<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="36">
<package pkgid="9896ff53d4697ac42a229e1bfc34f2f6b000495a" name="iworxphp72-php" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="b161547eb1b5349deb53edf2f06420b4919e7bb5" name="iworxphp72-php-bcmath" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="ae8d7aa46fec75061326815593bbcc7f1894a570" name="iworxphp72-php-cli" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="8a96176f0aad31c131ccc28864bcfbddca500411" name="iworxphp72-php-common" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="da758fe53eaf6110757ffbfe9d78ed3c074f3bd6" name="iworxphp72-php-dba" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="5aa039d58cd5cf2584af12b62bf11dc2165b4973" name="iworxphp72-php-dbg" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="50167c496cbd1d0a19b6dfc66aeae2fd61804756" name="iworxphp72-php-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="18381c899fddbf2fd927c7b44134fa610329f6f6" name="iworxphp72-php-devel" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="8473ea1ab80537c8d942388e86c394e361846434" name="iworxphp72-php-embedded" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="8838ff9c422b7fa69ced3b40d796d882185efdb3" name="iworxphp72-php-enchant" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="2cc691d1c29eb45e350dd88f3b6af5c12bd8c50a" name="iworxphp72-php-fpm" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="12ba98352fc3897c908f14c62957aeb4b2ebc6f6" name="iworxphp72-php-gd" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="cea1947bb93fd5e59aec8084c485d1e1da23cc1a" name="iworxphp72-php-gmp" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="b034ab249746fb5ab7dc59f64262c41220ff3ffe" name="iworxphp72-php-imap" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="2f9678c6701cd14b1dcbb37b48204425245d0e5e" name="iworxphp72-php-interbase" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="829309ee2d96713f06e2db766d527733fba8aa9b" name="iworxphp72-php-intl" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="7e4d1c0371c8579ae9aafd353b020b4cea92b87f" name="iworxphp72-php-json" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="1d6c8715c13ccf4786da161b232a9d1680cc2825" name="iworxphp72-php-ldap" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="261fc69c06d0d259b4af122d0980c15bcac1ebbd" name="iworxphp72-php-litespeed" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="037d29dc3aa7c2710ce20ec864cb9ebfc96e4f1d" name="iworxphp72-php-mbstring" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="8088873f9c0bf4404f447f23c27ef58a0d8f5af0" name="iworxphp72-php-mysqlnd" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="175f5f02fbe1a03b7488cd635f4f402136a59a40" name="iworxphp72-php-odbc" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="1b131ab51dcc477f0dd46fe1dde210e65eef803e" name="iworxphp72-php-opcache" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="8b3e0a298f3b99908126174eb9326a527d8d2b74" name="iworxphp72-php-pdo" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="4ec46a96536b978f6c724d26b833d85baa7fd1a0" name="iworxphp72-php-pdo-dblib" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="1b6e2a46cf61859bab92255ed22825b6e3bb858c" name="iworxphp72-php-pgsql" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="c695a638908845dbc7352f43ecbc6da251d765bc" name="iworxphp72-php-process" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="9621d32ccbf3c6fe5a53471bc536456242e02c7f" name="iworxphp72-php-pspell" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="1251dce5e509c5bff91e5d09ad501e330a5149d3" name="iworxphp72-php-recode" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="7fe4116ba7e928dcae5a711f7a7d9f32ae4256f1" name="iworxphp72-php-snmp" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="c74d52dc06fc546bfa7cc7b82564711971624295" name="iworxphp72-php-soap" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="cddf001d9aa1c5daa2cfc2970e83dc2ec9831381" name="iworxphp72-php-sodium" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="39d9ca2ebd46eb6d5003dee070abe0f927e2095a" name="iworxphp72-php-tidy" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="4adaa89a622ae0698880347f7e98561d170f35cf" name="iworxphp72-php-xml" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="e04fa3317647752db127a27427bb21e91afd4a3a" name="iworxphp72-php-xmlrpc" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
<package pkgid="6086fb204e317ec09a5f3abac2a9ad0bff15012b" name="iworxphp72-php-zip" arch="x86_64">
  <version epoch="0" ver="7.2.34" rel="97.el7.iworx"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-17" date="1686139200">- Fix Missing error check and insufficient random bytes in HTTP Digest
  authentication for SOAP
  GHSA-76gg-c692-v2mw  CVE-2023-3247
- use oracle client library version 21.10</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-18" date="1687262400">- fix possible buffer overflow in date
- define %php72___phpize and %php72___phpconfig</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-19" date="1690891200">- Fix Security issue with external entity loading in XML without enabling it
  GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
  GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-20" date="1695297600">- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-21" date="1712750400">- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-22" date="1717502400">- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-23" date="1722427200">- use oracle client library version 23.5 on x86_64</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-24" date="1727352000">- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 7.2.34-25" date="1732622400">- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233</changelog>
  <changelog author="InterWorx Build System &lt;support@interworx.com&gt; - 7.2.34-25" date="1732622401">- Automated rebasing of iworx version onto upstream 7.2.34-25</changelog>
</package>
</otherdata>