--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-5901b42760
2017-02-25 01:54:36.267573
--------------------------------------------------------------------------------
Name : php-pecl-zendopcache
Product : Fedora EPEL 6
Version : 7.0.5
Release : 2.el6
URL :
http://pecl.php.net/package/ZendOpcache
Summary : The Zend OPcache
Description :
The Zend OPcache provides faster PHP execution through opcode caching and
optimization. It improves PHP performance by storing precompiled script
bytecode in the shared memory. This eliminates the stages of reading code from
the disk and compiling it on future access. In addition, it applies a few
bytecode optimization patterns that make code execution faster.
--------------------------------------------------------------------------------
Update Information:
Add security mitigation fix backported from PHP 5.6: * php#69090 check cached
files permissions This change introduce 2 new configuration options: *
**opcache.validate_permission** (default 0): leads OPcache to check file
readability on each access to cached file. This directive should be enabled in
shared hosting environment, when few users (PHP-FPM pools) reuse the common
OPcache shared memory. * **opcache.validate_root** (default 0): prevent name
collisions in chroot'ed environment. This directive prevents file name
collisions in different "chroot" environments. It should be enabled for sites
that may serve requests in different "chroot" environments.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1409317 - backport security fix #69090 for OPcache
https://bugzilla.redhat.com/show_bug.cgi?id=1409317
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-pecl-zendopcache' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------