Stay Secure with the Latest Linux Advisories

security advisoryfedoraFedora

Fedora 32: 2021-ca0e53d310 Moderate: PHP 7.4.14 Bug Fixes Overview

**PHP version 7.4.14** (07 Jan 2021) **Core:** * Fixed bug php#74558 (Can't rebind closure returned by Closure::fromCallable()). (cmb) * Fixed bug php#80345 (PHPIZE configuration has outdated PHP_RELEASE_VERSION). (cmb) * Fixed bug php#72964 (White space not unfolded for CC/Bcc headers). (cmb) * Fixed bug php#80362 (Running dtrace scripts can cause php to crash). (al at coralnet dot. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-ca0e53d310 2021-01-16 01:22:32.462447 --------------------------------------------------------------------------------Name : php Product : Fedora 32 Version : 7.4.14 Release : 1.fc32 URL : https://www.php.net/ Summary : PHP scripting language for creating dynamic web sites Description : PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server. --------------------------------------------------------------------------------Update Information: **PHP version 7.4.14** (07 Jan 2021) **Core:** * Fixed bug php#74558 (Can't rebind closure returned by Closure::fromCallable()). (cmb) * Fixed bug php#80345 (PHPIZE configuration has outdated PHP_RELEASE_VERSION). (cmb) * Fixed bug php#72964 (White space not unfolded for CC/Bcc headers). (cmb) * Fixed bug php#80362 (Running dtrace scripts can cause php to crash). (al at coralnet dot name) * Fixed bug php#80393 (Build of PHP extension fails due to configuration gap with libtool). (kir dot morozov at gmail dot com) * Fixed bug php#80402 (configure filteringout -lpthread). (Nikita) * Fixed bug php#77069 (stream filter loses final block of data). (cmb) **Fileinfo:** * Fixed bug php#77961 (finfo_open crafted magic parsing SIGABRT). (cmb) **FPM:** * Fixed bug php#69625 (FPM returns 200 status on request without SCRIPT_FILENAME env). (Jakub Zelenka) **Intl:** * Fixed bug php#80425 (MessageFormatAdapter::getArgTypeList redefined). (Nikita) **OpenSSL:** * Fixed bug php#80368 (OpenSSL extension fails to build against LibreSSL due to lack of OCB support). (Nikita) **Phar:** * Fixed bug php#73809 (Phar Zip parse crash - mmap fail). (cmb) * Fixed bug php#75102 (`PharData` says invalid checksum for valid tar). (cmb) * Fixed bug php#77322 (PharData::addEmptyDir('/') Possible integer overflow). (cmb) **PDO MySQL:** * Fixed bug php#80458 (PDOStatement::fetchAll() throws for upsert queries). (Kamil Tekiela) * Fixed bug php#63185 (nextRowset() ignores MySQL errors with native prepared statements). (Nikita) * Fixed bug php#78152 (PDO::exec() - Bad error handling with multiple commands). (Nikita) * Fixed bug php#70066 (Unexpected "Cannot execute queries while other unbuffered queries"). (Nikita) * Fixed bug php#71145 (Multiple statements in init command triggers unbuffered query error). (Nikita) * Fixed bug php#76815 (PDOStatement cannot be GCed/closeCursor-ed when a PROCEDURE resultset SIGNAL). (Nikita) **Standard:** * Fixed bug php#77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo). (**CVE-2020-7071**) (cmb) * Fixed bug php#80366 (Return Value of zend_fstat() not Checked). (sagpant, cmb) * Fixed bug php#80411 (References to null-serialized object break serialize()). (Nikita) **Tidy:** * Fixed bug php#77594 (ob_tidyhandler is never reset). (cmb) **Zlib:** * Fixed php#48725 (Support for flushing in zlib stream). (cmb) --------------------------------------------------------------------------------ChangeLog: * Tue Jan 5 2021 Remi Collet - 7.4.14-1 - Update to 7.4.14 - https://www.php.net/releases/7_4_14.php - explicitlyrequires make --------------------------------------------------------------------------------References: [ 1 ] Bug #1913847 - CVE-2020-7071 php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1913847 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-ca0e53d310' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Exciting news! PHP version 7.4.14 is now available for Fedora 32, fixing critical core issues and improving performance and stability for users. Fedora PHP Update, Core Issues, Bug Fixes, Software Improvements. . LinuxSecurity.com Team

Jan 15, 2021 Fedora