Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 531
Alerts This Week
Warning Icon 1 531

Fedora 23: php-pecl-http Update Fixes Buffer Overflow and Errors

fedora
Calendar Grey March 25, 2016
Scroller Fedora Esm H88
Revision to php-pecl-http resolves buffer overflow vulnerabilities and mitigates potential bugs, improving HTTP processing in Fedora.
**Version 2.5.6** * Fix php-bug php#71719: Buffer overflow in HTTP url parsing functions (Mike, rc0r) * Fix gh-issue #28: Possible null pointer dereference in php_http_url_mod() (r...

Summary

The HTTP extension aims to provide a convenient and powerful set of

functionality for major applications.

The HTTP extension eases handling of HTTP URLs, dates, redirects, headersand messages in a HTTP context (both incoming and outgoing). It also provides

means for client negotiation of preferred language and charset, as well as

a convenient way to exchange arbitrary data with caching and resuming

capabilities.

Also provided is a powerful request and parallel interface.

Version 2 is completely incompatible to previous version.

Note:

. php-pecl-http1 provides API version 1

. php-pecl-http provides API version 2

Documentation :

Update Information:

**Version 2.5.6** * Fix php-bug php#71719: Buffer overflow in HTTP url parsing functions (Mike, rc0r) * Fix gh-issue #28: Possible null pointer dereference in php_http_url_mod() (rc0r) * Fix gh-issue #22: Fix PHP5 config.w32 (Jan Ehrhardt) * Fix gh-issue #20: setSslOptions notice with curl 7.43 (Mike, Vitaliy Demidov)

Topics%20covered

Topics Covered

security advisory buffer overflow package update federal 23 http extension

Change Log

References

Fedora Update Notification FEDORA-2016-474c1d8264 2016-03-25 01:07:07.546118
Name : php-pecl-http Product : Fedora 23 Version : 2.5.6 Release : 1.fc23 URL : Summary : Extended HTTP support Description : The HTTP extension aims to provide a convenient and powerful set of functionality for major applications.
The HTTP extension eases handling of HTTP URLs, dates, redirects, headersand messages in a HTTP context (both incoming and outgoing). It also provides means for client negotiation of preferred language and charset, as well as a convenient way to exchange arbitrary data with caching and resuming capabilities.
Also provided is a powerful request and parallel interface.
Version 2 is completely incompatible to previous version.
Note: . php-pecl-http1 provides API version 1 . php-pecl-http provides API version 2
Documentation :

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php-pecl-http' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php-pecl-http
Product: Fedora 23
Version: 2.5.6
Release: 1.fc23
URL: Summary : Extended HTTP support

Topics%20covered

Topics Covered

security advisory buffer overflow package update federal 23 http extension

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.