Slackware 2004-154-02: Critical PHP Local Attack Security Advisory

Here are the details from the Slackware 9.1 ChangeLog: Wed Jun 2 11:28:17 PDT 2004 patches/packages/php-4.3.6-i486-1.tgz: Upgraded to php-4.3.6. This is compiled with c-client.a in /usr/local/lib/c-client/ to fix a problem in previous php packages where linking against the library in a path under /tmp caused an ELF rpath to this location to be built into the PHP binaries. A local attacker could (by placing shared libraries in this location) either crash PHP or cause arbitrary code to be executed as the PHP user (typically "nobody"). Thanks to Bryce Nichols for discovering this issue and bringing it to my attention. (* Security fix *)