PHP PHP 5.6.13 Released 11+ security fixes

eva2000 · Sep 5, 2015

PHP 5.6.13 is out officially now

Version 5.6.13
03 Sep 2015

Core:

Fixed bug #69900 (Too long timeout on pipes).

Fixed bug #69487 (SAPI may truncate POST data).

Fixed bug #70198 (Checking liveness does not work as expected).

Fixed bug #70172 (Use After Free Vulnerability in unserialize()).

Fixed bug #70219 (Use after free vulnerability in session deserializer).

CLI server:

Fixed bug #66606 (Sets HTTP_CONTENT_TYPE but not CONTENT_TYPE).

Fixed bug #70264 (CLI server directory traversal).

Date:

Fixed bug #70266 (DateInterval::__construct.interval_spec is not supposed to be optional).

Fixed bug #70277 (new DateTimeZone($foo) is ignoring text after null byte).

EXIF:

Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes).

hash:

Fixed bug #70312 (HAVAL gives wrong hashes in specific cases).

MCrypt:

Fixed bug #69833 (mcrypt fd caching not working).

Opcache:

Fixed bug #70237 (Empty while and do-while segmentation fault with opcode on CLI enabled).

PCRE:

Fixed bug #70232 (Incorrect bump-along behavior with \K and empty string match).

Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).

SOAP:

Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE).

SPL:

Fixed bug #70290 (Null pointer deref (segfault) in spl_autoload via ob_start).

Fixed bug #70303 (Incorrect constructor reflection for ArrayObject).

Fixed bug #70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage).

Fixed bug #70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList).

Standard:

Fixed bug #70052 (getimagesize() fails for very large and very small WBMP).

Fixed bug #70157 (parse_ini_string() segmentation fault with INI_SCANNER_TYPED).

XSLT:

Fixed bug #69782 (NULL pointer dereference).

ZIP:

Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories).

Click to expand...

eva2000 · Sep 5, 2015

Like PHP 5.6.12 PHP - PHP 5.6.12 is available | Centmin Mod Community upgrade is as simple as centmin.sh menu option 5 and specify PHP version number = 5.6.13
Code:
php -v
PHP 5.6.13 (cli) (built: Sep  4 2015 16:18:51)
Copyright (c) 1997-2015 The PHP Group
Zend Engine v2.6.0, Copyright (c) 1998-2015 Zend Technologies
    with Zend OPcache v7.0.6-dev, Copyright (c) 1999-2015, by Zend Technologies

RoldanLT · Sep 5, 2015

I have this installed last 30 hours, hehe
PHP - PHP 7.0.0 Alpha 1 Released | Page 5 | Centmin Mod Community

Log in / Register

Forums

Learn about Centmin Mod LEMP Stack today

PHP PHP 5.6.13 Released 11+ security fixes

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

RoldanLT Well-Known Member

.

Log in / Register

Useful Searches

Learn about Centmin Mod LEMP Stack today

PHP PHP 5.6.13 Released 11+ security fixes

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

RoldanLT Well-Known Member

.