[SECURITY] Fedora 19 Update: php-5.5.0-0.10.RC3.fc19

updates at fedoraproject.org updates at fedoraproject.org
Tue Jun 18 06:25:29 UTC 2013


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-10206
2013-06-06 17:13:27
--------------------------------------------------------------------------------

Name        : php
Product     : Fedora 19
Version     : 5.5.0
Release     : 0.10.RC3.fc19
URL         : http://www.php.net/
Summary     : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.

The php package contains the module which adds support for the PHP
language to Apache HTTP Server.

--------------------------------------------------------------------------------
Update Information:

IMPORTANT CHANGE:
- JSON extension is no more provided by php-common
- php-pecl-jsonc provides a drop-in alternative


Upstream Changelog, 06 Jun 2013, PHP 5.5.0 Release Candidate 3

Core:
- Fixed bug #64960 (Segfault in gc_zval_possible_root). (Laruence)
- Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode, CVE 2013-2110). (Stas)

FPM:
- Fixed Bug #64915 (error_log ignored when daemonize=0). (Remi)

GD:
- Fixed Bug #64962 (imagerotate produces corrupted image). (Remi)
- Fixed Bug #64961 (segfault in imagesetinterpolation). (Remi)

Hash:
- Fixed Bug #64745 (hash_pbkdf2() truncates data when using default length and hex output). (Anthony Ferrara)

PDO_DBlib:
- Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib). (Stanley Sufficool)
- Fixed bug #64338 (pdo_dblib can't connect to Azure SQL). (Stanley Sufficool)
- Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not executed statement crashes). (Stanley Sufficool)

PDO_pgsql:
- Fixed Bug #64949 (Buffer overflow in _pdo_pgsql_error). (Remi)

--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #973696 - Review Request: php-pecl-jsonc - Support for JSON serialization
        https://bugzilla.redhat.com/show_bug.cgi?id=973696
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update php' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list