<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="63">
<package pkgid="735284e86e92e0bc7b5b81d96034ad74701d4617a62f761754a5facf395c88318a75668ef4a3d9a563509ff6d5b09e1075a7b32e993a77688b705d7cc61ebf3b" name="apache2-mod_php7" arch="src">
  <version epoch="0" ver="7.4.33" rel="18.11"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b15b279375932879613c1dbaf9530d067d90fe351512ee942b042bb37c303f4ea97da91d78fa1b7ae7da2334dc0869c77a51f28d36c253992c4bbcd59dfd7801" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.11"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="93cc8e989b9d4f80a42807aa3224426015696b31a8fd98a8ff103bed4b834f6d6de0a58146b2877ccb2e59964f84df28d268df5f97ccf933d6d7ac698777c5af" name="php7" arch="src">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="dde278e4e8b82bd163c654ebe904f397b13910dbdb5b8785d4a0e4fe76513a26c543ae110cd85caafc89bbcd81b7fac2dfa019c48c854bda2e930a49a62d0c37" name="php7" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="a2e134beb7ec916ff3a6463e6b3795f0a4fee31d79543b8ab77f9b8ca122ddffa7a50b3ccf616ae1e2e29423e1fe50eaef442cead4040a8eaffa715c0a41dd9c" name="php7-bcmath" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="f058845c9e54e7a2c244988974eefd23d310098f0b6e12871cb3a6a21f4ae6b1d30e5186ae77d2ee8d1c774b5385def5d53a8bfe49d18ff4a12cf0fe9ee12bd4" name="php7-bz2" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="8111d2ee6886a49817290ac2ef2a8c0a801787b7a38942f022261c1a4007e863c62ed173490532eb09dab8dba396fd6dbc97ab77f16dafaeff17d23c86b684db" name="php7-calendar" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="058a62ce027809a2d671f287b1ba139c66809f89a2112b389a87feddbbbdcf4e6f111a9f5f33c99851c2ac650fb8d7bc131c0e36e95f095e2bea899079d290e1" name="php7-cli" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="bd44fe6aa935f988e4597791019bb3a2d30e7067e6a39a9ba015d8b950723cc480cb43909eb363edc89f876c1828ef9be11e81fef8dbf862e0035b0c1b798483" name="php7-ctype" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="afe8b33135e6ed58525399347c2029ca02f87387f70e6aaa1884152b0cd7fbd97275ec263d233561f65f99aad45d6d2120ae9f1d69863d3931586672482a966d" name="php7-curl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="43cf02e702aff8cdab25166c7fdf1081447f20b15ba55610d7389007ae646f429e5f3e68d43906b890ab1c278d5e7f8d5d10ef80179185bf4b1a81c655ccb376" name="php7-dba" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b62ce647102fd048be5678d916942208f9b3e1769204a5c09a971451192e13e3c16f43a9a42c4614f819076567024782a021468ec6f96c6264a0bd97bc12165d" name="php7-devel" arch="noarch">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="9c3c3ade1f16fc38f4fc455bdce35aa0a9aebbfbc6443da374627ed26b16196eb2b3578ad7e3b82535326bee7119ad5d666f24e71ec1663ae5d7da7553982b36" name="php7-dom" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="3eb3da9b7bd25e1aa6d8ea087cbb2f2d3b4cdb9fcc5149092ef970d6e99cb03976f260b0180a5e1c9deaa457baffb38fef262e496af2ffe58f0cf0fd5201e459" name="php7-embed" arch="src">
  <version epoch="0" ver="7.4.33" rel="18.10"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="1b00054ae8bd1ab54ff0848215ae5beec7fa7aac62c6550ddc66ebe352b894503d3a1d9b36963dca7724d512fb9384fdb970431fe36bf72fab5e8d61f81f3edb" name="php7-embed" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.10"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="63845f334da182b30dd3451ace58535d4a2aace797b7f93898c27f1e18bdbaa1d90b224f098a178d14c855925ccf09cb321935c649d4c14ab983000b74e795a1" name="php7-enchant" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b432525852ee7fd8882303e437c28b959802138c3f3291839ea7261957fd16bcbc1e0b0e20eaaec0b6f79f38023bb63bd3a894b4d3d9ef863dda092b0331d58e" name="php7-exif" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="253c53af63fb14eefc2e6dab77353b2f04871380b9d5bddc8d39100c2dbcd5e0f9f3786203acf79b7b6cb882dedef3c89a84963e1b7c02d54caa8a10a095a450" name="php7-fastcgi" arch="src">
