--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2018-d034538627
2018-01-16 14:15:39.896104
--------------------------------------------------------------------------------Name        : php
Product     : Fedora 27
Version     : 7.1.13
Release     : 1.fc27
URL         : https://www.php.net/
Summary     : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.

The php package contains the module (often referred to as mod_php)
which adds support for the PHP language to Apache HTTP Server.

--------------------------------------------------------------------------------Update Information:

**PHP version 7.1.13** (04 Jan 2018)   **Core:**  * Fixed bug php#75573
(Segmentation fault in 7.1.12 and 7.0.26). (Laruence) * Fixed bug php#75384 (PHP
seems incompatible with OneDrive files on demand). (Anatol) * Fixed bug
php#74862 (Unable to clone instance when private __clone defined). (Daniel
Ciochiu) * Fixed bug php#75074 (php-process crash when is_file() is used with
strings longer 260 chars). (Anatol)  **CLI Server:**  * Fixed bug php#60471
(Random "Invalid request (unexpected EOF)" using a router script). (SammyK) *
Fixed bug php#73830 (Directory does not exist). (Anatol)  **FPM:**  * Fixed bug
php#64938 (libxml_disable_entity_loader setting is shared between requests).
(Remi)  **Opcache:**  * Fixed bug php#75608 ("Narrowing occurred during type
inference" error). (Laruence, Dmitry) * Fixed bug php#75579 (Interned strings
buffer overflow may cause crash). (Dmitry) * Fixed bug php#75570 ("Narrowing
occurred during type inference" error). (Dmitry)  **PCRE:**  * Fixed bug
php#74183 (preg_last_error not returning error code after error). (Andrew
Nester)  **Phar:**  * Fixed bug php#74782 (remove file name from output to avoid
XSS). (stas)  **Standard:**  * Fixed bug php#75511 (fread not free unused
buffer). (Laruence) * Fixed bug php#75514 (mt_rand returns value outside
[$min,$max]+ on 32-bit) (Remi) * Fixed bug php#75535 (Inappropriately parsing
HTTP response leads to PHP segment fault). (Nikita) * Fixed bug php#75409
(accept EFAULT in addition to ENOSYS as indicator  that getrandom() is missing).
(sarciszewski) * Fixed bug php#73124 (php_ini_scanned_files() not reporting
correctly). (John Stevenson) * Fixed bug php#75574 (putenv does not work
properly if parameter contains non-ASCII unicode character). (Anatol)  **Zip:**
* Fixed bug php#75540 (Segfault with libzip 1.3.1). (Remi)
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade php' at the command line.
For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora 27: php Security Update

January 16, 2018
**PHP version 7.1.13** (04 Jan 2018) **Core:** * Fixed bug php#75573 (Segmentation fault in 7.1.12 and 7.0.26)

Summary

PHP is an HTML-embedded scripting language. PHP attempts to make it

easy for developers to write dynamically generated web pages. PHP also

offers built-in database integration for several commercial and

non-commercial database management systems, so writing a

database-enabled webpage with PHP is fairly simple. The most common

use of PHP coding is probably as a replacement for CGI scripts.

The php package contains the module (often referred to as mod_php)

which adds support for the PHP language to Apache HTTP Server.

**PHP version 7.1.13** (04 Jan 2018) **Core:** * Fixed bug php#75573

(Segmentation fault in 7.1.12 and 7.0.26). (Laruence) * Fixed bug php#75384 (PHP

seems incompatible with OneDrive files on demand). (Anatol) * Fixed bug

php#74862 (Unable to clone instance when private __clone defined). (Daniel

Ciochiu) * Fixed bug php#75074 (php-process crash when is_file() is used with

strings longer 260 chars). (Anatol) **CLI Server:** * Fixed bug php#60471

(Random "Invalid request (unexpected EOF)" using a router script). (SammyK) *

Fixed bug php#73830 (Directory does not exist). (Anatol) **FPM:** * Fixed bug

php#64938 (libxml_disable_entity_loader setting is shared between requests).

(Remi) **Opcache:** * Fixed bug php#75608 ("Narrowing occurred during type

inference" error). (Laruence, Dmitry) * Fixed bug php#75579 (Interned strings

buffer overflow may cause crash). (Dmitry) * Fixed bug php#75570 ("Narrowing

occurred during type inference" error). (Dmitry) **PCRE:** * Fixed bug

php#74183 (preg_last_error not returning error code after error). (Andrew

Nester) **Phar:** * Fixed bug php#74782 (remove file name from output to avoid

XSS). (stas) **Standard:** * Fixed bug php#75511 (fread not free unused

buffer). (Laruence) * Fixed bug php#75514 (mt_rand returns value outside

[$min,$max]+ on 32-bit) (Remi) * Fixed bug php#75535 (Inappropriately parsing

HTTP response leads to PHP segment fault). (Nikita) * Fixed bug php#75409

(accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing).

(sarciszewski) * Fixed bug php#73124 (php_ini_scanned_files() not reporting

correctly). (John Stevenson) * Fixed bug php#75574 (putenv does not work

properly if parameter contains non-ASCII unicode character). (Anatol) **Zip:**

* Fixed bug php#75540 (Segfault with libzip 1.3.1). (Remi)

su -c 'dnf upgrade php' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

FEDORA-2018-d034538627 2018-01-16 14:15:39.896104 Product : Fedora 27 Version : 7.1.13 Release : 1.fc27 URL : https://www.php.net/ Summary : PHP scripting language for creating dynamic web sites Description : PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server. **PHP version 7.1.13** (04 Jan 2018) **Core:** * Fixed bug php#75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence) * Fixed bug php#75384 (PHP seems incompatible with OneDrive files on demand). (Anatol) * Fixed bug php#74862 (Unable to clone instance when private __clone defined). (Daniel Ciochiu) * Fixed bug php#75074 (php-process crash when is_file() is used with strings longer 260 chars). (Anatol) **CLI Server:** * Fixed bug php#60471 (Random "Invalid request (unexpected EOF)" using a router script). (SammyK) * Fixed bug php#73830 (Directory does not exist). (Anatol) **FPM:** * Fixed bug php#64938 (libxml_disable_entity_loader setting is shared between requests). (Remi) **Opcache:** * Fixed bug php#75608 ("Narrowing occurred during type inference" error). (Laruence, Dmitry) * Fixed bug php#75579 (Interned strings buffer overflow may cause crash). (Dmitry) * Fixed bug php#75570 ("Narrowing occurred during type inference" error). (Dmitry) **PCRE:** * Fixed bug php#74183 (preg_last_error not returning error code after error). (Andrew Nester) **Phar:** * Fixed bug php#74782 (remove file name from output to avoid XSS). (stas) **Standard:** * Fixed bug php#75511 (fread not free unused buffer). (Laruence) * Fixed bug php#75514 (mt_rand returns value outside [$min,$max]+ on 32-bit) (Remi) * Fixed bug php#75535 (Inappropriately parsing HTTP response leads to PHP segment fault). (Nikita) * Fixed bug php#75409 (accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing). (sarciszewski) * Fixed bug php#73124 (php_ini_scanned_files() not reporting correctly). (John Stevenson) * Fixed bug php#75574 (putenv does not work properly if parameter contains non-ASCII unicode character). (Anatol) **Zip:** * Fixed bug php#75540 (Segfault with libzip 1.3.1). (Remi) su -c 'dnf upgrade php' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
Product : Fedora 27
Version : 7.1.13
Release : 1.fc27
URL : https://www.php.net/
Summary : PHP scripting language for creating dynamic web sites

Related News