[SECURITY] Fedora 27 Update: php-7.1.13-1.fc27
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-d034538627
2018-01-16 14:15:39.896104
--------------------------------------------------------------------------------
Name : php
Product : Fedora 27
Version : 7.1.13
Release : 1.fc27
URL : http://www.php.net/
Summary : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.
The php package contains the module (often referred to as mod_php)
which adds support for the PHP language to Apache HTTP Server.
--------------------------------------------------------------------------------
Update Information:
**PHP version 7.1.13** (04 Jan 2018) **Core:** * Fixed bug php#75573
(Segmentation fault in 7.1.12 and 7.0.26). (Laruence) * Fixed bug php#75384 (PHP
seems incompatible with OneDrive files on demand). (Anatol) * Fixed bug
php#74862 (Unable to clone instance when private __clone defined). (Daniel
Ciochiu) * Fixed bug php#75074 (php-process crash when is_file() is used with
strings longer 260 chars). (Anatol) **CLI Server:** * Fixed bug php#60471
(Random "Invalid request (unexpected EOF)" using a router script). (SammyK) *
Fixed bug php#73830 (Directory does not exist). (Anatol) **FPM:** * Fixed bug
php#64938 (libxml_disable_entity_loader setting is shared between requests).
(Remi) **Opcache:** * Fixed bug php#75608 ("Narrowing occurred during type
inference" error). (Laruence, Dmitry) * Fixed bug php#75579 (Interned strings
buffer overflow may cause crash). (Dmitry) * Fixed bug php#75570 ("Narrowing
occurred during type inference" error). (Dmitry) **PCRE:** * Fixed bug
php#74183 (preg_last_error not returning error code after error). (Andrew
Nester) **Phar:** * Fixed bug php#74782 (remove file name from output to avoid
XSS). (stas) **Standard:** * Fixed bug php#75511 (fread not free unused
buffer). (Laruence) * Fixed bug php#75514 (mt_rand returns value outside
[$min,$max]+ on 32-bit) (Remi) * Fixed bug php#75535 (Inappropriately parsing
HTTP response leads to PHP segment fault). (Nikita) * Fixed bug php#75409
(accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing).
(sarciszewski) * Fixed bug php#73124 (php_ini_scanned_files() not reporting
correctly). (John Stevenson) * Fixed bug php#75574 (putenv does not work
properly if parameter contains non-ASCII unicode character). (Anatol) **Zip:**
* Fixed bug php#75540 (Segfault with libzip 1.3.1). (Remi)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade php' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------