  <version epoch="0" ver="7.4.33" rel="18.10"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="04b6d6bb46f53bcecfec2599ce12af4dc53797cdb8cc85d6b328e7fd7d668b36a1fe3d40f0e46d0e9a7796cbac06a9f1cd9c3dffd08c7a0179e6d1692796b9fb" name="php7-fastcgi" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.10"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="8e3a0252cae388ac35b3a6e67dd8777bce228d2c23ead02a7a7a2a12251d4dab181dd60d700546eee5932b33855507c2f3aa1dae2cbebee0ffb5be0393c9a5a3" name="php7-fileinfo" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="869778a82390ab7cbee447dea810b734452d685b1ee18609aa94abe3ab87da82b0b79ba6d2aee6aa1207d563fdda11db102bf4c180feae73e56c1815912cbb5f" name="php7-fpm" arch="src">
  <version epoch="0" ver="7.4.33" rel="18.11"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="9cc2c41f4c0fd39727b5a55123466d345e1568152f954123e07d7e8402808ddc0f563dc008f0f56d7d8cad7d6ec9ba73151ed252d1d63ba91dfec55f012b08ff" name="php7-fpm" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.11"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="93d73069482dc3fea2d572741f537ab857966c9a7b0001ea8accdb0952aa90b8a21346ad37a2246ac5b9606ce696c5f372c6d3b2243e9885ba6432b5e0e7f59f" name="php7-ftp" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="9ae917a74a3620320cf697ab606c02a47241a710615250d0c3412d01ea0d1f84dd79de2e568491598da4db91a50b8ca2b68da2594066ebdbdf549a0e6e4286b8" name="php7-gd" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="70faa1c882145ca5853f144688b6116e9f9442ad3c208cc9856dfbf2d777f6c33e7d46090185cf55f9b0454d7a008d6468fe99f6edb832be6f8125056941ca09" name="php7-gettext" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="a2789bf69e46b171e94bc41757e45a5cca4d168ed54d2fd9389133d0775056222ff0f7e2ea55cec676a84bccffc462daa6493df73a1939cb92045aa827da7af6" name="php7-gmp" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="995fe270406454e8d4096a0945e990759cf054728ac54a111af588b02a43abb558be7715f982649a7f349dcbd9cc022a781fe8da26bc137d6c22b579b4071fdb" name="php7-iconv" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="107f511fb9902d27ef5b758dd81fa22090e064349454581f0d64f0aa1564eaff8a6963e22b1c7318c26ec699b368d7203f075d6464ae1f5f506c6c9b0703aee1" name="php7-intl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="1d05cb58939b4cd99c4f2d320a030bac3b77b520e4464794704ed7e9fbe1e513a2368d4baee4d66589108185110743a1232ebbb11ddc1ee4a03b3b0e578d36a9" name="php7-json" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="4bb5ec3fd6ffb88aa6ca508b44f2d4a4e6935688606e26a811fe400ca8ed11605a6923f054d1eb3f937c673a9ea7c4d3171e8cf66f3a33eb0e3ff1a78cd4de75" name="php7-ldap" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="9bcbeb37085fae83ace6ecaa3509b2faa2400a7438713977c28eb75dab67eadf058c82a6b9996958fca36f005b84e3561d6c871ec560bf4342971224356683f7" name="php7-mbstring" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b2855194892a54ac5e7e7c8c35a982d561fb0a44791da9d58ba5de93eecbfca10c138ab1d1ecf652b125d0b939ba9b6fe6188731d898917d6dfc2463cabf3cd4" name="php7-mysql" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="5e81be89be0e92f3b89274c5bfc5483b2064f1f5a6a4fe3dae8d40e34a29f34a658706cd1e4ff0e34cfc22b75db802b03943dfac613944a7d8d027fb873df3a1" name="php7-odbc" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="5ae8364437b8c85e069cc885f6177ae76952d7c100aa840b94be47d6471b4737dd8998e9d3f15415d3a780b6d5c53f2d21b61df22d9b63b2a39cbc0dbe75a3ef" name="php7-opcache" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="1010223c6360d9b5fb20d3dd3c1a30b89edb85f93fd3622d05f286042b1c0d3f3fb9647eb101783aec93fa63dd86cae14e6024d0ef9e576961364f65f6b7d998" name="php7-openssl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b083e5ecb75a2e36255d74cb2d61bcdef1c3f2a03640f08467a32abb01b696713b4f398c33d0ed447fac33cb678f22c979c4a845e92595fd06a54221ff8625c8" name="php7-pcntl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="5afc7f705547bb2cd8d2e6c5d0857c702606a6135a5719a32f70eb46e3dac5747e04459a80e99e9c4f5a33e22ce814588dae6cdb524e3f09e61d4d1950777716" name="php7-pdo" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="e8dbd5b014946117ea040bb826d0d3bc42a6a40ecf86928450831107773ce105aae9ab254b9209957dc92b2187b9455186fd92d210973757f92e369c970bec75" name="php7-pear" arch="noarch">
  <version epoch="0" ver="1.10.25" rel="1.4"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1587297600">- Update to version 1.10.19
