# changelog

author: Remi Collet <remi@remirepo.net> - 7.2.34-6
changelog:
  - Fix #81122 SSRF bypass in FILTER_VALIDATE_URL
    CVE-2021-21705
  - Fix #76448 Stack buffer overflow in firebird_info_cb
  - Fix #76449 SIGSEGV in firebird_handle_doer
  - Fix #76450 SIGSEGV in firebird_stmt_execute
  - Fix #76452 Crash while parsing blob data in firebird_fetch_blob
    CVE-2021-21704


author: Remi Collet <remi@remirepo.net> - 7.2.34-9
changelog:
  - fix PHP-FPM oob R/W in root process leading to priv escalation
    CVE-2021-21703
  - use libicu version 69
  - use oracle client library version 21.3


author: Remi Collet <remi@remirepo.net> - 7.2.34-11
changelog:
  - use oracle client library version 21.6
  - mysqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626
  - pgsql: fix #81720: Uninitialized array in pg_query_params(). CVE-2022-31625


author: Remi Collet <remi@remirepo.net> - 7.2.34-13
changelog:
  - phar: fix #81726 DOS when using quine gzip file. CVE-2022-31628
  - core: fix #81727 Don't mangle HTTP variable names that clash with ones
    that have a specific semantic meaning. CVE-2022-31629
  - use oracle client library version 21.7


