The following packages are in testing, and available for download in the testing repositories:
Assuming you have the Webtatic repositories set up (see Yum Repository), you can update using:
yum update <package> --enablerepo=webtatic-testing
Here are updated packages in the Yum repository:
The PHP releases fix 8 CVEs (along with other bug fixes):
* CVE-2014-0207
* CVE-2014-3478
* CVE-2014-3479
* CVE-2014-3480
* CVE-2014-3487
* CVE-2014-3515
* CVE-2014-3981
* CVE-2014-4049
The following packages are in testing, and available for download in the testing repositories:
Assuming you have the Webtatic repositories set up (see Yum Repository), you can update using:
yum update <package> --enablerepo=webtatic-testing
The following packages are in testing, and available for download in the testing repositories:
Assuming you have the Webtatic repositories set up (see Yum Repository), you can update using:
yum update <package> --enablerepo=webtatic-testing
The following packages are in testing, and available for download in the testing repositories:
Assuming you have the Webtatic repositories set up (see Yum Repository), you can update using:
yum update <package> --enablerepo=webtatic-testing
Here are updated packages in the Yum repository:
All three PHP releases fix CVE-2014-0237 and CVE-2014-0238.
The PHP 5.5.13 and 5.4.29 releases contain an additional regression fix for a backwards compatibility breakage causing objects implementing the "Serializable" interface to fail to unserialize using an incorrect serialized string, which would have affected PHPUnit and Doctrine.
The following packages are in testing, and available for download in the testing repositories:
Assuming you have the Webtatic repositories set up (see Yum Repository), you can update using:
yum update <package> --enablerepo=webtatic-testing
The following packages are in testing, and available for download in the testing repositories:
Assuming you have the Webtatic repositories set up (see Yum Repository), you can update using:
yum update <package> --enablerepo=webtatic-testing
The following packages are in testing, and available for download in the testing repositories:
Assuming you have the Webtatic repositories set up (see Yum Repository), you can update using:
yum update <package> --enablerepo=webtatic-testing
Here are updated packages in the Yum repository:
As with the previous post, this PHP 5.3.28 release fixes CVE-2014-0185, which was causing PHP-fpm to create a world-writeable unix socket if unix sockets were used and the listen.mode configuration setting not changed. However, this fix, as it reduces the permissions of the unix socket, may cause some server setups that relied on this to fail. See the previous post for more information.
PHP.net hasn't yet released a security fix themselves for PHP 5.3.