<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="63">
<package pkgid="f53c55d1360b384ed72c7aec976ff9630858e6e32e4e94dc3f6a7dbec08ea723a5dd30dd116ddd1a1fbed14641bd73e95ccfc7ce19230e21778dea07ab144ec9" name="apache2-mod_php7" arch="src">
  <version epoch="0" ver="7.4.33" rel="18.15"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="31cb61573a2cebecd7ebc87e5b66dc1c1da05fa078299157cd60d2135336c807fa18f9ccf244fdcd7f2c0b347611f073122cacd90ae7c269c6a63c46e462b854" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.15"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="8a33ff34446b93e5836e0fc1729682f81177a5cfb6c221d4e7deeb18b33e2c715c1d77acc7f25764135dcc82575bd080ddc1ae2a9b07d71cc8b58e9e25eec2e0" name="php7" arch="src">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="cf88388f863cad24c512965c4874e643c990d7c9696bf2f6243e8c3a571c764f991285b0bfa575cd15568f2e933edfde536c05a27bd311963b97eabf796f9374" name="php7" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="82971b50af75f18579ef03563c0fb990ecb089b3147bb7102c17f4282fad5792f11b0df72f1e1d6c580c9550e96823d3e7d48e0231e97ca04d18aca76828ebf6" name="php7-bcmath" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="3a074be1ae1dfb340b9fa4793bdb3f285335cc8ca5973a61bf6067e4b8f9e21565aa57dbb9acb87c9f88f0c62f2ada80c77d60376cee284582ac0df0c20dd871" name="php7-bz2" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="2da80f269ce071c80eb3c2019bbc556e310da31eb27c34318e23d50de0b792e9e3937e7cb08654d7dda2363c97e58c11e867bdf600492cf4cb77bedf501848d7" name="php7-calendar" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="bc3dd604f8c540d295b3bd4b7379a678229e1b2ad4969a1cb81724bb57b33b79e11ac6c449d7e0c7fcdd41bb14e9bf0d6668e5b53fd76da6605f71959f915ced" name="php7-cli" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="805b5a2c5340d4f37491aa7cb925533d8c12b8b2420103045fea5fa0c5dcfdae960ce2e129623f23b8388531e70ca329adbfe475eb569296cbc37bb2ec7f49f0" name="php7-ctype" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="0131bbaa0024a7f48275a2521fbc01c25f194836041572860c2b5029186e02dcf230ed3f14d30d30b56b23347c1170c10d39834c6424009b52b028784a61fa0b" name="php7-curl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="773fe509ded06da5925f81e42c4bdf93138d7156a13bf6dfa24b63e85a388986d94cdad9e621d9a82c556fcf9194deba90ddb4af9518f33e42340f7221b23f7c" name="php7-dba" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="6aac5a9bd99a47928f2619dbda542c17e308dffded4fb73ca8c9eeff2117a3da8c3be64f827d087f53f4772ce598dfbe56a3640dc9f99239d5240bc0f9497141" name="php7-devel" arch="noarch">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="f7fd32f6147ac3e9424e7afcc6437e65a27ba2d3f4d6e47ca7e17ed5918f292f3103360124d2563b6ac532f2bda775db5898b513bd2161ea63afbfe1318db79e" name="php7-dom" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="815c031dad92c0d86490382ef858768cc14e1c505401e7eaf5cfb491e34d0c0686ddbfc9647657afd9a3bf4371f2d381425a1e4c78d1fe73e7b1e23e0322409f" name="php7-embed" arch="src">
  <version epoch="0" ver="7.4.33" rel="18.14"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="e53408f945bbba082cc4b24393f3a5f14434e2959d9e42c7b35e644ee7d2fb6727f7441b9840163069e85a79ccfdd0efb5a1967e423d5ea29e90ecab9ed5c79e" name="php7-embed" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.14"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="3d6449d8410d1cd66b9553cdfeb984d23d307a0e466a400e5609858853d791c040a17027b084b1cf989d33ef5da8479f7f79354b8b0b605586138f85617596a5" name="php7-enchant" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="e88fdd2dff34088b13d5f4270afe7703997ce38ed9846e70cf43de6fee5f68a9fffeaed8e0eb0b37feb5d1ed5a35efc3a9934e2ce4976a44ca84e43b1c91c3f1" name="php7-exif" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="55a8d09c098d94dd583fef85cefceb74e04d08b9f105680c66c302353ebbc2343f486020de75fb2267ade8eecfad1f7867532ea985a0cd71117149c3c35b0c32" name="php7-fastcgi" arch="src">
