{"update": {"autokarma": false, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "16 Apr 2015, **PHP 5.6.8**\r\n\r\nCore:\r\n* Fixed bug #66609 (php crashes with __get() and ++ operator in some cases). (Dmitry, Laruence)\r\n* Fixed bug #68021 (get_browser() browser_name_regex returns non-utf-8 characters). (Tjerk)\r\n* Fixed bug #68917 (parse_url fails on some partial urls). (Wei Dai)\r\n* Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration options). (Anatol Belski)\r\n* Additional fix for bug #69152 (Type confusion vulnerability in exception::getTraceAsString). (Stas)\r\n* Fixed bug #69210 (serialize function return corrupted data when sleep has non-string values). (Juan Basso)\r\n* Fixed bug #69212 (Leaking VIA_HANDLER func when exception thrown in __call/... arg passing). (Nikita)\r\n* Fixed bug #69221 (Segmentation fault when using a generator in combination with an Iterator). (Nikita)\r\n* Fixed bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability). (Stas)\r\n* Fixed bug #69353 (Missing null byte checks for paths in various PHP extensions). (Stas)\r\n\r\nApache2handler:\r\n* Fixed bug #69218 (potential remote code execution with apache 2.4 apache2handler). (Gerrit Venema)\r\n\r\ncURL:\r\n* Implemented FR#69278 (HTTP2 support). (Masaki Kagaya)\r\n* Fixed bug #68739 (Missing break / control flow). (Laruence)\r\n* Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER). (Laruence)\r\n\r\nDate:\r\n* Fixed bug #69336 (Issues with \"last day of <monthname>\"). (Derick Rethans)\r\n\r\nEnchant:\r\n* Fixed bug #65406 (Enchant broker plugins are in the wrong place in windows builds). (Anatol)\r\n\r\nEreg:\r\n* Fixed bug #68740 (NULL Pointer Dereference). (Laruence)\r\n\r\nFileinfo:\r\n* Fixed bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault). (Anatol Belski)\r\n\r\nFilter:\r\n* Fixed bug #69202: (FILTER_FLAG_STRIP_BACKTICK ignored unless other flags are used). (Jeff Welch)\r\n* Fixed bug #69203 (FILTER_FLAG_STRIP_HIGH doesn't strip ASCII 127). (Jeff Welch)\r\n\r\nOPCache:\r\n* Fixed bug #69297 (function_exists strange behavior with OPCache on disabled function). (Laruence)\r\n* Fixed bug #69281 (opcache_is_script_cached no longer works). (danack)\r\n* Fixed bug #68677 (Use After Free). (CVE-2015-1351) (Laruence)\r\n\r\nOpenSSL\r\n* Fixed bugs #68853, #65137 (Buffered crypto stream data breaks IO polling in stream_select() contexts) (Chris Wright)\r\n* Fixed bug #69197 (openssl_pkcs7_sign handles default value incorrectly) (Daniel Lowrey)\r\n* Fixed bug #69215 (Crypto servers should send client CA list) (Daniel Lowrey)\r\n* Add a check for RAND_egd to allow compiling against LibreSSL (Leigh)\r\n\r\nPhar:\r\n* Fixed bug #64343 (PharData::extractTo fails for tarball created by BSD tar). (Mike)\r\n* Fixed bug #64931 (phar_add_file is too restrictive on filename). (Mike)\r\n* Fixed bug #65467 (Call to undefined method cli_arg_typ_string). (Mike)\r\n* Fixed bug #67761 (Phar::mapPhar fails for Phars inside a path containing  \".tar\"). (Mike)\r\n* Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar). (Stas)\r\n* Fixed bug #69441 (Buffer Overflow when parsing tar/zip/phar in phar_set_inode). (Stas)\r\n\r\nPostgres:\r\n* Fixed bug #68741 (Null pointer dereference). (CVE-2015-1352) (Laruence)\r\n\r\nSPL:\r\n* Fixed bug #69227 (Use after free in zval_scan caused by spl_object_storage_get_gc). (adam dot scarr at 99designs dot com)\r\n\r\nSOAP:\r\n* Fixed bug #69293 (NEW segfault when using SoapClient::__setSoapHeader (bisected, regression)). (Laruence)\r\n\r\nSqlite3:\r\n* Fixed bug #68760 (SQLITE segfaults if custom collator throws an exception). (Dan Ackroyd)\r\n* Fixed bug #69287 (Upgrade bundled libsqlite to 3.8.8.3). (Anatol)\r\n* Fixed bug #66550 (SQLite prepared statement use-after-free). (Sean Heelan)\r\n", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2015-04-16 14:52:22", "date_modified": "2015-04-20 15:36:09", "date_approved": null, "date_testing": "2015-04-18 09:56:49", "date_stable": "2015-04-23 16:11:08", "alias": "FEDORA-2015-6407", "test_gating_status": null, "from_tag": null, "date_pushed": "2015-04-23 16:11:08", "meets_testing_requirements": false, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2015-6407", "title": "php-5.6.8-1.fc21", "version_hash": "532782a521a21564d8169f147e480974c9969fa2", "release": {"name": "F21", "long_name": "Fedora 21", "version": "21", "id_prefix": "FEDORA", "branch": "f21", "dist_tag": "f21", "stable_tag": "f21-updates", "testing_tag": "f21-updates-testing", "candidate_tag": "f21-updates-candidate", "pending_signing_tag": "", "pending_testing_tag": "f21-updates-testing-pending", "pending_stable_tag": "f21-updates-pending", "override_tag": "f21-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "setting_status": null}, "user": {"name": "remi", "email": "fedora@famillecollet.com", "id": 94, "avatar": "https://seccdn.libravatar.org/avatar/619d3923bdf71a705e6f65371e59246522f52ad96485c9731408ff28554716cf?s=24&d=retro", "openid": "remi.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "centosproject-email-aliases"}, {"name": "sig-sclo"}, {"name": "trust admins"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by remi. ", "timestamp": "2015-04-16 14:53:28", "update_id": 26264, "user_id": 91, "id": 204226, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: depcheck test PASSED on i386. