Mageia alert MGASA-2015-0365 (php)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2015-0365: Updated php packages fix security vulnerabilities 
Date:
    	     
 
Sun, 13 Sep 2015 23:59:04 +0200
Message-ID:
    	     
 
<20150913215904.2814859402@valstar.mageia.org>
MGASA-2015-0365 - Updated php packages fix security vulnerabilities

Publication date: 13 Sep 2015
URL: http://advisories.mageia.org/MGASA-2015-0365.html
Type: security
Affected Mageia releases: 4
CVE: CVE-2015-6834,
     CVE-2015-6835,
     CVE-2015-6836,
     CVE-2015-6837,
     CVE-2015-6838

Description:
Updated php packages fix security vulnerabilities:

The php package has been updated to version 5.5.29, which fixes several
security issues and other bugs.  See the upstream ChangeLog for more details.

References:
- https://bugs.mageia.org/show_bug.cgi?id=16703
- http://www.php.net/ChangeLog-5.php#5.5.29
- http://openwall.com/lists/oss-security/2015/09/08/8
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6834
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6835
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6836
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6837
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6838

SRPMS:
- 4/core/php-5.5.29-1.mga4
- 4/core/php-apc-3.1.15-4.19.mga4