FEDORA-2020-8e36afc743 — security update for php

stable

php-7.3.21-1.fc31

FEDORA-2020-8e36afc743 created by remi 4 years ago for Fedora 31

PHP version 7.3.21 (06 Aug 2020)

Apache:

Fixed bug #79030 (Upgrade apache2handler's php_apache_sapi_get_request_time to return usec). (Herbert256)

Core:

Fixed bug #79877 (getimagesize function silently truncates after a null byte) (cmb)
Fixed bug #79778 (Assertion failure if dumping closure with unresolved static variable). (Nikita)
Fixed bug #79792 (HT iterators not removed if empty array is destroyed). (Nikita)

Curl:

Fixed bug #79741 (curl_setopt CURLOPT_POSTFIELDS asserts on object with declared properties). (Nikita)

Fileinfo:

Fixed bug #79756 (finfo_file crash (FILEINFO_MIME)). (cmb)

FTP:

Fixed bug #55857 (ftp_size on large files). (cmb)

Mbstring:

Fixed bug #79787 (mb_strimwidth does not trim string). (XXiang)

Phar:

Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile function). (CVE-2020-7068) (cmb)

Standard:

Fixed bug #70362 (Can't copy() large 'data://' with open_basedir). (cmb)
Fixed bug #79817 (str_replace() does not handle INDIRECT elements). (Nikita)
Fixed bug #78008 (dns_check_record() always return true on Alpine). (Andy Postnikov)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2020-8e36afc743

This update has been submitted for testing by remi.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

remi edited this update.

4 years ago

This update can be pushed to stable now if the maintainer wishes

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

modified

4 years ago

Builds

php-7.3.21-1.fc31

BZ#1868109 CVE-2020-7068 php: Use of freed hash key in the phar_parse_zipfile function

BZ#1868110 CVE-2020-7068 php: Use of freed hash key in the phar_parse_zipfile function [fedora-all]

php-7.3.21-1.fc31

Automated Test Results

ignored