Fedora 23 Update: php-5.6.12-1.fc23

updates at fedoraproject.org updates at fedoraproject.org
Sat Aug 15 02:17:40 UTC 2015


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-13059
2015-08-08 16:04:07
--------------------------------------------------------------------------------

Name        : php
Product     : Fedora 23
Version     : 5.6.12
Release     : 1.fc23
URL         : http://www.php.net/
Summary     : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.

The php package contains the module (often referred to as mod_php)
which adds support for the PHP language to Apache HTTP Server.

--------------------------------------------------------------------------------
Update Information:

06 Aug 2015, **PHP 5.6.12**

**Core:**
* Fixed bug #70012 (Exception lost with nested finally block). (Laruence)
* Fixed bug #70002 (TS issues with temporary dir handling). (Anatol)
* Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive  method calls). (Stas)
* Fixed bug #69892 (Different arrays compare indentical due to integer key  truncation). (Nikita)
* Fixed bug #70121 (unserialize() could lead to unexpected methods execution / NULL pointer deref). (Stas)

**CLI server:**
* Fixed bug #69655 (php -S changes MKCALENDAR request method to MKCOL). (cmb)
* Fixed bug #64878 (304 responses return Content-Type header). (cmb)
  
**GD:**
* Fixed bug #53156 (imagerectangle problem with point ordering). (cmb)
* Fixed bug #66387 (Stack overflow with imagefilltoborder). (cmb)
* Fixed bug #70102 (imagecreatefromwebm() shifts colors). (cmb)
* Fixed bug #66590 (imagewebp() doesn't pad to even length). (cmb)
* Fixed bug #66882 (imagerotate by -90 degrees truncates image by 1px). (cmb)
* Fixed bug #70064 (imagescale(..., IMG_BICUBIC) leaks memory). (cmb)
* Fixed bug #69024 (imagescale segfault with palette based image). (cmb)
* Fixed bug #53154 (Zero-height rectangle has whiskers). (cmb)
* Fixed bug #67447 (imagecrop() add a black line when cropping). (cmb)
* Fixed bug #68714 (copy 'n paste error). (cmb)
* Fixed bug #66339 (PHP segfaults in imagexbm). (cmb)
* Fixed bug #70047 (gd_info() doesn't report WebP support). (cmb)

**ODBC:**
* Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns). (cmb)

**OpenSSL:**
* Fixed bug #69882 (OpenSSL error “key values mismatch” after  openssl_pkcs12_read with extra cert) (Tomasz Sawicki)
* Fixed bug #70014 (openssl_random_pseudo_bytes() is not cryptographically secure). (Stas)

**Phar:**
* Improved fix for bug #69441. (Anatol Belski)
* Fixed bug #70019 (Files extracted from archive may be placed outside of destination directory). (Anatol Belski)

**SOAP:**
* Fixed bug #70081 (SoapClient info leak / null pointer dereference via multiple type confusions). (Stas)

**SPL:**
* Fixed bug #70068 (Dangling pointer in the unserialization of ArrayObject items). (sean.heelan)
* Fixed bug #70166 (Use After Free Vulnerability in unserialize() with SPLArrayObject). (taoguangchen at icloud dot com)
* Fixed bug #70168 (Use After Free Vulnerability in unserialize() with SplObjectStorage). (taoguangchen at icloud dot com)
* Fixed bug #70169 (Use After Free Vulnerability in unserialize() with SplDoublyLinkedList). (taoguangchen at icloud dot com)

**Standard:**
* Fixed bug #70096 (Repeated iptcembed() adds superfluous FF bytes). (cmb)

--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update php' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list