[SECURITY] Fedora 24 Update: php-pecl-http-2.5.6-1.fc24

The HTTP extension aims to provide a convenient and powerful set of functionality for major applications. The HTTP extension eases handling of HTTP URLs, dates, redirects, headers and messages in a HTTP context both incoming and outgoing. It also provid es means for client negotiation of preferre...

[SECURITY] Fedora 22 Update: php-pecl-http-2.5.6-1.fc22

The HTTP extension aims to provide a convenient and powerful set of functionality for major applications. The HTTP extension eases handling of HTTP URLs, dates, redirects, headers and messages in a HTTP context both incoming and outgoing. It also provid es means for client negotiation of preferre...

Fedora 23 : php-pecl-http-2.5.6-1.fc23 (2016-474c1d8264)

Version 2.5.6 Fix php-bug php71719: Buffer overflow in HTTP url parsing functions Mike, rc0r Fix gh-issue 28: Possible NULL pointer dereference in phphttpurlmod rc0r Fix gh-issue 22: Fix PHP5 config.w32 Jan Ehrhardt - Fix gh-issue 20: setSslOptions notice with curl 7.43 Mike, Vitaliy Demidov Note...

Fedora Update for php-pecl-http FEDORA-2016-474

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

php: Security update (7 CVEs)

The php package has been rebuilt and was uploaded to the Chaos Calmer 15.05 repository due to multiple security issues. VERSION 5.6.8-1 = 5.6.17-1 CHANGELOG Sun, 24 Jan 2016 21:47:52 +0100 18d121b Update to 5.6.17 Fixes CVE-2016-1903. Wed, 23 Dec 2015 16:00:14 -0500 766cfcc Update to 5.6.16 Wed, ...

CVE-2007-1460

The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement safemode or openbasedir checks, which allows remote attackers to read ZIP archives located outside of the intended directories...

CVE-2007-1399

Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via avatar upload or...

Oracle: Security Advisory (ELSA-2012-0811)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 21 : php-pecl-zip-1.12.5-1.fc21 (2015-15274)

From changelog for Version 1.12.5 add OPSYSZCPM missing constant Backported from 1.13.0 Fixed bug 70350 ZipArchive::extractTo allows for directory traversal when creating directories. neal at fb dot com Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora 22 : php-pecl-zip-1.12.5-1.fc22 (2015-15275)

From changelog for Version 1.12.5 add OPSYSZCPM missing constant Backported from 1.13.0 Fixed bug 70350 ZipArchive::extractTo allows for directory traversal when creating directories. neal at fb dot com Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora 23 : php-pecl-zip-1.13.1-1.fc23 (2015-15273)

Upstream change, Version 1.13 update bundled libzip to 1.0.1 Remi, Anatol new methods for ZipArchive: setCompressionName, setCompressionIndex Cedric Delmas allow to build with PHP 7 Fixed bug 70350 ZipArchive::extractTo allows for directory traversal when creating directories. neal at fb dot com...

Fedora Update for php-pecl-zip FEDORA-2015-15275

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-pecl-zip FEDORA-2015-15274

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 21 Update: php-pecl-zip-1.12.5-1.fc21

Zip is an extension to create and read zip files...

[SECURITY] Fedora 22 Update: php-pecl-zip-1.12.5-1.fc22

Zip is an extension to create and read zip files...

[SECURITY] Fedora 23 Update: php-pecl-zip-1.13.1-1.fc23

Zip is an extension to create and read zip files...

Mandriva Linux Security Advisory : php (MDVSA-2015:209)

Updated php packages fix security vulnerabilities : Buffer Over-read in unserialize when parsing Phar CVE-2015-2783. Buffer Overflow when parsing tar/zip/phar in pharsetinode CVE-2015-3329. Potential remote code execution with apache 2.4 apache2handler CVE-2015-3330. PHP has been updated to versi...

Mandriva Linux Security Advisory : php (MDVSA-2015:079)

Multiple vulnerabilities has been discovered and corrected in php : S. Paraschoudis discovered that PHP incorrectly handled memory in the enchant binding. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code...

Mandriva Linux Security Advisory : php (MDVSA-2015:032)

Multiple vulnerabilities have been discovered and corrected in php : sapi/cgi/cgimain.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid...

PECL 3.0.x - Alternative PHP Cache Extension 'apc_search_paths()' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28457/info PECL Alternative PHP Cache APC extension is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute...