# changelog

author: Remi Collet <remi@remirepo.net> - 7.4.33-23
changelog:
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217
  - use oracle client library version 23.7 on x86_64 and aarch64


author: Remi Collet <remi@remirepo.net> - 7.4.33-24
changelog:
  - Fix pgsql extension does not check for errors during escaping
    CVE-2025-1735
  - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
    CVE-2025-6491
  - Fix Null byte termination in hostnames
    CVE-2025-1220


author: Remi Collet <remi@remirepo.net> - 3.2.16-4
changelog:
  - fix for PHP 8.5.0alpha3 using patch from
    https://github.com/igbinary/igbinary/pull/398
  - re-license spec file to CECILL-2.1


