[ol7_software_collections] php54-php-5.4.16-22.el7.x86_64

PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.

The php package contains the module (often referred to as mod_php)
which adds support for the PHP language to system Apache HTTP Server.

Changelog (Show File list) (Show related packages)

• Thu Oct 23 2014 Jan Kaluza <jkaluza@redhat.com> - 5.4.16-22

  - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710

• Mon Oct 20 2014 Remi Collet <rcollet@redhat.com> - 5.4.16-20

  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670

• Tue Oct 07 2014 Remi Collet <rcollet@redhat.com> - 5.4.16-18

  - fix heap-based buffer over-read in DateInterval CVE-2013-6712
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515
  - fileinfo: fix infinite recursion. CVE-2014-1943
  - fileinfo: fix out-of-bounds memory access. CVE-2014-2270
  - fileinfo: fix extensive backtracking CVE-2013-7345
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587

• Tue Feb 04 2014 Remi Collet <rcollet@redhat.com> - 5.4.16-16

  - allow multiple paths in ini_scan_dir #1058162

• Fri Dec 06 2013 Remi Collet <rcollet@redhat.com> - 5.4.16-12

  - add security fix for CVE-2013-6420

• Fri Sep 27 2013 Remi Collet <rcollet@redhat.com> 5.4.16-10

  - disable mod_php for httpd24

• Tue Sep 17 2013 Remi Collet <rcollet@redhat.com> 5.4.16-8

  - relocate RPM macro #1008483
  - remove ZTS conditional stuf for ligibility
  - add mod_php for httpd24 collection

• Mon Aug 19 2013 Remi Collet <rcollet@redhat.com> - 5.4.16-7

  - fix enchant package summary and description
  - add security fix for CVE-2013-4248

• Thu Jul 18 2013 Remi Collet <rcollet@redhat.com> 5.4.16-4

  - improve mod_php, pgsql and ldap description
  - add missing man pages (phar, php-cgi)
  - add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
  - use %__isa_bits instead of %__isa in ABI suffix #985350

• Fri Jul 12 2013 Remi Collet <rcollet@redhat.com> - 5.4.16-3

  - add security fix for CVE-2013-4113
  - add missing ASL 1.0 license