• Registered: 2014-06-18
  • Posts: 9

Topic: RHSA-2014:1767 (Important: php security update)

FYI

* http://web.nvd.nist.gov/view/vuln/detai … -2014-3670
* http://web.nvd.nist.gov/view/vuln/detai … -2014-3669
* http://web.nvd.nist.gov/view/vuln/detai … -2014-3710
* http://web.nvd.nist.gov/view/vuln/detai … -2014-3668

  • Remi
  • Remi
  • Administrateur
  • Offline
  • From: Champagne...
  • Registered: 2009-04-28
  • Posts: 3,836

Re: RHSA-2014:1767 (Important: php security update)

Of course, as part of the PHP security team, I'm aware of those vulnerabilities.
All are fixed in latest versions available in my repo, except 2014-3710 which will be fixed in next (5.4.35, 5.5.19, 5.6.3)

Laptop:  Fedora 38 + rpmfusion + remi (SCL only)
x86_64 builder: Fedora 39 + rpmfusion + remi-test
aarch64 builder: RHEL 9 with EPEL
Hosting Server: CentOS 8 Stream with EPEL, rpmfusion, remi

Remi's Website

3 Reply by alexus (edited by alexus 2014-11-08 17:18:27)

  • Registered: 2014-06-18
  • Posts: 9

Re: RHSA-2014:1767 (Important: php security update)

Remi wrote:

Of course, as part of the PHP security team, I'm aware of those vulnerabilities.
All are fixed in latest versions available in my repo, except 2014-3710 which will be fixed in next (5.4.35, 5.5.19, 5.6.3)

Great! Thank you so much!)

I'm trying to update php on one of my instances that using remi repo, but it doesn't look like there is any updates (I'm using "remi-release-7.0-1.el7.remi"):

[root@ip-10-184-151-29 ~]# rpm -q php
php-5.4.32-1.el7.remi.x86_64
[root@ip-10-184-151-29 ~]# grep php-5 /var/log/yum.log 
Jul 01 23:10:58 Installed: php-5.4.16-21.el7.x86_64
Aug 30 14:18:44 Updated: php-5.4.32-1.el7.remi.x86_64
[root@ip-10-184-151-29 ~]# yum update php
Loaded plugins: amazon-id, rhui-lb
No packages marked for update
[root@ip-10-184-151-29 ~]#
  • Remi
  • Remi
  • Administrateur
  • Offline
  • From: Champagne...
  • Registered: 2009-04-28
  • Posts: 3,836

Re: RHSA-2014:1767 (Important: php security update)

Is the repo enabled ?
=> http://blog.famillecollet.com/pages/English-FAQ#enable

Try : yum --enablerepo=remi update php\*

Laptop:  Fedora 38 + rpmfusion + remi (SCL only)
x86_64 builder: Fedora 39 + rpmfusion + remi-test
aarch64 builder: RHEL 9 with EPEL
Hosting Server: CentOS 8 Stream with EPEL, rpmfusion, remi

Remi's Website