FEDORA-2016-5207e0c1a1 — security update for php

stable

php-5.6.17-1.fc22

FEDORA-2016-5207e0c1a1 created by remi 9 years ago for Fedora 22

07 Jan 2016, PHP 5.6.17

Core:

Fixed bug #66909 (configure fails utf8_to_mutf7 test). (Michael Orlitzky)
Fixed bug #70958 (Invalid opcode while using ::class as trait method paramater default value). (Laruence)
Fixed bug #70957 (self::class can not be resolved with reflection for abstract class). (Laruence)
Fixed bug #70944 (try{ } finally{} can create infinite chains of exceptions). (Laruence)
Fixed bug #61751 (SAPI build problem on AIX: Undefined symbol: php_register_internal_extensions). (Lior Kaplan)

FPM:

Fixed bug #70755 (fpm_log.c memory leak and buffer overflow). (Stas)

GD:

Fixed bug #70976 (Memory Read via gdImageRotateInterpolated Array Index Out of Bounds). (emmanuel dot law at gmail dot com).

Mysqlnd:

Fixed bug #68077 (LOAD DATA LOCAL INFILE / open_basedir restriction). (Laruence)

SOAP:

Fixed bug #70900 (SoapClient systematic out of memory error). (Dmitry)

Standard:

Fixed bug #70960 (ReflectionFunction for array_unique returns wrong number of parameters). (Laruence)

PDO_Firebird:

Fixed bug #60052 (Integer returned as a 64bit integer on X64_86). (Mariuz)

WDDX:

Fixed bug #70661 (Use After Free Vulnerability in WDDX Packet Deserialization). (taoguangchen at icloud dot com)
Fixed bug #70741 (Session WDDX Packet Deserialization Type Confusion Vulnerability). (taoguangchen at icloud dot com)

XMLRPC:

Fixed bug #70728 (Type Confusion Vulnerability in PHP_to_XMLRPC_worker()). (Julien)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-5207e0c1a1

This update has been submitted for testing by remi.

9 years ago

This update has been pushed to testing.

9 years ago

remi edited this update.

9 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

9 years ago

This update has been submitted for stable by remi.

9 years ago

This update has been pushed to stable.

9 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

9 years ago

modified

9 years ago

Builds

php-5.6.17-1.fc22

BZ#1297710 php: Memory leak and out-of-bounds write in fpm_log.c

BZ#1297711 php: Memory leak and out-of-bounds write in fpm_log.c [fedora-all]

BZ#1297720 php: Use-after-free in WDDX Packet Deserialization

BZ#1297722 php: Use-after-free in WDDX Packet Deserialization [fedora-all]

BZ#1297726 php: Session WDDX Packet Deserialization Type Confusion Vulnerability

BZ#1297727 php: Session WDDX Packet Deserialization Type Confusion Vulnerability [fedora-all]

BZ#1297730 php: Type Confusion Vulnerability in PHP_to_XMLRPC_worker()

BZ#1297731 php: Type Confusion Vulnerability in PHP_to_XMLRPC_worker() [fedora-all]

php-5.6.17-1.fc22

Automated Test Results

None