Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Fedora 22: 2021-ff5c5b87f4 Urgent: PHP-PECL-CURL Security Vulnerability

fedora
Calendar Grey March 25, 2016
Scroller Fedora Esm H88
Important security patch for Fedora 22: php-pecl-mcrypt addresses memory corruption and segmentation fault vulnerabilities.
**Version 2.5.6** * Fix php-bug php#71719: Buffer overflow in HTTP url parsing functions (Mike, rc0r) * Fix gh-issue #28: Possible null pointer dereference in php_http_url_mod() (r...

Summary

The HTTP extension aims to provide a convenient and powerful set of

functionality for major applications.

The HTTP extension eases handling of HTTP URLs, dates, redirects, headersand messages in a HTTP context (both incoming and outgoing). It also provides

means for client negotiation of preferred language and charset, as well as

a convenient way to exchange arbitrary data with caching and resuming

capabilities.

Also provided is a powerful request and parallel interface.

Version 2 is completely incompatible to previous version.

Note:

. php-pecl-http1 provides API version 1

. php-pecl-http provides API version 2

Documentation :

Update Information:

**Version 2.5.6** * Fix php-bug php#71719: Buffer overflow in HTTP url parsing functions (Mike, rc0r) * Fix gh-issue #28: Possible null pointer dereference in php_http_url_mod() (rc0r) * Fix gh-issue #22: Fix PHP5 config.w32 (Jan Ehrhardt) * Fix gh-issue #20: setSslOptions notice with curl 7.43 (Mike, Vitaliy Demidov)

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical update notification http extension

Change Log

References

Fedora Update Notification FEDORA-2016-bb7bdd7063 2016-03-25 18:27:58.250991
Name : php-pecl-http Product : Fedora 22 Version : 2.5.6 Release : 1.fc22 URL : Summary : Extended HTTP support Description : The HTTP extension aims to provide a convenient and powerful set of functionality for major applications.
The HTTP extension eases handling of HTTP URLs, dates, redirects, headersand messages in a HTTP context (both incoming and outgoing). It also provides means for client negotiation of preferred language and charset, as well as a convenient way to exchange arbitrary data with caching and resuming capabilities.
Also provided is a powerful request and parallel interface.
Version 2 is completely incompatible to previous version.
Note: . php-pecl-http1 provides API version 1 . php-pecl-http provides API version 2
Documentation :

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-pecl-http' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php-pecl-http
Product: Fedora 22
Version: 2.5.6
Release: 1.fc22
URL: Summary : Extended HTTP support

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical update notification http extension

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.