  - PEAR 1.10.12
  * adjust dependencies based on new releases
  - XML_Util 1.4.5
  * fix Trying to access array offset on value of type int</changelog>
  <changelog author="pgajdos@suse.com" date="1589889600">- provides and obsoletes php7-pear-Archive_Tar, former location
  of PEAR/Archive/Tar.php</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610452800">- (Build)Requires php-cli to make sure the CLI is installed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610539200">- (Build)Requires php7-cli to make sure the php7 CLI is installed</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- added patches
  fix bsc#1187372 -- https://github.com/pear/pear-core/pull/115
  + php7-pear-undefined-variables.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1628683200">- Update to 1.10.21
  - PEAR 1.10.13
  * unsupported protocol - use --force to continue
  * Add $this operator to _determineIfPowerpc calls
- Update to 1.10.20
  - Archive_Tar 1.4.14
  * Properly fix symbolic link path traversal (CVE-2021-32610)
  - Archive_Tar 1.4.13
  * Relative symlinks failing (out-of path file extraction)
  - Archive_Tar 1.4.12
  - Archive_Tar 1.4.11
  - Archive_Tar 1.4.10
  * Fix block padding when the file buffer length is a multiple
    of 512 and smaller than Archive_Tar buffer length
  * Don't try to copy username/groupname in chroot jail
  - ------------------------------------------------------------------</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- Update to 1.10.22
  - PEAR 1.10.14
  * Put glue and pieces parameters to implode in correct order for
    PHP 7.4+
  * Fix PHP bug 81653: Typo in install-pear-nozlib.phar
  * Add %S EXPECTF capability
  * Fix: Creation of dynamic property PEAR_Error::$callback is
    deprecated
  * Fixed extension loaded check for pecl binaries
  * Remove -n option from pecl.bat for shared extensions
  * Fix Using ${var} in strings is deprecated
  * Fix lingering license references to PHP license
  * Exclude tests from composer classmap
  * Fix private lastError name
- Removed upstreamed patch php7-pear-undefined-variables.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1709985600">- Update to 1.10.23
  - PEAR 1.10.15
  * Cleanup uneeded test
  * Fix PHP Deprecated: Calling get_class() without arguments</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1733054400">- Update to 1.10.24
  - PEAR 1.10.16
  * Fix bug #27796: "Array to string" conversion warnings on
    installs/other actions
  * Never reference E_STRICT on PHP 8.4+
  * Fix tests 8.1+
  - Archive_Tar 1.5.0
  * Fix @return true... to @return bool true... on some functions
  * Use 775 default for mkdirs, to avoid world-write
  - Structures_Graph 1.2.0
  * Update composer info (adds PHP/PEAR deps)
  * Update phpunit tests
  * Composer shows wrong license</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765713600">- Update to 1.10.25
  - PEAR 1.10.17
  * Fix HTTP chunked encoding handling
  * fix composer.json: typo in replace for pear_exception package
  * switch to https by default
  * Throw new Error instead of E_USER_ERROR on PHP 7.0+
  * update tests for https-first behavior
  - Archive_Tar 1.6.0
  * big file support
  * Fix return value of _writeBlock
  * Remove gzopen/gztell/gzseek shim</changelog>
</package>
<package pkgid="2840fc13face1ce8651116fbd63bbd0902cd643bc31aa5ad79fe71ea0be097ae8366b9ce2c360e5de52e66137eef5d1bea57e0d9e2541b7f580b10342455c1b9" name="php7-pear" arch="src">
  <version epoch="0" ver="1.10.25" rel="1.4"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574510400">- Update to version 1.10.17
- Package separately, as builtin PEAR was deprecated in PHP-7.4</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574683200">- Create php7-pecl subpackage for PECL builds</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574769600">- Install metadata files (registry, filemap, channels, ...) in
  /var/lib/pear/ instead of /usr/share/php7/PEAR/</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574769601">- Only use the GPG keys of Chuck Burgess. Extracted from the
  Release Manager public keys.