  <version epoch="0" ver="7.4.33" rel="18.14"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="aeeeddfcb6c71b9e78ebd9187c2dc0b710f126c14be1ee9625dfb1809961407721acccbf1025fd96a1f5a407198252ba509c1bc06faa0cf9c17f71868b9ea813" name="php7-fastcgi" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.14"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="db8400c21282ce095b95e4d7a7f5090a4c380f3042af5814708699859aafdc2c40f8c4e417b08afd294d5a7da6e484cb5a6967c5c139cb33600ed9161e7f7dad" name="php7-fileinfo" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="e928b3795661a35f62520107d594a01542c7e36f86444a8703497050bb6e1ecdfcdb078732c0f7430ad09c30b6158c7531a9217e68697bae23cd82c03e6760f4" name="php7-fpm" arch="src">
  <version epoch="0" ver="7.4.33" rel="18.15"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="1129c09e8dbd4da38d557bb586cc1a4253d1b717762151e4dddc3e780c9fa369d956f340b2ccc7c3f970d39037f060281b225879756367d575c0f8be352f5526" name="php7-fpm" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.15"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b8fa7f654eb7749bb7a68cbe6e62d949a4a9716e54a8c2ee579ed675ec666276db069f4d79d1dabba354b7ff2600f489bf22db97adae932834124c8d4e74cd98" name="php7-ftp" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="0d48ba347066d8c12e7d0a4eca73e3a3284b8b07fdfdfa42b20bd338a0d756635147761c36dedd91fd78e420f1081f0e0a3e195823531e07e7f4d62f58d5db83" name="php7-gd" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b4aeeaf040b7b0cc08da016606cf7a5ed7f0958057843abfbad74da444ee276a2b470a5c5f628826807983aa97621d0f8fe8c309755547ac7ce39d060695eb1b" name="php7-gettext" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="c87cbb7b19353a120a1f7e9705e633abfa79b6fe384a72a287bcd0cd131efae8d53dbf0899b21879e5c0b7f2f1f6972f3bb4f4e361ffd41c1e2a78e98de6eb7d" name="php7-gmp" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="e67aaf9afddb1dabfd5fcbc4d82136db33a734e81f005109b4642e3ec0fcee99064659e3a1e569ba8fa5d197407bee3b0f5a61aa8d8ba9c4501e9a1960302839" name="php7-iconv" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="763aa6187f8f375245239755bfc63b2e8f506bc67ac028365d5a1b24bcccb02b3d3d7d6ac0bea39ff67742a5ce5294dea494bb72ffee9f2d56bc103a20837519" name="php7-intl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="e4b10963396315e87fd5c5b64e7fc1d301bd4a5c157c511866ebebe7aacede4451d67e30b88eebf39da144dab74e7a9fb8332028b7eee3738e274c6f5f152fb4" name="php7-json" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="627536f24aa3eeb9d298151240301f73c6f30a6cd453ceb8bcdce81910aa58d5540dfd06434fa192a79d97e6b332cdcdb466a65e53b22fff448174449cd8f4d0" name="php7-ldap" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b797aef6d852d8e662aeaec9e2a4011893dce913c3f58a4e591c5c38934379884e93850457adde1f494de1d408f3ee3d86a24e6e3ba5b796607e21688797f90c" name="php7-mbstring" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="83fcc8cfd9040a4de1740a2bf714ce28238f963f0f3aa18cbdd0e134397371363b1310847897d96321832d1a8a4c5e2ba4335407efa80047369f2fc7b5c844e2" name="php7-mysql" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="0caaf691d19f27eccb155c03a91db0cf666c479d47275d0f9ebe4b345982592af7f21233f40c9afb86f9db5e649fff2586e0ccf32d2f94378f6898560cf28285" name="php7-odbc" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="6b453bf663235f86c5846a5da023f5d0ffbb555ccc2e6fe66d8af3a406de0c29072eb61839c74d1c66f9a6ed87cc6a509cecc87817127bc8419a9134ac31a9da" name="php7-opcache" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="eee8cde6188775ae857950c4db3fd47945130ccdee9e0d8325b101e023e61477ef29b836e659cb3e1cc8ee0067bbfc3adcc827f866dc5b89d7319643e0df35c1" name="php7-openssl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="67ee05f5dad07c55f873ba3d6ceabf22647df625d2d6457734472106213fc3ad67eca44aee88b8f5857089bb13d2c608db6c77955e036d74efea4622be072542" name="php7-pcntl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="ce50f02419f09eb44a3bd40f32ba8338755b3449850f1fbda893f76a3b3c3b59ae08368dcd7f54468741093dd535d6d56d701d069ecbba552f69adad9c03b1f2" name="php7-pdo" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="34b55144f5de88f8804a525fe817674e4950c59af7d894927cdac50ddab412775092f59db6cd10570cdf26efbf31df61d11e1b3d86e5d3de036c288d4a312d1b" name="php7-pear" arch="noarch">
  <version epoch="0" ver="1.10.25" rel="1.5"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1587297600">- Update to version 1.10.19
