Advisories » MGASA-2015-0365

Updated php packages fix security vulnerabilities

Publication date: 13 Sep 2015
Modification date: 13 Sep 2015
Type: security
Affected Mageia releases : 4
CVE: CVE-2015-6834 , CVE-2015-6835 , CVE-2015-6836 , CVE-2015-6837 , CVE-2015-6838

Description

Updated php packages fix security vulnerabilities:

The php package has been updated to version 5.5.29, which fixes several
security issues and other bugs.  See the upstream ChangeLog for more details.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=16703
• http://www.php.net/ChangeLog-5.php#5.5.29
• http://openwall.com/lists/oss-security/2015/09/08/8
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6834
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6835
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6836
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6837
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6838

SRPMS

4/core

• php-5.5.29-1.mga4
• php-apc-3.1.15-4.19.mga4