FEDORA-2016-b967ac1a74 — security update for php

stable

php-5.6.22-1.fc24

FEDORA-2016-b967ac1a74 created by remi 10 years ago for Fedora 24

26 May 2016, PHP 5.6.22

Core:

Fixed bug #72172 (zend_hex_strtod should not use strlen). (bwitz at hotmail dot com )
Fixed bug #72114 (Integer underflow / arbitrary null write in fread/gzread). (Stas)
Fixed bug #72135 (Integer Overflow in php_html_entities). (Stas)

GD:

Fixed bug #72227 (imagescale out-of-bounds read). (Stas)

Intl:

Fixed bug #64524 (Add intl.use_exceptions to php.ini-*). (Anatol)
Fixed bug #72241 (get_icu_value_internal out-of-bounds read). (Stas)

Postgres:

Fixed bug #72151 (mysqli_fetch_object changed behaviour). (Anatol)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-b967ac1a74

This update has been submitted for testing by remi.

10 years ago

This update has been pushed to testing.

10 years ago

remi edited this update.

10 years ago

This update has reached 3 days in testing and can be pushed to stable now if the maintainer wishes

10 years ago

This update has been submitted for stable by remi.

10 years ago

This update has been pushed to stable.

10 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

10 years ago

in testing

10 years ago

in stable

10 years ago

modified

10 years ago

Builds

php-5.6.22-1.fc24

BZ#1339590 CVE-2016-5093 php: Out-of-bounds heap read in get_icu_value_internal

BZ#1339949 CVE-2016-5096 php: Integer underflow causing arbitrary null write in fread/gzread

BZ#1339950 php: various flaws [fedora-all]

php-5.6.22-1.fc24

Automated Test Results

None