-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-d51b801025 2017-02-25 01:54:49.162225 --------------------------------------------------------------------------------
Name : php-pecl-zendopcache Product : Fedora EPEL 7 Version : 7.0.5 Release : 2.el7 URL : http://pecl.php.net/package/ZendOpcache Summary : The Zend OPcache Description : The Zend OPcache provides faster PHP execution through opcode caching and optimization. It improves PHP performance by storing precompiled script bytecode in the shared memory. This eliminates the stages of reading code from the disk and compiling it on future access. In addition, it applies a few bytecode optimization patterns that make code execution faster.
-------------------------------------------------------------------------------- Update Information:
Add security mitigation fix backported from PHP 5.6: * php#69090 check cached files permissions This change introduce 2 new configuration options: * **opcache.validate_permission** (default 0): leads OPcache to check file readability on each access to cached file. This directive should be enabled in shared hosting environment, when few users (PHP-FPM pools) reuse the common OPcache shared memory. * **opcache.validate_root** (default 0): prevent name collisions in chroot'ed environment. This directive prevents file name collisions in different "chroot" environments. It should be enabled for sites that may serve requests in different "chroot" environments. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1409317 - backport security fix #69090 for OPcache https://bugzilla.redhat.com/show_bug.cgi?id=1409317 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update php-pecl-zendopcache' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/htm...
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org