mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-10 08:14:09 -09:00
2b39d1f89c
Fixes the following vulnerabilities: - CVE-2025-1217: Header parser of `http` stream wrapper does not handle folded headers https://github.com/php/php-src/security/advisories/GHSA-v8xr-gpvj-cx9g - CVE-2025-1219: Libxml streams use wrong `content-type` header when requesting a redirected resource https://github.com/php/php-src/security/advisories/GHSA-p3x9-6h7p-cgfc - CVE-2025-1734: Streams HTTP wrapper does not fail for headers with invalid name and no colon https://github.com/php/php-src/security/advisories/GHSA-pcmh-g36c-qc44 - CVE-2025-1736: Stream HTTP wrapper header check might omit basic auth header https://github.com/php/php-src/security/advisories/GHSA-hgf5-96fm-v528 - CVE-2025-1861: Stream HTTP wrapper truncate redirect location to 1024 bytes https://github.com/php/php-src/security/advisories/GHSA-52jp-hrpf-2jff Changelog: https://www.php.net/ChangeLog-8.php#8.2.28 Signed-off-by: Peter Korsgaard <peter@korsgaard.com>