Bug 918525 – <dev-lang/php-8.2.13: multiple vulnerabilities

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description John Helmert III 2023-11-25 15:28:18 UTC]

8.2.13 is a security release according to the release
notes, a couple security-looking fixes in the changelog:

* Fixed double-free of non-interned enum case name.
* Fixed bug GH-12468 (Double-free of doc_comment when overriding static property via trait).
* Fixed segfault caused by weak references to FFI objects.
* Fixed max_execution_time: don't delete an unitialized timer.
* Add missing NULL pointer error check.

Please bump to 8.2.13.

[Comment 1 Larry the Git Cow 2023-11-27 18:10:44 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=779094ed5f2758315666955ee86374b5ad28d96a

commit 779094ed5f2758315666955ee86374b5ad28d96a
Author:     Michael Orlitzky <[e-mail]>
AuthorDate: 2023-11-27 16:43:25 +0000
Commit:     Michael Orlitzky <[e-mail]>
CommitDate: 2023-11-27 18:10:18 +0000

    dev-lang/php: add 8.1.26, drop 8.1.25
    
    Bug: https://bugs.gentoo.org/918525
    Signed-off-by: Michael Orlitzky <[e-mail]>

 dev-lang/php/Manifest                                 | 2 +-
 dev-lang/php/{php-8.1.25.ebuild => php-8.1.26.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bc8acef384025797e60ba56bbf258757d05cef56

commit bc8acef384025797e60ba56bbf258757d05cef56
Author:     Michael Orlitzky <[e-mail]>
AuthorDate: 2023-11-27 16:41:19 +0000
Commit:     Michael Orlitzky <[e-mail]>
CommitDate: 2023-11-27 18:10:10 +0000

    dev-lang/php: add 8.2.13, drop 8.2.12
    
    Bug: https://bugs.gentoo.org/918525
    Signed-off-by: Michael Orlitzky <[e-mail]>

 dev-lang/php/Manifest                                 | 2 +-
 dev-lang/php/{php-8.2.12.ebuild => php-8.2.13.ebuild} | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

[Comment 2 John Helmert III 2023-11-27 19:22:35 UTC]

I guess 8.2 is all that's affected.