A crash in SessionHandler::read() was reported caused by uninitializing data->lastkey, if session_start() is not called. Upstream bug: https://bugs.php.net/bug.php?id=69111 Upstream patch: https://git.php.net/?p=php-src.git;a=commit;h=a793b709086eed655bc98f933d838b8679b28920
Created php tracking bugs for this issue: Affects: fedora-all [bug 1305565]
Not security
Upstream bug indicates it's a crash triggered by a specially crated PHP script. There's no indication of any security impact.