--- rpms/php/sme8/php-5.3.3-CVE-2012-1172.patch 2012/06/29 14:45:08 1.1 +++ rpms/php/sme8/php-5.3.3-CVE-2012-1172.patch 2012/06/29 14:54:00 1.2 @@ -0,0 +1,18 @@ + +https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1172 + +http://git.php.net/?p=php-src.git;a=commitdiff;h=95dcd799fb6fdccbc60d3bba3cd759f6b421ee69 + +--- php-5.3.3/main/rfc1867.c.cve1172 ++++ php-5.3.3/main/rfc1867.c +@@ -1008,6 +1008,10 @@ SAPI_API SAPI_POST_HANDLER_FUNC(rfc1867_ + } + tmp++; + } ++ /* Brackets should always be closed */ ++ if(c != 0) { ++ skip_upload = 1; ++ } + } + + total_bytes = cancel_upload = 0;