Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 415
Alerts This Week
Warning Icon 1 415

Fedora 23: 2016-0729e59542 Critical: PHP Buffer Overflow Issues

fedora
Calendar Grey October 22, 2016
Dist Fedora Esm H88
PHP release 5.6.27 for Fedora 23 addresses severe vulnerabilities such as buffer overflows and memory leaks.
13 Oct 2016 - **PHP version 5.6.27** **Core:** * Fixed bug php#73025 (Heap Buffer Overflow in virtual_popen of zend_virtual_cwd.c)

Summary

PHP is an HTML-embedded scripting language. PHP attempts to make it

easy for developers to write dynamically generated web pages. PHP also

offers built-in database integration for several commercial and

non-commercial database management systems, so writing a

database-enabled webpage with PHP is fairly simple. The most common

use of PHP coding is probably as a replacement for CGI scripts.

The php package contains the module (often referred to as mod_php)

which adds support for the PHP language to Apache HTTP Server.

Update Information:

13 Oct 2016 - **PHP version 5.6.27** **Core:** * Fixed bug php#73025 (Heap Buffer Overflow in virtual_popen of zend_virtual_cwd.c). (cmb) * Fixed bug php#73058 (crypt broken when salt is 'too' long). (Anatol) * Fixed bug php#72703 (Out of bounds global memory read in BF_crypt triggered by password_verify). (Anatol) * Fixed bug php#73189 (Memcpy negative size parameter php_resolve_path). (Stas) * Fixed bug php#73147 (Use After Free in unserialize()). (Stas) **BCmath:** * Fixed bug php#73190 (memcpy negative parameter _bc_new_num_ex). (Stas) **DOM:** * Fixed bug php#73150 (missing NULL check in dom_document_save_html). (Stas) **Ereg:** * Fixed bug php#73284 (heap overflow in php_ereg_replace function). (Stas) **Filter:** * Fixed bug php#72972 (Bad filter for the flags FILTER_FLAG_NO_RES_RANGE and FILTER_FLAG_NO_PRIV_RANGE). (julien) * Fixed bug php#67167 (Wrong return value from FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE). (levim, cmb) * Fixed bug php#73054 (default opt...

Topics%20covered

Topics Covered

security advisory critical issue buffer overflow software update Fedora memory leak PHP

Change Log

References

Fedora Update Notification FEDORA-2016-0729e59542 2016-10-22 12:47:41.717271
Name : php Product : Fedora 23 Version : 5.6.27 Release : 1.fc23 URL : https://www.php.net/ Summary : PHP scripting language for creating dynamic web sites Description : PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.
The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php
Product: Fedora 23
Version: 5.6.27
Release: 1.fc23
URL: https://www.php.net/
Summary: PHP scripting language for creating dynamic web sites

Topics%20covered

Topics Covered

security advisory critical issue buffer overflow software update Fedora memory leak PHP

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.