# changelog

author: Remi Collet <remi@remirepo.net> - 7.2.34-9
changelog:
  - fix PHP-FPM oob R/W in root process leading to priv escalation
    CVE-2021-21703
  - use libicu version 69
  - use oracle client library version 21.3


author: Remi Collet <remi@remirepo.net> - 7.2.34-11
changelog:
  - use oracle client library version 21.6
  - mysqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626
  - pgsql: fix #81720: Uninitialized array in pg_query_params(). CVE-2022-31625


author: Remi Collet <remi@remirepo.net> - 7.2.34-13
changelog:
  - phar: fix #81726 DOS when using quine gzip file. CVE-2022-31628
  - core: fix #81727 Don't mangle HTTP variable names that clash with ones
    that have a specific semantic meaning. CVE-2022-31629
  - use oracle client library version 21.7


author: Remi Collet <remi@remirepo.net> - 7.2.34-15
changelog:
  - pdo: fix #81740: PDO::quote() may return unquoted string
    CVE-2022-31631
  - use oracle client library version 21.8


author: Remi Collet <remi@remirepo.net> - 7.2.34-16
changelog:
  - fix #81744: Password_verify() always return true with some hash
    CVE-2023-0567
  - fix #81746: 1-byte array overrun in common path resolve code
    CVE-2023-0568
  - fix DOS vulnerability when parsing multipart request body
    CVE-2023-0662


author: InterWorx Build System <support@interworx.com> - 7.2.34-16
changelog:
  - Automated rebasing of iworx version onto upstream 7.2.34-16
  - changed ownership of /etc/logrotate.d/iworxphp72-php to root


