Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Slackware 10.2: PHP Code Injection Vulnerability Report Issued 2005-10-05

slackware
Calendar Grey November 6, 2005
Scroller Slackware
Recent updates for PHP libraries targeting vulnerabilities have been rolled out for Slackware 10.2, which could influence SquirrelMail and additional applications.
New PHP packages are available for Slackware 10.2 and -current to fix minor security issues relating to the overwriting of the GLOBALS array

Summary

Here are the details from the Slackware 10.2 ChangeLog: patches/packages/php-4.4.1-i486-1.tgz: Upgraded to php-4.4.1. Fixes a number of bugs, including several minor security fixes relating to the overwriting of the GLOBALS array. (* Security fix *)

Topics%20covered

Topics Covered

security advisory security fix package upgrade Slackware PHP code injection

Where Find New Packages

Updated package for Slackware 10.2:
Updated package for Slackware -current:

MD5 Signatures

Slackware 10.2 package: 3a86cbe1c07da03ef444e9205e9fefcc php-4.4.1-i486-1.tgz
Slackware -current package: 3a86cbe1c07da03ef444e9205e9fefcc php-4.4.1-i486-1.tgz

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory security fix package upgrade Slackware PHP code injection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: First, stop apache: # apachectl stop Next, upgrade to the new PHP package: # upgradepkg php-4.4.1-i486-1.tgz Finally, restart apache: # apachectl start (or: apachectl startssl)