PEAR 1.10.17
  * Fix HTTP chunked encoding handling
  * fix composer.json: typo in replace for pear_exception package
  * switch to https by default
  * Throw new Error instead of E_USER_ERROR on PHP 7.0+
  * update tests for https-first behavior
  - Archive_Tar 1.6.0
  * big file support
  * Fix return value of _writeBlock
  * Remove gzopen/gztell/gzseek shim</changelog>
</package>
<package pkgid="decd0e03b1fbbbb8422225c542812fafef3d612c34d5cf759de34b91e8a900eb" name="php7-pear" arch="src">
  <version epoch="0" ver="1.10.25" rel="150300.1.1"/>
  <changelog author="suse+build@de-korte.org" date="1574510400">- Update to version 1.10.17
- Package separately, as builtin PEAR was deprecated in PHP-7.4</changelog>
  <changelog author="suse+build@de-korte.org" date="1574683200">- Create php7-pecl subpackage for PECL builds</changelog>
  <changelog author="suse+build@de-korte.org" date="1574769600">- Install metadata files (registry, filemap, channels, ...) in
  /var/lib/pear/ instead of /usr/share/php7/PEAR/</changelog>
  <changelog author="suse+build@de-korte.org" date="1574769601">- Only use the GPG keys of Chuck Burgess. Extracted from the
  Release Manager public keys.
- Add release versions of PEAR modules</changelog>
  <changelog author="suse+build@de-korte.org" date="1575720000">- Apply upstream patch for https://bugs.php.net/78890
  + pear-cacheid-array-check.patch
- Recommend php7-openssl to allow https sources to be used
- Modify metadata_dir for system configuration only
- Add /var/lib/pear directory where xml files are stored
- Cleanup %files section</changelog>
  <changelog author="suse+build@de-korte.org" date="1582891200">- Sort contents of .filemap to make build reproducible</changelog>
  <changelog author="suse+build@de-korte.org" date="1586520000">- Update to version 1.10.18
- Remove pear-cacheid-array-check.patch (upstreamed)
- Contents of .filemap are now sorted internally</changelog>
  <changelog author="suse+build@de-korte.org" date="1587297600">- Update to version 1.10.19
  - PEAR 1.10.12
  * adjust dependencies based on new releases
  - XML_Util 1.4.5
  * fix Trying to access array offset on value of type int</changelog>
  <changelog author="pgajdos@suse.com" date="1589889600">- provides and obsoletes php7-pear-Archive_Tar, former location
  of PEAR/Archive/Tar.php</changelog>
  <changelog author="suse+build@de-korte.org" date="1610452800">- (Build)Requires php-cli to make sure the CLI is installed</changelog>
  <changelog author="suse+build@de-korte.org" date="1610539200">- (Build)Requires php7-cli to make sure the php7 CLI is installed</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- added patches
  fix bsc#1187372 -- https://github.com/pear/pear-core/pull/115
  + php7-pear-undefined-variables.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1628683200">- Update to 1.10.21
  - PEAR 1.10.13
  * unsupported protocol - use --force to continue
  * Add $this operator to _determineIfPowerpc calls
- Update to 1.10.20
  - Archive_Tar 1.4.14
  * Properly fix symbolic link path traversal (CVE-2021-32610)
  - Archive_Tar 1.4.13
  * Relative symlinks failing (out-of path file extraction)
  - Archive_Tar 1.4.12
  - Archive_Tar 1.4.11
  - Archive_Tar 1.4.10
  * Fix block padding when the file buffer length is a multiple
    of 512 and smaller than Archive_Tar buffer length
  * Don't try to copy username/groupname in chroot jail
  - ------------------------------------------------------------------</changelog>
  <changelog author="suse+build@de-korte.org" date="1701000000">- Update to 1.10.22
  - PEAR 1.10.14
  * Put glue and pieces parameters to implode in correct order for
    PHP 7.4+
  * Fix PHP bug 81653: Typo in install-pear-nozlib.phar
  * Add %S EXPECTF capability
  * Fix: Creation of dynamic property PEAR_Error::$callback is
    deprecated
  * Fixed extension loaded check for pecl binaries
  * Remove -n option from pecl.bat for shared extensions
  * Fix Using ${var} in strings is deprecated
  * Fix lingering license references to PHP license
  * Exclude tests from composer classmap
  * Fix private lastError name
- Removed upstreamed patch php7-pear-undefined-variables.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1709985600">- Update to 1.10.23
  - PEAR 1.10.15
  * Cleanup uneeded test
  * Fix PHP Deprecated: Calling get_class() without arguments</changelog>
  <changelog author="suse+build@de-korte.org" date="1733054400">- Update to 1.10.24
  - PEAR 1.10.16
  * Fix bug #27796: "Array to string" conversion warnings on
    installs/other actions
  * Never reference E_STRICT on PHP 8.4+
  * Fix tests 8.1+
  - Archive_Tar 1.5.0
  * Fix @return true... to @return bool true... on some functions
