New updated HardenedPHP packages for EasyApache 4 are now available for download from our production repository.

Changelog

ea-php51-php-5.1.6-24.cloudlinux.13

ea-php52-php-5.2.17-27.cloudlinux.21

• fix the bug #78793 (Use-after-free in exif parsing under memory sanitizer)
• fix the bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046)
• fix the bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047)
• update LiteSpeed SAPI to 7.6
• MODLS-714: add an additional log message about lsphp killed by SIGKILL
• MODLS-717: fix lsapi_backend_pgrp_max_reqs and lsapi_backend_pgrp_max_crashes directives

ea-php53-php-5.3.29-29.cloudlinux.15

ea-php54-php-5.4.45-66.cloudlinux.1

ea-php55-php-5.5.38-49.cloudlinux.1

ea-php56-php-5.6.40-11.cloudlinux.1

• fix the bug #78793 (Use-after-free in exif parsing under memory sanitizer)
• fix the bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046)
• fix the bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047)
• fix the bug #78863 (DirectoryIterator class silently truncates after a nullbyte). (CVE-2019-11045)
• update LiteSpeed SAPI to 7.6
• MODLS-714: add an additional log message about lsphp killed by SIGKILL
• MODLS-717: fix lsapi_backend_pgrp_max_reqs and lsapi_backend_pgrp_max_crashes directives

ea-php70-php-7.0.33-11.cloudlinux.1

• fix the bug #78793 (Use-after-free in exif parsing under memory sanitizer)
• fix the bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046)
• fix the bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047)
• fix the bug #78863 (DirectoryIterator class silently truncates after a nullbyte). (CVE-2019-11045)
• fix the bug #78862 (link() silently truncates after a null byte on Windows). (CVE-2019-11044)
• update LiteSpeed SAPI to 7.6
• MODLS-714: add an additional log message about lsphp killed by SIGKILL
• MODLS-717: fix lsapi_backend_pgrp_max_reqs and lsapi_backend_pgrp_max_crashes directives

ea-php71-php-7.1.33-2.cloudlinux.1

• fix the bug #78793 (Use-after-free in exif parsing under memory sanitizer)
• fix the bug #78878 (Buffer underflow in bc_shift_addsub). (CVE-2019-11046)
• fix the bug #78910 (Heap-buffer-overflow READ in exif). (CVE-2019-11047)
• fix the bug #78863 (DirectoryIterator class silently truncates after a nullbyte). (CVE-2019-11045)
• fix the bug #78862 (link() silently truncates after a null byte on Windows). (CVE-2019-11044)
• update LiteSpeed SAPI to 7.6
• MODLS-714: add an additional log message about lsphp killed by SIGKILL
• MODLS-717: fix lsapi_backend_pgrp_max_reqs and lsapi_backend_pgrp_max_crashes directives

Update command

yum update ea-*