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/59064/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-04-16 19:27:49", "update_id": 26264, "user_id": 100, "id": 204227, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: depcheck test PASSED on x86_64. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/59064/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-04-16 19:45:39", "update_id": 26264, "user_id": 100, "id": 204228, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update is currently being pushed to the Fedora 21 testing updates repository.", "timestamp": "2015-04-17 18:45:05", "update_id": 26264, "user_id": 91, "id": 204229, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing", "timestamp": "2015-04-18 09:56:49", "update_id": 26264, "user_id": 91, "id": 204230, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "works fine", "timestamp": "2015-04-20 22:30:09", "update_id": 26264, "user_id": 203, "id": 204231, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "mstevens", "email": "ms@unix9.com", "id": 203, "avatar": "https://seccdn.libravatar.org/avatar/66cdd58f5ace3c9703b685ce40fdb67023b566459b5d44a8768d0cb55407bd1c?s=24&d=retro", "openid": "mstevens.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2015-04-21 01:47:14", "update_id": 26264, "user_id": 125, "id": 204232, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "yuwata", "email": "yuwatana@redhat.com", "id": 125, "avatar": "https://seccdn.libravatar.org/avatar/09d97054a1ae694346000a642b10639ee485b8a9254bca065f3c82df522cc811?s=24&d=retro", "openid": "yuwata.id.fedoraproject.org", "groups": [{"name": "packager"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Personal LAMP and mail server running GNOME. All OK.", "timestamp": "2015-04-22 07:41:01", "update_id": 26264, "user_id": 196, "id": 204233, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bradw", "email": "watsonbrad@comcast.net", "id": 196, "avatar": "https://seccdn.libravatar.org/avatar/54496c9d72ee177acc21a5d74ee1ed89ee4fe64137f83e078ea9876510d15201?s=24&d=retro", "openid": "bradw.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached the stable karma threshold and will be pushed to the stable updates repository", "timestamp": "2015-04-22 07:41:05", "update_id": 26264, "user_id": 91, "id": 204234, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: upgradepath test PASSED on noarch. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/60840/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-04-22 07:47:36", "update_id": 26264, "user_id": 100, "id": 204235, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: depcheck test PASSED on i386. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/60841/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-04-22 07:50:12", "update_id": 26264, "user_id": 100, "id": 204236, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: depcheck test PASSED on x86_64. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/60841/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-04-22 07:50:26", "update_id": 26264, "user_id": 100, "id": 204237, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update is currently being pushed to the Fedora 21 stable updates repository.", "timestamp": "2015-04-22 23:41:31", "update_id": 26264, "user_id": 91, "id": 204238, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable", "timestamp": "2015-04-23 16:11:08", "update_id": 26264, "user_id": 91, "id": 204239, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "php-5.6.8-1.fc21", "signed": true, "release_id": null, "type": "rpm", "epoch": null}], "bugs": [{"bug_id": 1185897, "title": "CVE-2015-1351 CVE-2015-1352 CVE-2015-1353 php: various flaws [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1185900, "title": "CVE-2015-1351 php: use after free in opcache extension", "security": true, "parent": true, "feedback": []}, {"bug_id": 1185904, "title": "CVE-2015-1352 php: NULL pointer dereference in pgsql extension", "security": true, "parent": true, "feedback": []}, {"bug_id": 1213407, "title": "php: missing null byte checks for paths in various PHP extensions", "security": true, "parent": true, "feedback": []}, {"bug_id": 1213411, "title": "php: use-after-free vulnerability in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER", "security": true, "parent": true, "feedback": []}, {"bug_id": 1213416, "title": "php: NULL pointer dereference at ext/ereg/regex/regcomp.c", "security": true, "parent": true, "feedback": []}, {"bug_id": 1213442, "title": "php: denial of service when processing a crafted file with Fileinfo", "security": true, "parent": true, "feedback": []}, {"bug_id": 1213446, "title": "CVE-2015-2783 php: Buffer Over-read in unserialize when parsing Phar", "security": true, "parent": true, "feedback": []}, {"bug_id": 1213456, "title": "CVE-2015-2783 CVE-2015-3329 php: various flaws [fedora-all]", "security": true, "parent": false, "feedback": []}], "updateid": "FEDORA-2015-6407", "karma": 3, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}