stable

php-7.0.21-1.fc25

FEDORA-2017-b674dc22ad created by remi 7 years ago for Fedora 25

PHP version 7.0.21 (06 Jul 2017)

Core:

  • Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly parsed). (Manuel Mausz)
  • Fixed bug #74658 (Undefined constants in array properties result in broken properties). (Laruence)
  • Fixed misparsing of abstract unix domain socket names. (Sara)
  • Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in zval_get_type). (Nikita)
  • Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from unserialize). (Nikita)
  • Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability). (Stas)
  • Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via php_parse_date()). (Derick)

DOM:

  • Fixed bug #69373 (References to deleted XPath query results). (ttoohey)

Intl:

  • Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message). (libnex)
  • Fixed bug #74705 (Wrong reflection on Collator::getSortKey and collator_get_sort_key). (Tyson Andre, Remi)
  • Fixed bug #73634 (grapheme_strpos illegal memory access). (Stas)

Mbstring:

  • Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

Opcache:

  • Fixed bug #74663 (Segfault with opcache.memory_protect and validate_timestamp). (Laruence)

OpenSSL:

  • Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()). (Stas)

Reflection:

  • Fixed bug #74673 (Segfault when cast Reflection object to string with undefined constant). (Laruence)

SPL:

  • Fixed bug #74478 (null coalescing operator failing with SplFixedArray). (jhdxr)

Standard:

  • Fixed bug #74708 (Invalid Reflection signatures for random_bytes and random_int). (Tyson Andre, Remi)
  • Fixed bug #73648 (Heap buffer overflow in substr). (Stas)

FTP:

  • Fixed bug #74598 (ftp:// wrapper ignores context arg). (Sara)

PHAR:

  • Fixed bug #74386 (Phar::__construct reflection incorrect). (villfa)

SOAP

  • Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY). (Dmitry)

Streams:

  • Fixed bug #74556 (stream_socket_get_name() returns '\0'). (Sara)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-b674dc22ad

This update has been submitted for testing by remi.

7 years ago

remi edited this update.

7 years ago

This update has been pushed to testing.

7 years ago
User Icon robbinespu commented & provided feedback 7 years ago
karma

LGTM

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

7 years ago

This update has been submitted for stable by remi.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata
Type
security
Karma
1
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
7 years ago
in testing
7 years ago
in stable
7 years ago
modified
7 years ago

Automated Test Results