  - PEAR 1.10.12
  * adjust dependencies based on new releases
  - XML_Util 1.4.5
  * fix Trying to access array offset on value of type int</changelog>
  <changelog author="pgajdos@suse.com" date="1589889600">- provides and obsoletes php7-pear-Archive_Tar, former location
  of PEAR/Archive/Tar.php</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610452800">- (Build)Requires php-cli to make sure the CLI is installed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610539200">- (Build)Requires php7-cli to make sure the php7 CLI is installed</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- added patches
  fix bsc#1187372 -- https://github.com/pear/pear-core/pull/115
  + php7-pear-undefined-variables.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1628683200">- Update to 1.10.21
  - PEAR 1.10.13
  * unsupported protocol - use --force to continue
  * Add $this operator to _determineIfPowerpc calls
- Update to 1.10.20
  - Archive_Tar 1.4.14
  * Properly fix symbolic link path traversal (CVE-2021-32610)
  - Archive_Tar 1.4.13
  * Relative symlinks failing (out-of path file extraction)
  - Archive_Tar 1.4.12
  - Archive_Tar 1.4.11
  - Archive_Tar 1.4.10
  * Fix block padding when the file buffer length is a multiple
    of 512 and smaller than Archive_Tar buffer length
  * Don't try to copy username/groupname in chroot jail
  - ------------------------------------------------------------------</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- Update to 1.10.22
  - PEAR 1.10.14
  * Put glue and pieces parameters to implode in correct order for
    PHP 7.4+
  * Fix PHP bug 81653: Typo in install-pear-nozlib.phar
  * Add %S EXPECTF capability
  * Fix: Creation of dynamic property PEAR_Error::$callback is
    deprecated
  * Fixed extension loaded check for pecl binaries
  * Remove -n option from pecl.bat for shared extensions
  * Fix Using ${var} in strings is deprecated
  * Fix lingering license references to PHP license
  * Exclude tests from composer classmap
  * Fix private lastError name
- Removed upstreamed patch php7-pear-undefined-variables.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1709985600">- Update to 1.10.23
  - PEAR 1.10.15
  * Cleanup uneeded test
  * Fix PHP Deprecated: Calling get_class() without arguments</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1733054400">- Update to 1.10.24
  - PEAR 1.10.16
  * Fix bug #27796: "Array to string" conversion warnings on
    installs/other actions
  * Never reference E_STRICT on PHP 8.4+
  * Fix tests 8.1+
  - Archive_Tar 1.5.0
  * Fix @return true... to @return bool true... on some functions
  * Use 775 default for mkdirs, to avoid world-write
  - Structures_Graph 1.2.0
  * Update composer info (adds PHP/PEAR deps)
  * Update phpunit tests
  * Composer shows wrong license</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765713600">- Update to 1.10.25
  - PEAR 1.10.17
  * Fix HTTP chunked encoding handling
  * fix composer.json: typo in replace for pear_exception package
  * switch to https by default
  * Throw new Error instead of E_USER_ERROR on PHP 7.0+
  * update tests for https-first behavior
  - Archive_Tar 1.6.0
  * big file support
  * Fix return value of _writeBlock
  * Remove gzopen/gztell/gzseek shim</changelog>
</package>
<package pkgid="1ee2640ebd3074c7ee6abb0ad7230f4600036fbabbebe716929d0679846b305649ae368b58bfbe1b5214b1b240df02448da75e6005f7c6a7d8d1f73754175743" name="php7-pear" arch="src">
  <version epoch="0" ver="1.10.25" rel="1.5"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574510400">- Update to version 1.10.17
- Package separately, as builtin PEAR was deprecated in PHP-7.4</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574683200">- Create php7-pecl subpackage for PECL builds</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574769600">- Install metadata files (registry, filemap, channels, ...) in
  /var/lib/pear/ instead of /usr/share/php7/PEAR/</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574769601">- Only use the GPG keys of Chuck Burgess. Extracted from the
  Release Manager public keys.
