Stay Secure with the Latest Linux Advisories

security advisorybuffer overflowpackage update

Fedora 23: php-pecl-http Update Fixes Buffer Overflow and Errors

**Version 2.5.6** * Fix php-bug php#71719: Buffer overflow in HTTP url parsing functions (Mike, rc0r) * Fix gh-issue #28: Possible null pointer dereference in php_http_url_mod() (rc0r) * Fix gh-issue #22: Fix PHP5 config.w32 (Jan Ehrhardt) * Fix gh-issue #20: setSslOptions notice with curl 7.43 (Mike, Vitaliy Demidov). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-474c1d8264 2016-03-25 01:07:07.546118 -------------------------------------------------------------------------------- Name : php-pecl-http Product : Fedora 23 Version : 2.5.6 Release : 1.fc23 URL : Summary : Extended HTTP support Description : The HTTP extension aims to provide a convenient and powerful set of functionality for major applications. The HTTP extension eases handling of HTTP URLs, dates, redirects, headersand messages in a HTTP context (both incoming and outgoing). It also provides means for client negotiation of preferred language and charset, as well as a convenient way to exchange arbitrary data with caching and resuming capabilities. Also provided is a powerful request and parallel interface. Version 2 is completely incompatible to previous version. Note: . php-pecl-http1 provides API version 1 . php-pecl-http provides API version 2 Documentation : -------------------------------------------------------------------------------- Update Information: **Version 2.5.6** * Fix php-bug php#71719: Buffer overflow in HTTP url parsing functions (Mike, rc0r) * Fix gh-issue #28: Possible null pointer dereference in php_http_url_mod() (rc0r) * Fix gh-issue #22: Fix PHP5 config.w32 (Jan Ehrhardt) * Fix gh-issue #20: setSslOptions notice with curl 7.43 (Mike, Vitaliy Demidov) -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update php-pecl-http' at the command line. For more information, refer to "Managing Software withyum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Revision to php-pecl-http resolves buffer overflow vulnerabilities and mitigates potential bugs, improving HTTP processing in Fedora.. Fedora Update, PHP Security, HTTP Extension, Software Patch. . LinuxSecurity.com Team

Mar 25, 2016 Fedora