Advisories ยป MGAA-2023-0130

Updated php packages fix some issues

Publication date: 01 Dec 2023
Modification date: 01 Dec 2023
Type: bugfix
Affected Mageia releases : 9

Description

Updated php package fix some issues:

Core:
- Fixed double-free of non-interned enum case name.
- Incorrect result of stripos with single character needle
- Double-free of doc_comment when overriding static property via trait
- Fixed segfault caused by weak references to FFI objects.
- Fixed max_execution_time: don't delete an unitialized timer.
- Arginfo soft-breaks with namespaced class return type if the class
  name starts with N

DOM:
- Fix registerNodeClass with abstract class crashing.
- Add missing NULL pointer error check.
- Fix validation logic of php:function() callbacks.

Fiber:
- ReflectionFiber segfault

FPM:
- Loading ext in FPM config does not register module handlers
- FPM: segfault dynamically loading extension without opcache
- FastCGI terminates conn after FCGI_GET_VALUES

Intl:
- Removed the BC break on IntlDateFormatter::construct which threw an
  exception with an invalid locale.

Opcache:
- Added warning when JIT cannot be enabled.
- Crashes in zend_accel_inheritance_cache_find since upgrading to 8.1.3
  due to corrupt on-disk file cache

OpenSSL:
- Missing sigbio creation checking in openssl_cms_verify

SOAP:
- Segmentation fault on SoapClient::__getTypes
- SOAP WSDL cache race condition causes Segmentation Fault
- SOAP leaves incomplete cache file on ENOSPC
- Fix incorrect uri check in SOAP caching.
- Fix segfault and assertion failure with refcounted props and arrays.
- Fix potential crash with an edge case of persistent encoders.
- Fixed bug #75306 (Memleak in SoapClient).

Streams:
- getimagesize with "&$imageinfo" fails on StreamWrappers

XMLReader:
- Add missing NULL pointer error check.

XMLWriter:
- Add missing NULL pointer error check.

XSL:
- Add missing module dependency.
- Fix validation logic of php:function() callbacks.

References

SRPMS

9/core