[SECURITY] Fedora 24 Update: php-5.6.20-1.fc24

updates at fedoraproject.org updates at fedoraproject.org
Tue Apr 5 10:16:19 UTC 2016


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-ace6f06a4d
2016-04-05 10:09:11.083748
--------------------------------------------------------------------------------

Name        : php
Product     : Fedora 24
Version     : 5.6.20
Release     : 1.fc24
URL         : http://www.php.net/
Summary     : PHP scripting language for creating dynamic web sites
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.

The php package contains the module (often referred to as mod_php)
which adds support for the PHP language to Apache HTTP Server.

--------------------------------------------------------------------------------
Update Information:

31 Mar 2016, **PHP 5.6.20**  **CLI Server:**  * Fixed bug php#69953 (Support
MKCALENDAR request method). (Christoph)  **Core:**  * Fixed bug php#71596
(Segmentation fault on ZTS with date function (setlocale)). (Anatol)  **Curl:**
* Fixed bug php#71694 (Support constant CURLM_ADDED_ALREADY). (mpyw)  **Date:**
* Fixed bug php#71635 (DatePeriod::getEndDate segfault). (Thomas Punt)
**Fileinfo:**  * Fixed bug php#71527 (Buffer over-write in finfo_open with
malformed magic file). (Anatol)  **Mbstring:**  * Fixed bug php#71906
(AddressSanitizer: negative-size-param (-1) in mbfl_strcut). (Stas)  **ODBC:**
* Fixed bug php#47803, php#69526 (Executing prepared statements is succesfull
only for the first two statements). (einavitamar, Anatol) * Fixed bug php#71860
(Invalid memory write in phar on filename with \0 in name). (Stas)
**PDO_DBlib:**  * Fixed bug php#54648 (PDO::MSSQL forces format of datetime
fields). (steven, Anatol)  **Phar:**  * Fixed bug php#71625 (Crash in php7.dll
with bad phar filename). (Anatol) * Fixed bug php#71504 (Parsing of tar file
with duplicate filenames causes memory leak). (Jos Elstgeest)  **SNMP:**  *
Fixed bug php#71704 (php_snmp_error() Format String Vulnerability). (andrew)
**Standard**  * Fixed bug php#71798 (Integer Overflow in php_raw_url_encode).
(taoguangchen, Stas)
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program. Use
su -c 'yum update php' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list