- Add release versions of PEAR modules</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1575720000">- Apply upstream patch for https://bugs.php.net/78890
  + pear-cacheid-array-check.patch
- Recommend php7-openssl to allow https sources to be used
- Modify metadata_dir for system configuration only
- Add /var/lib/pear directory where xml files are stored
- Cleanup %files section</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582891200">- Sort contents of .filemap to make build reproducible</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586520000">- Update to version 1.10.18
- Remove pear-cacheid-array-check.patch (upstreamed)
- Contents of .filemap are now sorted internally</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1587297600">- Update to version 1.10.19
  - PEAR 1.10.12
  * adjust dependencies based on new releases
  - XML_Util 1.4.5
  * fix Trying to access array offset on value of type int</changelog>
  <changelog author="pgajdos@suse.com" date="1589889600">- provides and obsoletes php7-pear-Archive_Tar, former location
  of PEAR/Archive/Tar.php</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610452800">- (Build)Requires php-cli to make sure the CLI is installed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610539200">- (Build)Requires php7-cli to make sure the php7 CLI is installed</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- added patches
  fix bsc#1187372 -- https://github.com/pear/pear-core/pull/115
  + php7-pear-undefined-variables.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1628683200">- Update to 1.10.21
  - PEAR 1.10.13
  * unsupported protocol - use --force to continue
  * Add $this operator to _determineIfPowerpc calls
- Update to 1.10.20
  - Archive_Tar 1.4.14
  * Properly fix symbolic link path traversal (CVE-2021-32610)
  - Archive_Tar 1.4.13
  * Relative symlinks failing (out-of path file extraction)
  - Archive_Tar 1.4.12
  - Archive_Tar 1.4.11
  - Archive_Tar 1.4.10
  * Fix block padding when the file buffer length is a multiple
    of 512 and smaller than Archive_Tar buffer length
  * Don't try to copy username/groupname in chroot jail
  - ------------------------------------------------------------------</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- Update to 1.10.22
  - PEAR 1.10.14
  * Put glue and pieces parameters to implode in correct order for
    PHP 7.4+
  * Fix PHP bug 81653: Typo in install-pear-nozlib.phar
  * Add %S EXPECTF capability
  * Fix: Creation of dynamic property PEAR_Error::$callback is
    deprecated
  * Fixed extension loaded check for pecl binaries
  * Remove -n option from pecl.bat for shared extensions
  * Fix Using ${var} in strings is deprecated
  * Fix lingering license references to PHP license
  * Exclude tests from composer classmap
  * Fix private lastError name
- Removed upstreamed patch php7-pear-undefined-variables.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1709985600">- Update to 1.10.23
  - PEAR 1.10.15
  * Cleanup uneeded test
  * Fix PHP Deprecated: Calling get_class() without arguments</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1733054400">- Update to 1.10.24
  - PEAR 1.10.16
  * Fix bug #27796: "Array to string" conversion warnings on
    installs/other actions
  * Never reference E_STRICT on PHP 8.4+
  * Fix tests 8.1+
  - Archive_Tar 1.5.0
  * Fix @return true... to @return bool true... on some functions
  * Use 775 default for mkdirs, to avoid world-write
  - Structures_Graph 1.2.0
  * Update composer info (adds PHP/PEAR deps)
  * Update phpunit tests
  * Composer shows wrong license</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765713600">- Update to 1.10.25
  - PEAR 1.10.17
  * Fix HTTP chunked encoding handling
  * fix composer.json: typo in replace for pear_exception package
  * switch to https by default
  * Throw new Error instead of E_USER_ERROR on PHP 7.0+
  * update tests for https-first behavior
  - Archive_Tar 1.6.0
  * big file support
  * Fix return value of _writeBlock
  * Remove gzopen/gztell/gzseek shim</changelog>
</package>
<package pkgid="5952b1e2f235bc7cf6e534d7838154ebfaf607bfb1de8fcf7edd9c24541d2ee9925f3d199359364e4e4c273a8675f6bf2217b0cd496e04a94b00bb704cab7c2d" name="php7-pecl" arch="noarch">
  <version epoch="0" ver="1.10.25" rel="1.4"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1587297600">- Update to version 1.10.19
  - PEAR 1.10.12
  * adjust dependencies based on new releases
  - XML_Util 1.4.5
  * fix Trying to access array offset on value of type int</changelog>
  <changelog author="pgajdos@suse.com" date="1589889600">- provides and obsoletes php7-pear-Archive_Tar, former location
  of PEAR/Archive/Tar.php</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610452800">- (Build)Requires php-cli to make sure the CLI is installed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1610539200">- (Build)Requires php7-cli to make sure the php7 CLI is installed</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- added patches
  fix bsc#1187372 -- https://github.com/pear/pear-core/pull/115
  + php7-pear-undefined-variables.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1628683200">- Update to 1.10.21
  - PEAR 1.10.13
  * unsupported protocol - use --force to continue
  * Add $this operator to _determineIfPowerpc calls
- Update to 1.10.20
  - Archive_Tar 1.4.14
  * Properly fix symbolic link path traversal (CVE-2021-32610)
  - Archive_Tar 1.4.13
  * Relative symlinks failing (out-of path file extraction)
  - Archive_Tar 1.4.12
  - Archive_Tar 1.4.11
  - Archive_Tar 1.4.10
  * Fix block padding when the file buffer length is a multiple
    of 512 and smaller than Archive_Tar buffer length
  * Don't try to copy username/groupname in chroot jail
  - ------------------------------------------------------------------</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1701000000">- Update to 1.10.22
  - PEAR 1.10.14
  * Put glue and pieces parameters to implode in correct order for
    PHP 7.4+
  * Fix PHP bug 81653: Typo in install-pear-nozlib.phar
  * Add %S EXPECTF capability
  * Fix: Creation of dynamic property PEAR_Error::$callback is
    deprecated
  * Fixed extension loaded check for pecl binaries
  * Remove -n option from pecl.bat for shared extensions
  * Fix Using ${var} in strings is deprecated
  * Fix lingering license references to PHP license
  * Exclude tests from composer classmap
  * Fix private lastError name
- Removed upstreamed patch php7-pear-undefined-variables.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1709985600">- Update to 1.10.23
  - PEAR 1.10.15
  * Cleanup uneeded test
  * Fix PHP Deprecated: Calling get_class() without arguments</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1733054400">- Update to 1.10.24
  - PEAR 1.10.16
  * Fix bug #27796: "Array to string" conversion warnings on
    installs/other actions
  * Never reference E_STRICT on PHP 8.4+
  * Fix tests 8.1+
  - Archive_Tar 1.5.0
  * Fix @return true... to @return bool true... on some functions
  * Use 775 default for mkdirs, to avoid world-write
  - Structures_Graph 1.2.0
  * Update composer info (adds PHP/PEAR deps)
  * Update phpunit tests
  * Composer shows wrong license</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1765713600">- Update to 1.10.25
  - PEAR 1.10.17
  * Fix HTTP chunked encoding handling
  * fix composer.json: typo in replace for pear_exception package
  * switch to https by default
  * Throw new Error instead of E_USER_ERROR on PHP 7.0+
  * update tests for https-first behavior
  - Archive_Tar 1.6.0