- Add release versions of PEAR modules</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1575720000">- Apply upstream patch for https://bugs.php.net/78890
  + pear-cacheid-array-check.patch
- Recommend php7-openssl to allow https sources to be used
- Modify metadata_dir for system configuration only
- Add /var/lib/pear directory where xml files are stored
- Cleanup %files section</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582891200">- Sort contents of .filemap to make build reproducible</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586520000">- Update to version 1.10.18
- Remove pear-cacheid-array-check.patch (upstreamed)
- Contents of .filemap are now sorted internally</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1587297600">- Update to version 1.10.19
  - PEAR 1.10.12
  * adjust dependencies based on new releases
  - XML_Util 1.4.5
  * fix Trying to access array offset on value of type int</changelog>
  <changelog author="pgajdos@suse.com" date="1589889600">- provides and obsoletes php7-pear-Archive_Tar, former location
  of PEAR/Archive/Tar.php</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610452800">- (Build)Requires php-cli to make sure the CLI is installed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610539200">- (Build)Requires php7-cli to make sure the php7 CLI is installed</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- added patches
  fix bsc#1187372 -- https://github.com/pear/pear-core/pull/115
  + php7-pear-undefined-variables.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1628683200">- Update to 1.10.21
  - PEAR 1.10.13
  * unsupported protocol - use --force to continue
  * Add $this operator to _determineIfPowerpc calls
- Update to 1.10.20
  - Archive_Tar 1.4.14
  * Properly fix symbolic link path traversal (CVE-2021-32610)
  - Archive_Tar 1.4.13
  * Relative symlinks failing (out-of path file extraction)
  - Archive_Tar 1.4.12
  - Archive_Tar 1.4.11
  - Archive_Tar 1.4.10
  * Fix block padding when the file buffer length is a multiple
    of 512 and smaller than Archive_Tar buffer length
  * Don't try to copy username/groupname in chroot jail
  - ------------------------------------------------------------------</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- Update to 1.10.22
  - PEAR 1.10.14
  * Put glue and pieces parameters to implode in correct order for
    PHP 7.4+
  * Fix PHP bug 81653: Typo in install-pear-nozlib.phar
  * Add %S EXPECTF capability
  * Fix: Creation of dynamic property PEAR_Error::$callback is
    deprecated
  * Fixed extension loaded check for pecl binaries
  * Remove -n option from pecl.bat for shared extensions
  * Fix Using ${var} in strings is deprecated
  * Fix lingering license references to PHP license
  * Exclude tests from composer classmap
  * Fix private lastError name
- Removed upstreamed patch php7-pear-undefined-variables.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1709985600">- Update to 1.10.23
  - PEAR 1.10.15
  * Cleanup uneeded test
  * Fix PHP Deprecated: Calling get_class() without arguments</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1733054400">- Update to 1.10.24
  - PEAR 1.10.16
  * Fix bug #27796: "Array to string" conversion warnings on
    installs/other actions
  * Never reference E_STRICT on PHP 8.4+
  * Fix tests 8.1+
  - Archive_Tar 1.5.0
  * Fix @return true... to @return bool true... on some functions
  * Use 775 default for mkdirs, to avoid world-write
  - Structures_Graph 1.2.0
  * Update composer info (adds PHP/PEAR deps)
  * Update phpunit tests
  * Composer shows wrong license</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765713600">- Update to 1.10.25
  - PEAR 1.10.17
  * Fix HTTP chunked encoding handling
  * fix composer.json: typo in replace for pear_exception package
  * switch to https by default
  * Throw new Error instead of E_USER_ERROR on PHP 7.0+
  * update tests for https-first behavior
  - Archive_Tar 1.6.0
  * big file support
  * Fix return value of _writeBlock
  * Remove gzopen/gztell/gzseek shim</changelog>
</package>
<package pkgid="1688508eb4b9ecb6bae94e6868b82527b6138a3c2412e54049449cd5c1738e5c2f23a799efd3b78f7c25a18034f561af0590a03c6cc434dd80296f408f729670" name="php7-pecl" arch="noarch">