  * Use 775 default for mkdirs, to avoid world-write
  - Structures_Graph 1.2.0
  * Update composer info (adds PHP/PEAR deps)
  * Update phpunit tests
  * Composer shows wrong license</changelog>
  <changelog author="suse+build@de-korte.org" date="1765713600">- Update to 1.10.25
  - PEAR 1.10.17
  * Fix HTTP chunked encoding handling
  * fix composer.json: typo in replace for pear_exception package
  * switch to https by default
  * Throw new Error instead of E_USER_ERROR on PHP 7.0+
  * update tests for https-first behavior
  - Archive_Tar 1.6.0
  * big file support
  * Fix return value of _writeBlock
  * Remove gzopen/gztell/gzseek shim</changelog>
</package>
<package pkgid="ee9f0f02f3bd3f2a0589c1d6bc0fc3f8a3b6a7b499d89f948ffdca75d8ecaaf4" name="php7-pecl" arch="noarch">
  <version epoch="0" ver="1.10.25" rel="150300.1.1"/>
  <changelog author="suse+build@de-korte.org" date="1574510400">- Update to version 1.10.17
- Package separately, as builtin PEAR was deprecated in PHP-7.4</changelog>
  <changelog author="suse+build@de-korte.org" date="1574683200">- Create php7-pecl subpackage for PECL builds</changelog>
  <changelog author="suse+build@de-korte.org" date="1574769600">- Install metadata files (registry, filemap, channels, ...) in
  /var/lib/pear/ instead of /usr/share/php7/PEAR/</changelog>
  <changelog author="suse+build@de-korte.org" date="1574769601">- Only use the GPG keys of Chuck Burgess. Extracted from the
  Release Manager public keys.
- Add release versions of PEAR modules</changelog>
  <changelog author="suse+build@de-korte.org" date="1575720000">- Apply upstream patch for https://bugs.php.net/78890
  + pear-cacheid-array-check.patch
- Recommend php7-openssl to allow https sources to be used
- Modify metadata_dir for system configuration only
- Add /var/lib/pear directory where xml files are stored
- Cleanup %files section</changelog>
  <changelog author="suse+build@de-korte.org" date="1582891200">- Sort contents of .filemap to make build reproducible</changelog>
  <changelog author="suse+build@de-korte.org" date="1586520000">- Update to version 1.10.18
- Remove pear-cacheid-array-check.patch (upstreamed)
- Contents of .filemap are now sorted internally</changelog>
  <changelog author="suse+build@de-korte.org" date="1587297600">- Update to version 1.10.19
  - PEAR 1.10.12
  * adjust dependencies based on new releases
  - XML_Util 1.4.5
  * fix Trying to access array offset on value of type int</changelog>
  <changelog author="pgajdos@suse.com" date="1589889600">- provides and obsoletes php7-pear-Archive_Tar, former location
  of PEAR/Archive/Tar.php</changelog>
  <changelog author="suse+build@de-korte.org" date="1610452800">- (Build)Requires php-cli to make sure the CLI is installed</changelog>
  <changelog author="suse+build@de-korte.org" date="1610539200">- (Build)Requires php7-cli to make sure the php7 CLI is installed</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- added patches
  fix bsc#1187372 -- https://github.com/pear/pear-core/pull/115
  + php7-pear-undefined-variables.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1628683200">- Update to 1.10.21
  - PEAR 1.10.13
  * unsupported protocol - use --force to continue
  * Add $this operator to _determineIfPowerpc calls
- Update to 1.10.20
  - Archive_Tar 1.4.14
  * Properly fix symbolic link path traversal (CVE-2021-32610)
  - Archive_Tar 1.4.13
  * Relative symlinks failing (out-of path file extraction)
  - Archive_Tar 1.4.12
  - Archive_Tar 1.4.11
  - Archive_Tar 1.4.10
  * Fix block padding when the file buffer length is a multiple
    of 512 and smaller than Archive_Tar buffer length
  * Don't try to copy username/groupname in chroot jail
  - ------------------------------------------------------------------</changelog>
  <changelog author="suse+build@de-korte.org" date="1701000000">- Update to 1.10.22
  - PEAR 1.10.14
  * Put glue and pieces parameters to implode in correct order for
    PHP 7.4+
  * Fix PHP bug 81653: Typo in install-pear-nozlib.phar
  * Add %S EXPECTF capability
  * Fix: Creation of dynamic property PEAR_Error::$callback is
    deprecated
  * Fixed extension loaded check for pecl binaries
  * Remove -n option from pecl.bat for shared extensions
  * Fix Using ${var} in strings is deprecated
  * Fix lingering license references to PHP license
  * Exclude tests from composer classmap
  * Fix private lastError name
- Removed upstreamed patch php7-pear-undefined-variables.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1709985600">- Update to 1.10.23
  - PEAR 1.10.15
  * Cleanup uneeded test
  * Fix PHP Deprecated: Calling get_class() without arguments</changelog>
  <changelog author="suse+build@de-korte.org" date="1733054400">- Update to 1.10.24
