Mageia 7: 2021-0025 Moderate: Php Data Validation Issue Fix
mageia
January 14, 2021
FILTER_VALIDATE_URL accepts URLs with invalid userinfo (CVE-2020-7071)
Summary
FILTER_VALIDATE_URL accepts URLs with invalid userinfo (CVE-2020-7071).
stream_get_contents() fails with maxlength=-1 or default.
See upstream releasenotes for other changes.
References
- https://bugs.mageia.org/show_bug.cgi?id=28036
- https://www.php.net/ChangeLog-7.php#PHP_7_3_26
- https://www.cve.org/CVERecord?id=CVE-2020-7071
Resolution
SRPMS
- 7/core/php-7.3.26-1.mga7
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Publication date: 14 Jan 2021
URL: https://advisories.mageia.org/MGASA-2021-0025.html
Type: security
CVE: CVE-2020-7071
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!