FEDORA-2021-06795380db — security update for php

stable

php-8.0.13-1.fc35

FEDORA-2021-06795380db created by remi 2 years ago for Fedora 35

PHP version 8.0.13 (18 Nov 2021)

Core:

Fixed bug #81518 (Header injection via default_mimetype / default_charset). (cmb)

Date:

Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2). (cmb)

MBString:

Fixed bug #76167 (mbstring may use pointer from some previous request). (cmb, cataphract)

Opcache:

Fixed bug #81512 (Unexpected behavior with arrays and JIT). (Dmitry)

PCRE:

Fixed bug #81424 (PCRE2 10.35 JIT performance regression). (cmb)

XML:

Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707) (cmb)

XMLReader:

Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property). (Nikita)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-06795380db

This update has been submitted for testing by remi.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

imabug provided feedback 2 years ago

karma

This update has been pushed to testing.

2 years ago

remi edited this update.

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

php-8.0.13-1.fc35

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

BZ#2026045 CVE-2021-21707 php: special character breaks path in xml parsing

BZ#2026046 CVE-2021-21707 php: special character breaks path in xml parsing [fedora-all]

php-8.0.13-1.fc35

Automated Test Results

ignored