Fedora 26: FEDORA-2018-c4e9207c31 Critical PHP Segmentation Fault

PHP is an HTML-embedded scripting language. PHP attempts to make it

easy for developers to write dynamically generated web pages. PHP also

offers built-in database integration for several commercial and

non-commercial database management systems, so writing a

database-enabled webpage with PHP is fairly simple. The most common

use of PHP coding is probably as a replacement for CGI scripts.

The php package contains the module (often referred to as mod_php)

which adds support for the PHP language to Apache HTTP Server.

**PHP version 7.1.13** (04 Jan 2018) **Core:** * Fixed bug php#75573

(Segmentation fault in 7.1.12 and 7.0.26). (Laruence) * Fixed bug php#75384 (PHP

seems incompatible with OneDrive files on demand). (Anatol) * Fixed bug

php#74862 (Unable to clone instance when private __clone defined). (Daniel

Ciochiu) * Fixed bug php#75074 (php-process crash when is_file() is used with

strings longer 260 chars). (Anatol) **CLI Server:** * Fixed bug php#60471

(Random "Invalid request (unexpected EOF)" using a router script). (SammyK) *

Fixed bug php#73830 (Directory does not exist). (Anatol) **FPM:** * Fixed bug

php#64938 (libxml_disable_entity_loader setting is shared between requests).

(Remi) **Opcache:** * Fixed bug php#75608 ("Narrowing occurred during type

inference" error). (Laruence, Dmitry) * Fixed bug php#75579 (Interned strings

buffer overflow may cause crash). (Dmitry) * Fixed bug php#75570 ("Narrowing

occurred during type inference" error). (Dmitry) **PCRE:** * Fixed bug

php#74183 (preg_last_error not returning error code after error). (Andrew

Nester) **Phar:** * Fixed bug php#74782 (remove file name from output to avoid

XSS). (stas) **Standard:** * Fixed bug php#75511 (fread not free unused

buffer). (Laruence) * Fixed bug php#75514 (mt_rand returns value outside

[$min,$max]+ on 32-bit) (Remi) * Fixed bug php#75535 (Inappropriately parsing

HTTP response leads to PHP segment fault). (Nikita) * Fixed bug php#75409

(accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing).

(sarciszewski) * Fixed bug php#73124 (php_ini_scanned_files() not reporting

correctly). (John Stevenson) * Fixed bug php#75574 (putenv does not work

properly if parameter contains non-ASCII unicode character). (Anatol) **Zip:**

* Fixed bug php#75540 (Segfault with libzip 1.3.1). (Remi)

su -c 'dnf upgrade php' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org