Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Fedora 29 PHP Update: FEDORA-2018-08ceba4f8f Critical Bugs Fixed

fedora
Calendar Grey November 16, 2018
Scroller Fedora
--------------------------------------------------------------------------------Fedora Update Notifi
**PHP version 7.2.12** (08 Nov 2018) **Core:** * Fixed bug php#76846 (Segfault in shutdown function after memory limit error)

Summary

PHP is an HTML-embedded scripting language. PHP attempts to make it

easy for developers to write dynamically generated web pages. PHP also

offers built-in database integration for several commercial and

non-commercial database management systems, so writing a

database-enabled webpage with PHP is fairly simple. The most common

use of PHP coding is probably as a replacement for CGI scripts.

The php package contains the module (often referred to as mod_php)

which adds support for the PHP language to Apache HTTP Server.

**PHP version 7.2.12** (08 Nov 2018) **Core:** * Fixed bug php#76846 (Segfault

in shutdown function after memory limit error). (Nikita) * Fixed bug php#76946

(Cyclic reference in generator not detected). (Nikita) * Fixed bug php#77035

(The phpize and ./configure create redundant .deps file). (Peter Kokot) * Fixed

bug php#77041 (buildconf should output error messages to stderr) (Mizunashi

Mana) **Date:** * Upgraded timelib to 2017.08. (Derick) * Fixed bug php#75851

(Year component overflow with date formats "c", "o", "r" and "y"). (Adam

Saponara) * Fixed bug php#77007 (fractions in `diff()` are not correctly

normalized). (Derick) **FCGI:** * Fixed php#76948 (Failed shutdown/reboot or

end session in Windows). (Anatol) * Fixed bug php#76954 (apache_response_headers

removes last character from header name). (stodorovic) **FTP:** * Fixed bug

php#76972 (Data truncation due to forceful ssl socket shutdown). (Manuel Mausz)

**intl:** * Fixed bug php#76942 (U_ARGUMENT_TYPE_MISMATCH). (anthrax at

unixuser dot org) **Reflection:** * Fixed bug php#76936 (Objects cannot access

their private attributes while handling reflection errors). (Nikita) * Fixed bug

php#66430 (ReflectionFunction::invoke does not invoke closure with object

scope). (Nikita) **Sodium:** * Some base64 outputs were truncated; this is not

the case any more. (jedisct1) * block sizes >= 256 bytes are now supposed by

sodium_pad() even when an old version of libsodium has been installed.

(jedisct1) * Fixed bug php#77008 (sodium_pad() could read (but not return nor

write) uninitialized memory when trying to pad an empty input). (jedisct1)

**Standard:** * Fixed bug php#76965 (INI_SCANNER_RAW doesn't strip trailing

whitespace). (Pierrick) **Tidy:** * Fixed bug php#77027 (tidy::getOptDoc() not

available on Windows). (cmb) **XML:** * Fixed bug php#30875

(xml_parse_into_struct() does not resolve entities). (cmb) * Add support for

getting SKIP_TAGSTART and SKIP_WHITE options. (cmb) **XMLRPC:** * Fixed bug

php#75282 (xmlrpc_encode_request() crashes). (cmb)

* Tue Nov 6 2018 Remi Collet - 7.2.12-1

- Update to 7.2.12 - https://www.php.net/releases/7_2_12.php

* Fri Nov 2 2018 Remi Collet - 7.2.12-0.1.RC1

- rebuild

* Tue Oct 23 2018 Remi Collet - 7.2.12~RC1-1

- update to 7.2.12RC1

* Wed Oct 10 2018 Remi Collet - 7.2.11-1

- Update to 7.2.11 - https://www.php.net/releases/7_2_11.php

[ 1 ] Bug #1649481 - php: memory leak in the garbage collector when using cyclic references

https://bugzilla.redhat.com/show_bug.cgi?id=1649481

su -c 'dnf upgrade --advisory FEDORA-2018-08ceba4f8f' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 29
Version: 7.2.12
Release: 1.fc29
Summary: PHP scripting language for creating dynamic web sites

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.