Fedora 27 : php (2017-46e8bdccef)

PHP version 7.1.11 26 Oct 2017 Core: - Fixed bug php75241 NULL pointer dereference in zendmmallocsmall. Laruence - Fixed bug php75236 infinite loop when printing an error-message. Andrea - Fixed bug php75252 Incorrect token formatting on two parse errors in one request. Nikita - Fixed bug php7522...

CVE-2017-7272

CVE-2017-7272 : PHP up to versions 7.1.11 is vulnerable to SSRF when apps accept an fsockopen/pfsockopen hostname with a constrained port. The issue arises because a trailing ":port" in the hostname is parsed as the port, causing fsockopen to use the port from the hostname instead of the second a...