  * big file support
  * Fix return value of _writeBlock
  * Remove gzopen/gztell/gzseek shim</changelog>
</package>
<package pkgid="dac90011d5a6de5b95dae3a51705f49d57038038fbae9a723d64abbb6666ef10c90a2e7c6eb9ae2c27f7bd8da88ea9ff264abf36e52116ea0417e23e850652c1" name="php7-pgsql" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="f1da1a50f84a42d556aa3c798352f3c8c0fcf4f706e13833330de0d59768211408a11e90ed9e0cec7a85043021f6d61da60b22c65ccf357d7d0440493e897a75" name="php7-phar" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="742a3fda980955f068e4dfa63341721e84ab193b6dbe165f7a98a756a7dc4a975921ac24866cbaef956a6b16cfa95657c86542a474b7c550f6604177735d82db" name="php7-posix" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="d5506ecb76da8c7130676e3ea17a1d86baa66b1431ff5f8dcd57267d01b34c058282e77d6f35de90d579ff312b8a4778df81bebbce73d2eea8a7cc724009c773" name="php7-readline" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="91e482ae7513ec69aa45b61ca85daa7000ffd0b3a1d85f7eb321c3cb4344f623c9bdd2dec410439512ae82b4c23a0c7ee6fa9d719e5e722e55710cf67249a920" name="php7-shmop" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="b6814a39e5bc21bf20693f2edb67359c7e0b85dede1e9c498cefaaf248d497b6c984facd8e42dba50aeb2dff3be6fdfdbd0105291570edc00322f118459e7fa7" name="php7-snmp" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="aee59b6be6a96d409e142330fb88809ef4749482122a3737ac669c4462dfcf5d5d148a84a1829115d158505c5a77a5f7015927401aa8c7b54f1be1031158682f" name="php7-soap" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="a102aeccc6d2b62e0f1715004cda6678c66b0b0ae02f4f6affb0bee40c17dc89a202a23eb058f2e884f451a2ace2dfdbaef0df34ae10e6fa327afc0c265b312e" name="php7-sockets" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="c52e094dbedd413788dcaffced26c509042eefe43b7da6c71086a5e8a893a2b543dbf56bd8c7eb66fef1c930280f139d0fe319008d0b36e70416a5b79bace2c4" name="php7-sodium" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="9afac5e111fd52981eb7246c7a57a6a5c5c85aaaf246cb859f4da82801af5203e2bbf6f973d5b113efe09653162c02dab3f8ae254bc5988d9aa59e2f80fc7fad" name="php7-sqlite" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="8d9b5a97f5eb410a2000cb1c9067d2a6e7c99e02b3a8e6b03d3edb4cef4913330c7c3ad18e23861c5a6cf17751a553fcb83747720cb1075b071a0029fe9fcfea" name="php7-sysvmsg" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="a4bd2a7ee91a500c0ee8ec011f41e9772ed60527941a19335a271e7d665d395a959255e628db794ba1bf162b8a2a5449cee36c4048abe0c56013b91432244bf5" name="php7-sysvsem" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="70b96075fb3615989da87230497d2f9f28a5d56047d4d9201d855a11f6baabed06085fbc31fbefa673d0ed68ac56059eb7c35c9da3930c83b085ec7422753d78" name="php7-sysvshm" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="ca5cad3d24293a96e85e934bcee43b358280a1563049e394a863a614bb289cf3c5b5f38b72bb372f1e1282d373a4797f55241c68896ee1a16a08bf023d31893b" name="php7-test" arch="src">
  <version epoch="0" ver="7.4.33" rel="18.184"/>
  <changelog author="pgajdos@suse.com" date="1654862400">- version update to 7.4.30
  * This is a security release.
  https://www.php.net/ChangeLog-7.php#7.4.30</changelog>
  <changelog author="pgajdos@suse.com" date="1664452800">- version update to 7.4.32
  * This is security release that addresses an infinite recursion with specially
    constructed phar files, and prevents a clash with variable name mangling for
    the __Host/__Secure HTTP headers.
  * CVEs fixed: CVE-2022-31628, CVE-2022-31629
  https://www.php.net/ChangeLog-7.php#7.4.32
  https://www.php.net/ChangeLog-7.php#7.4.31</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33
  * This is security release that fixes an OOB read due to insufficient
    input validation in imageloadfont(), and a buffer overflow in
    hash_update() on long parameter.
