# changelog

author: Peter Ajamian <pj@ghettoforge.org> - 1:2.3.0-1
changelog:
  - Dovecot to 2.3.0.rc1
  - Pigeonhole to 0.5.0.rc1
  - Renamed to dovecot23
  - Rebase waitonline patch
  - Log reopen patch no longer needed.
  - Removed libstats files and replaced with old-stats.
  - Added 20-submission.conf.


author: Remi Collet <remi@remirepo.net> - 7.2.34-21
changelog:
  - use oracle client library version 21.13 on x86_64, 19.19 on aarch64
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


author: Remi Collet <remi@remirepo.net> - 7.2.34-24
changelog:
  - Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
    CVE-2024-4577
  - Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
    CVE-2024-8926
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925


author: Remi Collet <remi@remirepo.net> - 7.2.34-25
changelog:
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233


author: Remi Collet <remi@remirepo.net> - 7.2.34-26
changelog:
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - use oracle client library version 23.26 on x86_64 and aarch64


author: Remi Collet <remi@remirepo.net> - 7.2.34-27
changelog:
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568


author: Remi Collet <remi@remirepo.net> - 7.2.34-29
changelog:
  - Fixed SQL injection via E'...' backslash breakout
    CVE-2026-17543
  - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
    CVE-2026-7260


author: Remi Collet <remi@remirepo.net> - 7.2.34-6
changelog:
  - Fix #81122 SSRF bypass in FILTER_VALIDATE_URL
    CVE-2021-21705
  - Fix #76448 Stack buffer overflow in firebird_info_cb
  - Fix #76449 SIGSEGV in firebird_handle_doer
  - Fix #76450 SIGSEGV in firebird_stmt_execute
  - Fix #76452 Crash while parsing blob data in firebird_fetch_blob
    CVE-2021-21704


author: Remi Collet <remi@remirepo.net> - 7.2.34-9
changelog:
  - fix PHP-FPM oob R/W in root process leading to priv escalation
    CVE-2021-21703
  - use libicu version 69
  - use oracle client library version 21.3


author: Remi Collet <remi@remirepo.net> - 7.2.34-11
changelog:
  - use oracle client library version 21.6
  - mysqlnd: fix #81719: mysqlnd/pdo password buffer overflow. CVE-2022-31626
  - pgsql: fix #81720: Uninitialized array in pg_query_params(). CVE-2022-31625


author: Remi Collet <remi@remirepo.net> - 7.2.34-13
changelog:
  - phar: fix #81726 DOS when using quine gzip file. CVE-2022-31628
  - core: fix #81727 Don't mangle HTTP variable names that clash with ones
    that have a specific semantic meaning. CVE-2022-31629
  - use oracle client library version 21.7


author: Remi Collet <remi@remirepo.net> - 7.2.34-15
changelog:
  - pdo: fix #81740: PDO::quote() may return unquoted string
    CVE-2022-31631
  - use oracle client library version 21.8


author: Remi Collet <remi@remirepo.net> - 7.2.34-16
changelog:
  - fix #81744: Password_verify() always return true with some hash
    CVE-2023-0567
  - fix #81746: 1-byte array overrun in common path resolve code
    CVE-2023-0568
  - fix DOS vulnerability when parsing multipart request body
    CVE-2023-0662


author: Remi Collet <remi@remirepo.net> - 7.2.34-17
changelog:
  - Fix Missing error check and insufficient random bytes in HTTP Digest
    authentication for SOAP
    GHSA-76gg-c692-v2mw  CVE-2023-3247
  - use oracle client library version 21.10


author: Remi Collet <remi@remirepo.net> - 7.3.34-19
changelog:
  - Fix Security issue with external entity loading in XML without enabling it
    GHSA-3qrf-m4j2-pcrr CVE-2023-3823
  - Fix Buffer mismanagement in phar_dir_read()
    GHSA-jqcx-ccgc-xwhv CVE-2023-3824
  - move httpd/nginx wants directive to config files in /etc


author: Joseph Purkis <jpurkis@interworx.com>
changelog:
  - Adding Almalinux and cleaning up old rhexs
  - Added interworx-prep-vpopmail for details look at interworx-prep-vpopmail notes.