  <version epoch="0" ver="1.10.25" rel="1.5"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1587297600">- Update to version 1.10.19
  - PEAR 1.10.12
  * adjust dependencies based on new releases
  - XML_Util 1.4.5
  * fix Trying to access array offset on value of type int</changelog>
  <changelog author="pgajdos@suse.com" date="1589889600">- provides and obsoletes php7-pear-Archive_Tar, former location
  of PEAR/Archive/Tar.php</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610452800">- (Build)Requires php-cli to make sure the CLI is installed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610539200">- (Build)Requires php7-cli to make sure the php7 CLI is installed</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- added patches
  fix bsc#1187372 -- https://github.com/pear/pear-core/pull/115
  + php7-pear-undefined-variables.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1628683200">- Update to 1.10.21
  - PEAR 1.10.13
  * unsupported protocol - use --force to continue
  * Add $this operator to _determineIfPowerpc calls
- Update to 1.10.20
  - Archive_Tar 1.4.14
  * Properly fix symbolic link path traversal (CVE-2021-32610)
  - Archive_Tar 1.4.13
  * Relative symlinks failing (out-of path file extraction)
  - Archive_Tar 1.4.12
  - Archive_Tar 1.4.11
  - Archive_Tar 1.4.10
  * Fix block padding when the file buffer length is a multiple
    of 512 and smaller than Archive_Tar buffer length
  * Don't try to copy username/groupname in chroot jail
  - ------------------------------------------------------------------</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- Update to 1.10.22
  - PEAR 1.10.14
  * Put glue and pieces parameters to implode in correct order for
    PHP 7.4+
  * Fix PHP bug 81653: Typo in install-pear-nozlib.phar
  * Add %S EXPECTF capability
  * Fix: Creation of dynamic property PEAR_Error::$callback is
    deprecated
  * Fixed extension loaded check for pecl binaries
  * Remove -n option from pecl.bat for shared extensions
  * Fix Using ${var} in strings is deprecated
  * Fix lingering license references to PHP license
  * Exclude tests from composer classmap
  * Fix private lastError name
- Removed upstreamed patch php7-pear-undefined-variables.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1709985600">- Update to 1.10.23
  - PEAR 1.10.15
  * Cleanup uneeded test
  * Fix PHP Deprecated: Calling get_class() without arguments</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1733054400">- Update to 1.10.24
  - PEAR 1.10.16
  * Fix bug #27796: "Array to string" conversion warnings on
    installs/other actions
  * Never reference E_STRICT on PHP 8.4+
  * Fix tests 8.1+
  - Archive_Tar 1.5.0
  * Fix @return true... to @return bool true... on some functions
  * Use 775 default for mkdirs, to avoid world-write
  - Structures_Graph 1.2.0
  * Update composer info (adds PHP/PEAR deps)
  * Update phpunit tests
  * Composer shows wrong license</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765713600">- Update to 1.10.25
  - PEAR 1.10.17
  * Fix HTTP chunked encoding handling
  * fix composer.json: typo in replace for pear_exception package
  * switch to https by default
  * Throw new Error instead of E_USER_ERROR on PHP 7.0+
  * update tests for https-first behavior
  - Archive_Tar 1.6.0
  * big file support
  * Fix return value of _writeBlock
  * Remove gzopen/gztell/gzseek shim</changelog>
</package>
<package pkgid="d205173f53bcfd4816127421a908140e026b36406f27f6ee1aa6ceff3ff23736a4f36e0cfef144b846c884ab02d78571b6342b7a5f95e1ff7d1c9ec5a52d8ffa" name="php7-pgsql" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="a30baf125b78a5fdda393a84595aedba6cb52936cd6f2ecac108872a56ddb20c6056a059be4ae51a3f5470a3477697e0798e03f0d78b86528e23d61e8c7f0c20" name="php7-phar" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="83c579dff8e7a4554d73b2b43e6e29fbc4c71eee218f8eaaa5a248981022bfd6ed0958b10e971d5aec32a7cd06d9399231f2639717582670979fbfcf1ff6eb61" name="php7-posix" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="82cfb400dee475f0e9549366d5a0749ef384f29318c00063f0111e8d6