  * CVE-2022-37454 [bsc#1204577], CVE-2022-31630 [bsc#1204979]
  https://www.php.net/ChangeLog-7.php#7.4.33</changelog>
  <changelog author="pgajdos@suse.com" date="1668081600">- hardcode openssl version, openssl3 will not be supported
  https://www.php.net/manual/en/openssl.requirements.php</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="3caabfb07f2e3274b4b976027a575df55b38a7326f09edaaf4f2942c6f4950984824f9e79cc829aa0b4034d1316ff8c9f5211e64cfd0bce44c724d364e688aaa" name="php7-test" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.184"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="7a7191744740cd016c229b974ca370130dae54c851906a8d2d5800a4ce1ff751007b7d530b70a28539978c5a436910ea45394f654e06ae70150b5bcf3c6bbae8" name="php7-tidy" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="6e94b616b37c671629b542c574407ebea0b7cc7690ca763434d33c5bf888f212a857667d082df6266cfe36d2140d2eb9244c2309ad906de40dab677499e8f20e" name="php7-tokenizer" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="21b6e0bd228db2e4829e4ad412294a09c27f67676b64e3d273d1ffc2c574009a0e61152ebbb2f0aec0438a63472faa4211d5d0340eaff01d7843148f673b32d1" name="php7-xmlreader" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="e9e85d2250d5ad7fa54755ab352bc06f6d95df3286f940ac301660bc0f4ea9d348aaa658d6dc17127d535718034833741c9d7d412c004f4ac0472eaf02a52b60" name="php7-xmlrpc" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="da9e39dd5dca73ad7e7b2412deb8e7de65a335ccae5e315f227b83ab91598eeecf8640f8a1991135bf8a13e850c319c5c2d1292827cafa37aaf831258419dd80" name="php7-xmlwriter" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="8b181d890e33a58652a2ae0951556d4a6fe75935ef68466488bf0a29e4e8347690c367d04b015f9773448bec7cc7617f9c6c9df2df8709f462c940278e6e56c5" name="php7-xsl" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="fb5f692a80fbe4aa95a05a8fd1eb464398db014c9a90a617b353a3749ca7a8a569ed023a59cb7b6eec804651ff552150a51f8d0d24277a40f2754649915dea1b" name="php7-zip" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
<package pkgid="eb594b6da6cbb8e66b2bdca2441dc15a704959543eefbdb18bd2fee95de1fba5fdf1ce1c9c7ab5dd11bced4efa84dbea093c409e18789265babd71f2f00d2809" name="php7-zlib" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="18.30"/>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="munix9@googlemail.com" date="1673265601">- Add fix-NETSNMP_DISABLE_DES.patch to solve
  "error: 'usmDESPrivProtocol' undeclared" on Factory/TW</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1676548800">- security update
- added patches
  fix CVE-2023-0567 (Password_verify() always return true with some hash)
  + php7-CVE-2023-0567-a.patch and php7-CVE-2023-0567-b.patch
  fix CVE-2023-0568 (1-byte array overrun in common path resolve code)
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 (DOS vulnerability when parsing multipart request body)
  + php7-CVE-2023-0662.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1681992000">- The %_restart_on_update macro was removed from systemd-rpm-macros.
  Remove %posttrans for FPM as it wasn't working as intended anyway.
  [boo#1210576]</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1692878400">- security update
- added patches
  fix CVE-2023-3823 [bsc#1214106], XML loading external entity without being enabled
  + php7-CVE-2023-3823.patch
  fix CVE-2023-3824 [bsc#1214103], buffer overflows in phar_dir_read()
  + php7-CVE-2023-3824.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1717070400">- Fix check for newer versions of ICU
  + php7-fix-newer-versions-icu.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884800">- security update
- added patches
  fix CVE-2024-2756 [bsc#1222857], host/secure cookie bypass due to partial fix
  + php7-CVE-2024-2756.patch
  fix CVE-2024-3096 [bsc#1222858], password_verify can erroneously return true, opening ATO risk
  + php7-CVE-2024-3096.patch
  fix CVE-2024-5458 [bsc#1226073], filter bypass in filter_var FILTER_VALIDATE_URL
  + php7-CVE-2024-5458.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718884801">- drop unmaintained apache-rex usage</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1724932800">- Fix build with GCC14</changelog>
  <changelog author="&#x418;&#x43B;&#x44C;&#x44F; &#x418;&#x43D;&#x434;&#x438;&#x433;&#x43E; &lt;ilya@ilya.top&gt;" date="1740571200">- Added php7-7.4.33-openssl3.patch to fix build with openssl3.</changelog>
  <changelog author="pgajdos@suse.com" date="1752235200">- security update
- added patches
  CVE-2025-1220 [bsc#1246167], unprocessed null bytes in hostnames can lead to SSRF
  + php7-CVE-2025-1220.patch
  CVE-2025-1735 [bsc#1246146], pgsql extension does not properly handle errors within escape functions
  + php7-CVE-2025-1735.patch
  CVE-2025-6491 [bsc#1246148], NULL pointer dereference when processing a SoapVar with a fully qualified name that is longer than 2G
  + php7-CVE-2025-6491.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702400">- Fix build with GCC15</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702401">- Added php-libxml2-2.13.patch to fix build with libxml2 &gt;= 2.13</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1760702402">- Added php7-attribute-unused.patch to fix wrong use of macro</changelog>
</package>
</otherdata>