Fedora Linux 8748 Published by

A php security update has been released for Fedora 35.



SECURITY: Fedora 35 Update: php-8.0.20-1.fc35


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-0a96e5b9b1
2022-06-17 01:18:22.128601
--------------------------------------------------------------------------------

Name : php
Product : Fedora 35
Version : 8.0.20
Release : 1.fc35
URL :   http://www.php.net/
Summary : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.

--------------------------------------------------------------------------------
Update Information:

**PHP version 8.0.20** (09 Jun 2022) **CLI:** * Fixed bug
[GH-8575](  https://github.com/php/php-src/issues/8575) (CLI closes standard
streams too early). (Levi Morrison) **Core:** * Fixed Haiku ZTS builds. (David
Carlier) **Date:** * Fixed bug [GH-8471](  https://github.com/php/php-
src/issues/8471) (Segmentation fault when converting immutable and mutable
DateTime instances created using reflection). (Derick) **FPM:** * Fixed ACL
build check on MacOS. (David Carlier) * Fixed bug php#72185: php-fpm writes
empty fcgi record causing nginx 502. (Jakub Zelenka, loveharmful) **Mysqlnd:**
* Fixed bug php#81719: mysqlnd/pdo password buffer overflow.
(**CVE-2022-31626**) (c dot fol at ambionics dot io) **OPcache:** * Fixed bug
[GH-8466](  https://github.com/php/php-src/issues/8466) (ini_get() is optimized
out when the option does not exist). (Arnaud) **Pcntl:** * Fixed Haiku build.
(David Carlier) **Pgsql:** * Fixed bug php#81720: Uninitialized array in
pg_query_params(). (**CVE-2022-31625**) (cmb) **Soap:** * Fixed bug
[GH-8578](  https://github.com/php/php-src/issues/8578) (Error on wrong parameter
on SoapHeader constructor). (robertnisipeanu) * Fixed bug
[GH-8538](  https://github.com/php/php-src/issues/8538) (SoapClient may strip
parts of nmtokens). (cmb) **SPL:** * Fixed bug
[GH-8235](  https://github.com/php/php-src/issues/8235) (iterator_count() may run
indefinitely). (cmb)
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 8 2022 Remi Collet - 8.0.20-1
- Update to 8.0.20 -   http://www.php.net/releases/8_0_20.php
- add upstream patch to initialize pcre before mbstring
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-0a96e5b9b1' at the command
line. For more information, refer to the dnf documentation available at
  http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
  https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________