a9f8c13280a37486849306a8105f1e7691ee87a180d1e1d16b9dd439622979af0ab526a" name="php7-readline" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="0d71d35aab0999dff7cdf97c2ef4bc4f81df59361783de50764b7930dc6aa185a1acc237eaca43ed0af928dccb7354b9954616f725d094f1367aa6f69cb01399" name="php7-shmop" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="c51329cdc76d1293bcbac030ee3e42d8aa427d4ba4eb8ff791c0926e44500fcb798b66395176503558271281599df58a8e7831b2bb7bdcdbeb0ac2ac1fa53976" name="php7-snmp" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="7f07676d7aee9af8db3bd78cc53fdec924d34baf805194cd93a245d353017c3ea240b979c544130d9d6144e3d5477fe905bc9a9f911757fa5292449c6bfda654" name="php7-soap" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="70abc3e8890d31131baeac309acd47614ba809e4cab358d1e2b12f5ea94ca9cfbc815deb5cfe78df5b624cc48defeb07666840285ae1b1217c95ba4703353f75" name="php7-sockets" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="41f6a3603dd6027a066f5b0a0db5c00de48baae4b6b63449f304256c92cdd7de1c3992e57204ecb88f966690de9e7f24677ab4be1390b74fbdef6a87713228a9" name="php7-sodium" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="bd4098c0c61a61c9b6029350137aa451da433c5486a7c2d5e22f1a5c810d98ce25396fa0b032bff170b59a42165a11803e1e7d78e1364a58d240ac95db9ae21b" name="php7-sqlite" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="fcf5023cdd518be2772c974400ce62e239828d4d6e11a56abeadebe127ee033da3567425c0db80c15511a58bd3d23fd96a4a9d939ecfa388fe59a0a01276f029" name="php7-sysvmsg" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b87518272db1a7f9d403b409b8e47e4aa2af76fa115a8fc7b1c3f1470474517d0cdcc0a6d4466b6829731ef6feee0b9be69bf4103319683bf7375b6406787bd7" name="php7-sysvsem" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="4b3d8805ee679c86022bfd6b7d629bc7387219f03662017d723bc58457270b3dc6bc5ec3ab955c96eaaa361244e8cf007d6c9e94a98d2dc4bc3706dc426d0c56" name="php7-sysvshm" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="c2ed5781f8d7ec68cd45ae9f77644f53de47690f79031c11edb0acd63e356e20872c7e5b6c1eae7d16090a51c2031ef49d69edbf38cbff60ea6d5151ab509e38" name="php7-test" arch="src">
  <version epoch="0" ver="7.4.33" rel="18.230"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="f39b638d2376d30a5c4ed9ddd8feee66c2d34767c4c6a4428ff193a5a4499ca08dedd3f5327b1c0cc3af6422694da2612197e31237c9df8da2f681467717ebbd" name="php7-test" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.230"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="85f39b85e23c425d8a3659ba905b3253b9a86de120de19681308f6c9b598abd4d2f5a0f6cc741525d37943537796c27c27836e194ff7e1d43f0bc6cabe7bca2b" name="php7-tidy" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="961195bf9086f2d7c24a060bde33289444b09668c475af4364b24a28cbd1b6de7f4450412a9e4f0f354e505d73fb9bd60c9f18c99d791485e8b70227cd5b2455" name="php7-tokenizer" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="c09c51e1476e98f9b5e73959637d9fbbf7b8f5d03cbc6104e7a347bf66aae4fab2f0ba8f03e7b0d641e562dc1f9d0df97603ba71b283c1cde83f887a0578958f" name="php7-xmlreader" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="a08917a3070e1e14814821d4f9911633d1976c4478eebfb9e9e7ddc184b4b69cd6ddb5457c433b33c705e1747c55d6afc70986b1b6db5ee5b62a5ed77f6fbae8" name="php7-xmlrpc" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="8392b9e0db7dee02f05e6b73baefd7cf08ac8753a9e9169207f6d8be5f71e43bbba54e907a3352116864c409d10f18e29ab34cb3bb0e5b3b12b1d9acab7fb017" name="php7-xmlwriter" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="9d5ad2885e3cd2634c340bccad5ae1040b6dfc44803a30b42d836dab755e8af7950a8f453c6ca701c9d4b92550786b5849e6746f96e678c3158aed4c4fb8b6a4" name="php7-xsl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="466688be37fb1a3f860b594573d92bb5ed2e4c1f94ef243dfce430821ce13405e2399b688d9763d32955bff2514410f62cc60ee8d2bb889925cc65f8ed321a5b" name="php7-zip" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="f2e4acde7fce4281147e2305d3465ad348d0c8379a45f693311afe16838849750f29579db574bf67e7633e97461c49c3c4768d2a4a923b1b1b0295e11de60075" name="php7-zlib" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.36"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
</otherdata>