Fedora 23 : php-pecl-zip-1.13.1-1.fc23 (2015-15273)

Upstream change, Version 1.13 update bundled libzip to 1.0.1 Remi, Anatol new methods for ZipArchive: setCompressionName, setCompressionIndex Cedric Delmas allow to build with PHP 7 Fixed bug 70350 ZipArchive::extractTo allows for directory traversal when creating directories. neal at fb dot com...

Fedora 22 : php-pecl-zip-1.12.5-1.fc22 (2015-15275)

From changelog for Version 1.12.5 add OPSYSZCPM missing constant Backported from 1.13.0 Fixed bug 70350 ZipArchive::extractTo allows for directory traversal when creating directories. neal at fb dot com Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora 21 : php-pecl-zip-1.12.5-1.fc21 (2015-15274)

From changelog for Version 1.12.5 add OPSYSZCPM missing constant Backported from 1.13.0 Fixed bug 70350 ZipArchive::extractTo allows for directory traversal when creating directories. neal at fb dot com Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora Update for php-pecl-zip FEDORA-2015-15275

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-pecl-zip FEDORA-2015-15274

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 21 Update: php-pecl-zip-1.12.5-1.fc21

Zip is an extension to create and read zip files...

[SECURITY] Fedora 22 Update: php-pecl-zip-1.12.5-1.fc22

Zip is an extension to create and read zip files...

[SECURITY] Fedora 23 Update: php-pecl-zip-1.13.1-1.fc23

Zip is an extension to create and read zip files...

Mandriva Linux Security Advisory : php (MDVSA-2015:209)

Updated php packages fix security vulnerabilities : Buffer Over-read in unserialize when parsing Phar CVE-2015-2783. Buffer Overflow when parsing tar/zip/phar in pharsetinode CVE-2015-3329. Potential remote code execution with apache 2.4 apache2handler CVE-2015-3330. PHP has been updated to versi...

Mandriva Linux Security Advisory : php (MDVSA-2015:079)

Multiple vulnerabilities has been discovered and corrected in php : S. Paraschoudis discovered that PHP incorrectly handled memory in the enchant binding. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code...

Mandriva Linux Security Advisory : php (MDVSA-2015:032)

Multiple vulnerabilities have been discovered and corrected in php : sapi/cgi/cgimain.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid...

PECL 3.0.x - Alternative PHP Cache Extension 'apc_search_paths()' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28457/info PECL Alternative PHP Cache APC extension is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute...

PHP 5.2.0 / PHP with PECL ZIP <= 1.8.3 zip:// URL Wrapper BoF Exploit

No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...

PECL Alternative PHP Cache Local 3 HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/32934/info PECL Alternative PHP Cache is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied...

[ MDVSA-2014:087 ] php

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:087 http://www.mandriva.com/en/support/security/ Package : php Date : May 15, 2014 Affected: Business Server 1.0 Problem Description: A vulnerability has been discovered and corrected in php: PHP FPM in PHP...

Mandriva Linux Security Advisory : php (MDVSA-2014:087)

A vulnerability has been discovered and corrected in php : PHP FPM in PHP versions before 5.4.28 and 5.5.12 uses a UNIX domain socket with world-writable permissions by default, which allows any local user to connect to it and execute PHP scripts as the apache user CVE-2014-0185. The updated php...

Mandriva Linux Security Advisory : php (MDVSA-2014:075)

A vulnerability has been discovered and corrected in php : The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service CPU consumption...

Mandriva Linux Security Advisory : php (MDVSA-2014:059)

Multiple vulnerabilities has been discovered and corrected in php : Fixed bug 66731 file: infinite recursion CVE-2014-1943. Fixed bug 66820 out-of-bounds memory access in fileinfo CVE-2014-2270. Fixed bug 66815 imagecrop: insufficient fix for NULL defer CVE-2013-7327. The updated php packages hav...

[ MDVSA-2014:014 ] php

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:014 http://www.mandriva.com/en/support/security/ Package : php Date : January 21, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in php: Th...

Mandriva Linux Security Advisory : php (MDVSA-2014:014)

Multiple vulnerabilities has been discovered and corrected in php : The opensslx509parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate...