Fedora 35: 2022-0a96e5b9b1 Moderate: PHP 8.0.20 Buffer Overflows

PHP is an HTML-embedded scripting language. PHP attempts to make it

easy for developers to write dynamically generated web pages. PHP also

offers built-in database integration for several commercial and

non-commercial database management systems, so writing a

database-enabled webpage with PHP is fairly simple. The most common

use of PHP coding is probably as a replacement for CGI scripts.

**PHP version 8.0.20** (09 Jun 2022) **CLI:** * Fixed bug

[GH-8575](https://github.com/php/php-src/issues/8575) (CLI closes standard

streams too early). (Levi Morrison) **Core:** * Fixed Haiku ZTS builds. (David

Carlier) **Date:** * Fixed bug [GH-8471](https://github.com/php/php-src/issues/8471) (Segmentation fault when converting immutable and mutable

DateTime instances created using reflection). (Derick) **FPM:** * Fixed ACL

build check on MacOS. (David Carlier) * Fixed bug php#72185: php-fpm writes

empty fcgi record causing nginx 502. (Jakub Zelenka, loveharmful) **Mysqlnd:**

* Fixed bug php#81719: mysqlnd/pdo password buffer overflow.

(**CVE-2022-31626**) (c dot fol at ambionics dot io) **OPcache:** * Fixed bug

[GH-8466](https://github.com/php/php-src/issues/8466) (ini_get() is optimized

out when the option does not exist). (Arnaud) **Pcntl:** * Fixed Haiku build.

(David Carlier) **Pgsql:** * Fixed bug php#81720: Uninitialized array in

pg_query_params(). (**CVE-2022-31625**) (cmb) **Soap:** * Fixed bug

[GH-8578](https://github.com/php/php-src/issues/8578) (Error on wrong parameter

on SoapHeader constructor). (robertnisipeanu) * Fixed bug

[GH-8538](https://github.com/php/php-src/issues/8538) (SoapClient may strip

parts of nmtokens). (cmb) **SPL:** * Fixed bug

[GH-8235](https://github.com/php/php-src/issues/8235) (iterator_count() may run

indefinitely). (cmb)

* Wed Jun 8 2022 Remi Collet - 8.0.20-1

- Update to 8.0.20 - https://www.php.net/releases/8_0_20.php

- add upstream patch to initialize pcre before mbstring

su -c 'dnf upgrade --advisory FEDORA-2022-0a96e5b9b1' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure