Fedora 29: php Security Update 2019-8c4b25b5ec

    Date 07 Jun 2019
    80
    Posted By LinuxSecurity Advisories
    **PHP version 7.2.19** (30 May 2019) **EXIF:** * Fixed bug php#77988 (heap- buffer-overflow on php_jpg_get16). (CVE-2019-11040) (Stas) **FPM:** * Fixed bug php#77934 (php-fpm kill -USR2 not working). (Jakub Zelenka) * Fixed bug php#77921 (static.php.net doesn't work anymore). (Peter Kokot) **GD:** * Fixed bug php#77943 (imageantialias($image, false); does not work). (cmb) * Fixed bug
    --------------------------------------------------------------------------------
    Fedora Update Notification
    FEDORA-2019-8c4b25b5ec
    2019-06-08 02:12:28.761796
    --------------------------------------------------------------------------------
    
    Name        : php
    Product     : Fedora 29
    Version     : 7.2.19
    Release     : 2.fc29
    URL         : https://www.php.net/
    Summary     : PHP scripting language for creating dynamic web sites
    Description :
    PHP is an HTML-embedded scripting language. PHP attempts to make it
    easy for developers to write dynamically generated web pages. PHP also
    offers built-in database integration for several commercial and
    non-commercial database management systems, so writing a
    database-enabled webpage with PHP is fairly simple. The most common
    use of PHP coding is probably as a replacement for CGI scripts.
    
    The php package contains the module (often referred to as mod_php)
    which adds support for the PHP language to Apache HTTP Server.
    
    --------------------------------------------------------------------------------
    Update Information:
    
    **PHP version 7.2.19** (30 May 2019)  **EXIF:**  * Fixed bug php#77988 (heap-
    buffer-overflow on php_jpg_get16). (CVE-2019-11040) (Stas)  **FPM:**  * Fixed
    bug php#77934 (php-fpm kill -USR2 not working). (Jakub Zelenka) * Fixed bug
    php#77921 (static.php.net doesn't work anymore). (Peter Kokot)  **GD:**  * Fixed
    bug php#77943 (imageantialias($image, false); does not work). (cmb) * Fixed bug
    php#77973 (Uninitialized read in gdImageCreateFromXbm). (CVE-2019-11038) (cmb)
    **Iconv:**  * Fixed bug php#78069 (Out-of-bounds read in
    iconv.c:_php_iconv_mime_decode() due to integer overflow). (CVE-2019-11039).
    (maris dot adam)  **JSON:**  * Fixed bug php#77843 (Use after free with json
    serializer). (Nikita)  **Opcache:**  * Fixed possible crashes, because of
    inconsistent PCRE cache and opcache SHM reset. (Alexey Kalinin, Dmitry)
    **PDO_MySQL:**  * Fixed bug php#77944 (Wrong meta pdo_type for bigint on LLP64).
    (cmb)  **Reflection:**  * Fixed bug php#75186 (Inconsistent reflection of
    Closure:::__invoke()). (Nikita)  **Session:**  * Fixed bug php#77911 (Wrong
    warning for session.sid_bits_per_character). (cmb)  **SPL:**  * Fixed bug
    php#77024 (SplFileObject::__toString() may return array). (Craig Duncan)
    **SQLite:**  * Fixed bug php#77967 (Bypassing open_basedir restrictions via file
    uris). (Stas)
    --------------------------------------------------------------------------------
    ChangeLog:
    
    * Wed May 29 2019 Remi Collet  - 7.2.19-2
    - Update to 7.2.19 - https://www.php.net/releases/7_2_19.php
    * Tue Apr 30 2019 Remi Collet  - 7.2.18-1
    - Update to 7.2.18 - https://www.php.net/releases/7_2_18.php
    * Wed Apr  3 2019 Remi Collet  - 7.2.17-1
    - Update to 7.2.17 - https://www.php.net/releases/7_2_17.php
    * Wed Mar  6 2019 Remi Collet  - 7.2.16-1
    - Update to 7.2.16 - https://www.php.net/releases/7_2_16.php
    - add upstream patch for OpenSSL 1.1.1b
    - adapt systzdata patch (v17)
    * Wed Feb  6 2019 Remi Collet  - 7.2.15-1
    - Update to 7.2.15 - https://www.php.net/releases/7_2_15.php
    * Tue Jan  8 2019 Remi Collet  - 7.2.14-1
    - Update to 7.2.14 - https://www.php.net/releases/7_2_14.php
    * Tue Dec 18 2018 Remi Collet  - 7.2.14~RC1-1
    - update to 7.2.14RC1
    * Sat Dec  8 2018 Remi Collet  - 7.2.13-2
    - Fix null pointer dereference in imap_mail CVE-2018-19935
    * Wed Dec  5 2018 Remi Collet  - 7.2.13-1
    - Update to 7.2.13 - https://www.php.net/releases/7_2_13.php
    * Wed Nov 21 2018 Remi Collet  - 7.2.13-0.1.RC1
    - update to 7.2.13RC1
    * Tue Nov  6 2018 Remi Collet  - 7.2.12-1
    - Update to 7.2.12 - https://www.php.net/releases/7_2_12.php
    * Fri Nov  2 2018 Remi Collet  - 7.2.12-0.1.RC1
    - rebuild
    * Tue Oct 23 2018 Remi Collet  - 7.2.12~RC1-1
    - update to 7.2.12RC1
    * Wed Oct 10 2018 Remi Collet  - 7.2.11-1
    - Update to 7.2.11 - https://www.php.net/releases/7_2_11.php
    --------------------------------------------------------------------------------
    
    This update can be installed with the "dnf" update program. Use
    su -c 'dnf upgrade --advisory FEDORA-2019-8c4b25b5ec' at the command
    line. For more information, refer to the dnf documentation available at
    https://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
    
    All packages are signed with the Fedora Project GPG key. More details on the
    GPG keys used by the Fedora Project can be found at
    https://fedoraproject.org/keys
    --------------------------------------------------------------------------------
    _______________________________________________
    package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it.
    To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it.
    Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
    List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
    List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it.
    

    LinuxSecurity Poll

    If you are using full-disk encryption: are you concerned about the resulting performance hit?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 2 answer(s).
    /main-polls/34-if-you-are-using-full-disk-encryption-are-you-concerned-about-the-resulting-performance-hit?task=poll.vote&format=json
    34
    radio
    [{"id":"120","title":"Yes","votes":"14","type":"x","order":"1","pct":60.87,"resources":[]},{"id":"121","title":"No ","votes":"9","type":"x","order":"2","pct":39.13,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
    bottom 200

    Please enable / Bitte aktiviere JavaScript!
    Veuillez activer / Por favor activa el Javascript![ ? ]

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.