-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2011-3636 2011-03-19 09:57:19 --------------------------------------------------------------------------------
Name : php-eaccelerator Product : Fedora 14 Version : 0.9.6.1 Release : 6.fc14 URL : http://eaccelerator.net/ Summary : PHP accelerator, optimizer, encoder and dynamic content cacher Description : eAccelerator is a further development of the MMCache PHP Accelerator & Encoder. It increases performance of PHP scripts by caching them in compiled state, so that the overhead of compiling is almost completely eliminated.
-------------------------------------------------------------------------------- Update Information:
Security Enhancements and Fixes in PHP 5.3.6: * Fixed bug #54247 (format-string vulnerability on Phar). (CVE-2011-1153) * Fixed bug #54193 (Integer overflow in shmop_read()). (CVE-2011-1092) * Fixed bug #54055 (buffer overrun with high values for precision ini setting). * Fixed bug #54002 (crash on crafted tag in exif). (CVE-2011-0708) * Fixed bug #53885 (ZipArchive segfault with FL_UNCHANGED on empty archive). (CVE-2011-0421)
Full upstream changelog : http://php.net/ChangeLog-5.php#5.3.6 -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 17 2011 Remi Collet Fedora@FamilleCollet.com - 1:0.9.6.1-6 - rebuild against PHP 5.3.6 * Sat Jan 8 2011 Remi Collet Fedora@FamilleCollet.com - 1:0.9.6.1-4 - rebuild against PHP 5.3.5 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #688378 - CVE-2011-1153 php: several format string vulnerabilities in PHP's Phar extension https://bugzilla.redhat.com/show_bug.cgi?id=688378 [ 2 ] Bug #680972 - CVE-2011-0708 php: buffer over-read in Exif extension https://bugzilla.redhat.com/show_bug.cgi?id=680972 [ 3 ] Bug #688735 - CVE-2011-0421 php/libzip: segfault with FL_UNCHANGED on empty archive in zip_name_locate() https://bugzilla.redhat.com/show_bug.cgi?id=688735 --------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use su -c 'yum update php-eaccelerator' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org
-
updates＠fedoraproject.org