Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

Fedora 23: 2016-c0853ea24e Critical PHP Update for CLI Server and CURL

fedora
Calendar Grey March 5, 2016
Dist Fedora Esm H88
To fix major vulnerabilities in the CLI server and CURL on Fedora 23, apply the latest PHP security patch by updating your system packages with a specific command
03 Mar 2016, **PHP 5.6.19** **CLI server:** * Fixed bug php#71559 (Built-in HTTP server, we can download file in web by bug)

Summary

PHP is an HTML-embedded scripting language. PHP attempts to make it

easy for developers to write dynamically generated web pages. PHP also

offers built-in database integration for several commercial and

non-commercial database management systems, so writing a

database-enabled webpage with PHP is fairly simple. The most common

use of PHP coding is probably as a replacement for CGI scripts.

The php package contains the module (often referred to as mod_php)

which adds support for the PHP language to Apache HTTP Server.

Update Information:

03 Mar 2016, **PHP 5.6.19** **CLI server:** * Fixed bug php#71559 (Built-in HTTP server, we can download file in web by bug). (Johannes, Anatol) **CURL:** * Fixed bug php#71523 (Copied handle with new option CURLOPT_HTTPHEADER crashes while curl_multi_exec). (Laruence) **Date:** * Fixed bug php#68078 (Datetime comparisons ignore microseconds). (Willem-Jan Zijderveld) * Fixed bug php#71525 (Calls to date_modify will mutate timelib_rel_time, causing date_date_set issues). (Sean DuBois) **Fileinfo:** * Fixed bug php#71434 (finfo throws notice for specific python file). (Laruence) **FPM:** * Fixed bug php#62172 (FPM not working with Apache httpd 2.4 balancer/fcgi setup). (Matt Haught, Remi) **Opcache:** * Fixed bug php#71584 (Possible use-after-free of ZCG(cwd) in Zend Opcache). (Yussuf Khalil) **PDO MySQL:** * Fixed bug php#71569 (#70389 fix causes segmentation fault). (Nikita) **Phar:** * Fixed bug php#71498 (Out- of-Bound Read in phar_parse_zipfile()). (Stas) **Standa...

Topics%20covered

Topics Covered

security advisory critical software update Fedora CLI Server CURL PHP Fixes

Change Log

References

Fedora Update Notification FEDORA-2016-c0853ea24e 2016-03-05 18:27:22.059387
Name : php Product : Fedora 23 Version : 5.6.19 Release : 1.fc23 URL : https://www.php.net/ Summary : PHP scripting language for creating dynamic web sites Description : PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.
The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update php' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: php
Product: Fedora 23
Version: 5.6.19
Release: 1.fc23
URL: https://www.php.net/
Summary: PHP scripting language for creating dynamic web sites

Topics%20covered

Topics Covered

security advisory critical software update Fedora CLI Server CURL PHP Fixes

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.