Fedora 24: PHP 5.6.27 Medium: Buffer Overflow and Memory Corruption

PHP is an HTML-embedded scripting language. PHP attempts to make it

easy for developers to write dynamically generated web pages. PHP also

offers built-in database integration for several commercial and

non-commercial database management systems, so writing a

database-enabled webpage with PHP is fairly simple. The most common

use of PHP coding is probably as a replacement for CGI scripts.

The php package contains the module (often referred to as mod_php)

which adds support for the PHP language to Apache HTTP Server.

13 Oct 2016 - **PHP version 5.6.27** **Core:** * Fixed bug php#73025 (Heap Buffer Overflow in virtual_popen of zend_virtual_cwd.c). (cmb) * Fixed bug php#73058 (crypt broken when salt is 'too' long). (Anatol) * Fixed bug php#72703 (Out of bounds global memory read in BF_crypt triggered by password_verify). (Anatol) * Fixed bug php#73189 (Memcpy negative size parameter php_resolve_path). (Stas) * Fixed bug php#73147 (Use After Free in unserialize()). (Stas) **BCmath:** * Fixed bug php#73190 (memcpy negative parameter _bc_new_num_ex). (Stas) **DOM:** * Fixed bug php#73150 (missing NULL check in dom_document_save_html). (Stas) **Ereg:** * Fixed bug php#73284 (heap overflow in php_ereg_replace function). (Stas) **Filter:** * Fixed bug php#72972 (Bad filter for the flags FILTER_FLAG_NO_RES_RANGE and FILTER_FLAG_NO_PRIV_RANGE). (julien) * Fixed bug php#67167 (Wrong return value from FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE). (levim, cmb) * Fixed bug php#73054 (default opt...