Stay Secure with the Latest Linux Advisories

security advisorysoftware updateFedora

Fedora 30: FEDORA-2020-96cb012029 Critical: PHP Update and Fixes

**PHP version 7.3.17** (16 Apr 2020) **Core:** * Fixed bug php#79364 (When copy empty array, next key is unspecified). (cmb) * Fixed bug php#78210 (Invalid pointer address). (cmb, Nikita) **CURL:** * Fixed bug php#79199 (curl_copy_handle() memory leak). (cmb) **Date:** * Fixed bug php#79396 (DateTime hour incorrect during DST jump forward). (Nate Brunette) **Iconv:**. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-96cb012029 2020-04-25 02:40:43.164230 --------------------------------------------------------------------------------Name : php Product : Fedora 30 Version : 7.3.17 Release : 1.fc30 URL : https://www.php.net/ Summary : PHP scripting language for creating dynamic web sites Description : PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server. --------------------------------------------------------------------------------Update Information: **PHP version 7.3.17** (16 Apr 2020) **Core:** * Fixed bug php#79364 (When copy empty array, next key is unspecified). (cmb) * Fixed bug php#78210 (Invalid pointer address). (cmb, Nikita) **CURL:** * Fixed bug php#79199 (curl_copy_handle() memory leak). (cmb) **Date:** * Fixed bug php#79396 (DateTime hour incorrect during DST jump forward). (Nate Brunette) **Iconv:** * Fixed bug php#79200 (Some iconv functions cut Windows-1258). (cmb) **OPcache:** * Fixed bug php#79412 (Opcache chokes and uses 100% CPU on specific script). (Dmitry) **Session:** * Fixed bugphp#79413 (session_create_id() fails for active sessions). (cmb) **Shmop:** * Fixed bug php#79427 (Integer Overflow in shmop_open()). (cmb) **SimpleXML:** * Fixed bug php#61597 (SXE properties may lack attributes and content). (cmb) **Spl:** * Fixed bug php#75673 (SplStack::unserialize() behavior). (cmb) * Fixed bug php#79393 (Null coalescing operator failing with SplFixedArray). (cmb) **Standard:** * Fixed bug php#79330 (shell_exec() silently truncates after a null byte). (stas) * Fixed bug php#79465 (OOB Read in urldecode()). (stas) * Fixed bug php#79410 (system() swallows last chunk if it is exactly 4095 bytes without newline). (Christian Schneider) **Zip:** * Fixed Bug php#79296 (ZipArchive::open fails on empty file). (Remi) * Fixed bug php#79424 (php_zip_glob uses gl_pathc after call to globfree). (Max Rees) --------------------------------------------------------------------------------ChangeLog: * Tue Apr 14 2020 Remi Collet - 7.3.17-1 - Update to 7.3.17 - https://www.php.net/releases/7_3_17.php --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-96cb012029' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Explore the enhancements in Fedora 30's PHP revision that tackles multiple issues in version 7.3.17, featuring essential corrections.. PHP Update, Fedora 30, Software Fixes, Dynamic Web Scripting. . Severity: Critical. LinuxSecurity.com Team

Apr 24, 2020 •Critical Fedora