-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-1de5575a5e 2025-01-24 01:31:27.317885+00:00 -------------------------------------------------------------------------------- Name : php Product : Fedora 40 Version : 8.3.16 Release : 1.fc40 URL : http://www.php.net/ Summary : PHP scripting language for creating dynamic web sites Description : PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. -------------------------------------------------------------------------------- Update Information: PHP version 8.3.16 (16 Jan 2025) Core: Fixed bug GH-17106 (ZEND_MATCH_ERROR misoptimization). (ilutov) Fixed bug GH-17162 (zend_array_try_init() with dtor can cause engine UAF). (nielsdos) Fixed bug GH-17101 (AST->string does not reproduce constructor property promotion correctly). (nielsdos) Fixed bug GH-17211 (observer segfault on function loaded with dl()). (Arnaud) Fixed bug GH-17216 (Trampoline crash on error). (nielsdos) Date: Fixed bug GH-14709 DatePeriod::__construct() overflow on recurrences. (David Carlier) DBA: Skip test if inifile is disabled. (orlitzky) DOM: Fixed bug GH-17224 (UAF in importNode). (nielsdos) Embed: Make build command for program using embed portable. (dunglas) FFI: Fixed bug php#79075 (FFI header parser chokes on comments). (nielsdos) Fix memory leak on ZEND_FFI_TYPE_CHAR conversion failure. (nielsdos) Fixed bug GH-16013 and bug php#80857 (Big endian issues). (Dmitry, nielsdos) Filter: Fixed bug GH-16944 (Fix filtering special IPv4 and IPv6 ranges, by using information from RFC 6890). (Derick) FPM: Fixed bug GH-13437 (FPM: ERROR: scoreboard: failed to lock (already locked)). (Jakub Zelenka) Fixed bug GH-17112 (Macro redefinitions). (cmb, nielsdos) Fixed bug GH-17208 (bug64539-status-json-encoding.phpt fail on 32-bits). (nielsdos) GD: Fixed bug GH-16255 (Unexpected nan value in ext/gd/libgd/gd_filter.c). (nielsdos, cmb) Ported fix for libgd bug 276 (Sometimes pixels are missing when storing images as BMPs). (cmb) Gettext: Fixed bug GH-17202 (Segmentation fault ext/gettext/gettext.c bindtextdomain()). (Michael Orlitzky) Iconv: Fixed bug GH-17047 (UAF on iconv filter failure). (nielsdos) LDAP: Fixed bug GH-17280 (ldap_search() fails when $attributes array has holes). (nielsdos) LibXML: Fixed bug GH-17223 (Memory leak in libxml encoding handling). (nielsdos) MBString: Fixed bug GH-17112 (Macro redefinitions). (nielsdos, cmb) Opcache: opcache_get_configuration() properly reports jit_prof_threshold. (cmb) Fixed bug GH-17246 (GC during SCCP causes segfault). (Dmitry) PCNTL: Fix memory leak in cleanup code of pcntl_exec() when a non stringable value is encountered past the first entry. (Girgias) PgSql: Fixed bug GH-17158 (pg_fetch_result Shows Incorrect ArgumentCountError Message when Called With 1 Argument). (nielsdos) Fixed further ArgumentCountError for calls with flexible number of arguments. (David Carlier) Phar: Fixed bug GH-17137 (Segmentation fault ext/phar/phar.c). (nielsdos) SimpleXML: Fixed bug GH-17040 (SimpleXML's unset can break DOM objects). (nielsdos) Fixed bug GH-17153 (SimpleXML crash when using autovivification on document). (nielsdos) Sockets: Fixed bug GH-16276 (socket_strerror overflow handling with INT_MIN). (David Carlier / cmb) Fixed overflow on SO_LINGER values setting, strengthening values check on SO_SNDTIMEO/SO_RCVTIMEO for socket_set_option(). (David Carlier) SPL: Fixed bug GH-17225 (NULL deref in spl_directory.c). (nielsdos) Streams: Fixed bug GH-17037 (UAF in user filter when adding existing filter name due to incorrect error handling). (nielsdos) Fixed bug GH-16810 (overflow on fopen HTTP wrapper timeout value). (David Carlier) Fixed bug GH-17067 (glob:// wrapper doesn't cater to CWD for ZTS builds). (cmb) XML: Fixed bug GH-1718 (unreachable program point in zend_hash). (nielsdos) -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 15 2025 Remi Collet <remi@xxxxxxxxxxxx> - 8.3.16-1 - Update to 8.3.16 - http://www.php.net/releases/8_3_16.php -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-1de5575a5e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-announce-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue