FEDORA-2021-9f68f5f752 — security update for php

stable

php-7.4.25-1.fc34

FEDORA-2021-9f68f5f752 created by remi 3 years ago for Fedora 34

PHP version 7.4.25 (21 Oct 2021)

DOM:

Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID). (Viktor Volkov)

FFI:

Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined). (Dmitry)

Fileinfo:

Fixed bug #78987 (High memory usage during encoding detection). (Anatol)

Filter:

Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing). (cmb, Nikita)

FPM:

Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703). (Jakub Zelenka)

SPL:

Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free). (cmb, Nikita, Tyson Andre)

Streams:

Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper). (cmb)

XML:

Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace). (Aliaksandr Bystry, cmb)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-9f68f5f752

This update has been submitted for testing by remi.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

imabug provided feedback 3 years ago

karma

This update has been pushed to testing.

3 years ago

remi edited this update.

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

modified

3 years ago

Builds

php-7.4.25-1.fc34

BZ#2016535 CVE-2021-21703 php: Local privilege escalation via PHP-FPM

BZ#2017129 CVE-2021-21703 php: Local privilege escalation via PHP-FPM [fedora-all]

php-7.4.25-1.fc34

Automated Test Results

ignored