FEDORA-2016-65f1ffdc0c — security update for php

stable

php-5.6.22-1.fc22

FEDORA-2016-65f1ffdc0c created by remi 8 years ago for Fedora 22

26 May 2016, PHP 5.6.22

Core:

Fixed bug #72172 (zend_hex_strtod should not use strlen). (bwitz at hotmail dot com )
Fixed bug #72114 (Integer underflow / arbitrary null write in fread/gzread). (Stas)
Fixed bug #72135 (Integer Overflow in php_html_entities). (Stas)

GD:

Fixed bug #72227 (imagescale out-of-bounds read). (Stas)

Intl:

Fixed bug #64524 (Add intl.use_exceptions to php.ini-*). (Anatol)
Fixed bug #72241 (get_icu_value_internal out-of-bounds read). (Stas)

Postgres:

Fixed bug #72151 (mysqli_fetch_object changed behaviour). (Anatol)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-65f1ffdc0c

This update has been submitted for testing by remi.

8 years ago

This update has been pushed to testing.

8 years ago

remi edited this update.

8 years ago

remi edited this update.

8 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

8 years ago

This update has been submitted for stable by remi.

8 years ago

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

php-5.6.22-1.fc22

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

modified

8 years ago

BZ#1339590 CVE-2016-5093 php: Out-of-bounds heap read in get_icu_value_internal

BZ#1339949 CVE-2016-5096 php: Integer underflow causing arbitrary null write in fread/gzread

BZ#1339950 php: various flaws [fedora-all]

BZ#1340738 CVE-2016-5094 php: Integer overflow in php_html_entities()

BZ#1340742 CVE-2016-5095 php: Integer overflow in php_filter_full_special_chars

BZ#1340745 CVE-2016-5094 CVE-2016-5095 php: various flaws [fedora-all]

php-5.6.22-1.fc22

Automated Test Results

None