PHP Security PHP 7.3.9, 7.2.22 & 7.1.32 Security Updates Released

another flawless update, centmin mod and everything you do is amazing, thank you

 

One more reason to have CMM for my servers! Thanks, George! Glad you're back from a "relative" short trip. Even noticed you missed the 7.3.8 in the other post

 

Yep

Code (Text):

Current PHP Version: 7.3.7

 

I just upgraded to 7.3.10 few minutes ago .

 

Yeah, same here and nginx 1.17.4

 

Is it another security update?

 

No, nothing about security. Just some bug fixes.

Code (Text):

Changes with nginx 1.17.4                                        24 Sep 2019

   *) Change: better detection of incorrect client behavior in HTTP/2.

   *) Change: in handling of not fully read client request body when
      returning errors in HTTP/2.

   *) Bugfix: the "worker_shutdown_timeout" directive might not work when
      using HTTP/2.

   *) Bugfix: a segmentation fault might occur in a worker process when
      using HTTP/2 and the "proxy_request_buffering" directive.

   *) Bugfix: the ECONNABORTED error log level was "crit" instead of
      "error" on Windows when using SSL.

   *) Bugfix: nginx ignored extra data when using chunked transfer
      encoding.

   *) Bugfix: nginx always returned the 500 error if the "return" directive
      was used and an error occurred during reading client request body.

   *) Bugfix: in memory allocation error handling.

 

php-7.3.11 was released.

 

ready set go. Done.

Thanks @rdan

 

@rdan, without dynamic TLS and HPACK, something to debug. it's in my /etc/centminmod/custom_config.inc file.

 

Eva haven't enable it yet on latest CMM.
We'll just wait for him .

 

I already was recompiling nginx......

 

I am waiting also for Hpack and Dynamic TLS to be tested and added

 

I only get HPACK on 1.17.4

 

Yes we must wait for eva2000 to test it and add it on latest Centminmod version...

 

New PHP Flaw Could Let Attackers Hack Sites Running On Nginx Servers