Amazon Linux AMI Security Advisory: ALAS-2012-96
Advisory Release Date: 2014-09-14 16:26 Pacific
A cross-site scripting (XSS) flaw was found in the "apc.php" script, which provides a detailed analysis of the internal workings of APC and is shipped as part of the APC extension documentation. A remote attacker could possibly use this flaw to conduct a cross-site scripting attack. (CVE-2010-3294 )
Run yum update php-pecl-apc to update your system.