All ProjectsArch LinuxCommunity PackagesPacmanRelease Engineering Switch

Show Task #

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

Tasklist

FS#69242 - [php] [Security] insufficient validation (CVE-2020-7071)

Task Type Bug Report Category Security Status Closed Assigned To No-one Architecture All Severity Medium Priority Normal Reported Version Due in Version Undecided Due Date Undecided Percent Complete Votes 0 Private No

Details Summary ======= The package php is vulnerable to insufficient validation via CVE-2020-7071. Guidance ======== Updating to version 8.0.1 or to version 7.4.14 from the previous stable series fixes the issue. References ========== https://security.archlinux.org/AVG-1415 https://bugs.php.net/bug.php?id=77423 https://git.php.net/?p=php-src.git;a=commitdiff;h=b7f837381ef642d7fb369bfd0069e7525d4c22ea https://git.php.net/?p=php-src.git;a=commitdiff;h=5346d0ae69f290c7704a39cd10a574a2d661f05a https://git.php.net/?p=php-src.git;a=commitdiff;h=d4f5aed22193106271510efd643ba8f349b7d85f