Remi's RPM repository - Packages

php - PHP scripting language for creating dynamic web sites

Website:

http://www.php.net/

Licence:

PHP and Zend and BSD and MIT and ASL 1.0 and NCSA

Vendor:

Remi's RPM repository <https://rpms.remirepo.net/>

Description:

PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.

The php package contains the module (often referred to as mod_php)
which adds support for the PHP language to Apache HTTP Server.

Packages

- Core:
  Fix #79699 PHP parses encoded cookie names so malicious `__Host-` cookies can be sent
  CVE-2020-7070
- OpenSSL:
  Fix #79601 Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV
  CVE-2020-7069
  Fix bug #78079 openssl_encrypt_ccm.phpt fails with OpenSSL 1.1.1c

- Core:
  Fix #79877 getimagesize function silently truncates after a null byte
- Phar:
  Fix #79797 use of freed hash key in the phar_parse_zipfile function
  CVE-2020-7068