  - PEAR 1.10.16
  * Fix bug #27796: "Array to string" conversion warnings on
    installs/other actions
  * Never reference E_STRICT on PHP 8.4+
  * Fix tests 8.1+
  - Archive_Tar 1.5.0
  * Fix @return true... to @return bool true... on some functions
  * Use 775 default for mkdirs, to avoid world-write
  - Structures_Graph 1.2.0
  * Update composer info (adds PHP/PEAR deps)
  * Update phpunit tests
  * Composer shows wrong license</changelog>
  <changelog author="suse+build@de-korte.org" date="1765713600">- Update to 1.10.25
  - PEAR 1.10.17
  * Fix HTTP chunked encoding handling
  * fix composer.json: typo in replace for pear_exception package
  * switch to https by default
  * Throw new Error instead of E_USER_ERROR on PHP 7.0+
  * update tests for https-first behavior
  - Archive_Tar 1.6.0
  * big file support
  * Fix return value of _writeBlock
  * Remove gzopen/gztell/gzseek shim</changelog>
</package>
<package pkgid="8be4e333087429bd5061fecf17e3ab395eaf0d63feb1abcce6959f6fff157d37" name="php7-pgsql" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="4be789d4d032784625184d8a7bac0db276c5760ccfdeb837d09ba44d6d214739" name="php7-phar" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="24817b01268bf197bcb7bab2c4d0e10883338d376477a72965732c452a7a6ca1" name="php7-posix" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="c3e110333186ded6316c7a1ceeb4772db70b7a51f85dd456430a07c9ca886c8f" name="php7-readline" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="428497f29c75ad9c90a877e9dd472db44a187b61862f16821337d989e7f4ddc0" name="php7-shmop" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="e5fef04ece2a464c39b3b984144a8c8e463aebcb4f8fc6cd0fa4f1852e2b5ee0" name="php7-snmp" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="dd2bca4eb3f37e55486753b4eabb1776cc0f06494e8e9c2dc96a15ba2ff0659c" name="php7-soap" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="15a6be26f8c67fc631ae6229aaab4a29c884e2194fcfe9430ab4337cab655c22" name="php7-sockets" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="923b76cb0121f597738f0c7dcfcf120240d931176be629ff748c03c96860f892" name="php7-sodium" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="dc54aecc0517ac9239dff16c62effa6c98450a7a278cfa67bdf976c4a7b4fc82" name="php7-sqlite" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="db5794dce2c3385fd31061eaf99c94f0dbc79573eb657f756ba58d3722abb0e5" name="php7-sysvmsg" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="eab39fb6d92f0e3813b695b9a5532b3073c1bd9fa4bd0416b7e5a09fe1e186fe" name="php7-sysvsem" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="a4379aa8e363fb07205bce77ce2cc08ecda2ee5c5195141f9a8691104c4156a2" name="php7-sysvshm" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="a689acbf944dc9095ff503a15c3b9274692afa663788574eef788ad9473bbf97" name="php7-test" arch="src">
  <version epoch="0" ver="7.4.33" rel="150300.18.10"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="4b9959fcccfed14babb748c647d40da159723a728d80a01a301a9740f88559a7" name="php7-test" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.10"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b52a255d0f7568343b7812cb643d28ca9322f83bcfc49cf4a7db813242f54683" name="php7-tidy" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="00ed67cc2180de9e4d1e1ea1f842decd5511430b53e015a0268307f04a2a9641" name="php7-tokenizer" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="6d7da8e9b3378d4dbd45375480a88e76914fc7f0d0a7c28a043edcff71a4c470" name="php7-xmlreader" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b83c4387ab678539a1bbda8908d01d60871b5b58399d3e2fa73490a6fd2a89da" name="php7-xmlrpc" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="05cf77301725b5c67da2a35a47e9efa55a1fbd7904837d7befa2a68073e2f9a2" name="php7-xmlwriter" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b0d249942d3d4cd13090271eb682118b2d4fce1fa77215832bfc4bc38763a649" name="php7-xsl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="ed1b55e58dbdb66a8bb0140b7eb58a6e7c4865aaac78e47db85ca9dce018bd3c" name="php7-zip" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="a26cf41549f9f1c222e4e4bbff39fe946ff03b866b9aed75a5c70d505fa93511" name="php7-zlib" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150300.18.1"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="suse+build@de-korte.org" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="suse+build@de-korte.org" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="suse+build@de-korte.org" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="ilya@ilya.top" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="suse+build@de-korte.org" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
</otherdata>