-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security]  php (SSA:2007-127-01)

New php packages are available for Slackware 10.2, 11.0, and -current
to improve the stability and security of PHP.  Quite a few bugs were
fixed -- please see https://www.php.net/ for a detailed list.
All sites that use PHP are encouraged to upgrade.  Please note that
we haven't tested all PHP applications for backwards compatibility
with this new upgrade, so you should have the old package on hand
just in case.

Both PHP 4.4.7 and PHP 5.2.2 updates have been provided.


Here are the details from the Slackware 11.0 ChangeLog:
+--------------------------+
extra/php5/php-5.2.2-i486-1_slack11.0.tgz:
  Upgraded to php-5.2.2.
  This fixes bugs and improves security.
  For more details, see:
    https://www.php.net//releases/5_2_2.php
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1001
  (* Security fix *)
patches/packages/php-4.4.7-i486-1_slack11.0.tgz:
  Upgraded to php-4.4.7.
  This fixes bugs and improves security.
  For more details, see:
    https://www.php.net//releases/4_4_7.php
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1001
  (* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

HINT:  Getting slow download speeds from ftp.slackware.com?
Give slackware.osuosl.org a try.  This is another primary FTP site
for Slackware that can be considerably faster than downloading
from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab
(https://osuosl.org/) for donating additional FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://www.slackware.com/ for
additional mirror sites near you.

Updated packages for Slackware 10.2:

Updated packages for Slackware 11.0:

Updated packages for Slackware -current:


MD5 signatures:
+-------------+

Slackware 10.2 packages:
56aa46827b63ffbc362727cbaaf586e8  php-4.4.7-i486-1_slack10.2.tgz
c05e8b71616725493bee7d150b8dc62a  php-5.2.2-i486-1_slack10.2.tgz

Slackware 11.0 packages:
b949d684bd04d1f843c28ee01076d246  php-4.4.7-i486-1_slack11.0.tgz
b7be5a1e3ef61d1c758513caeda9c7c7  php-5.2.2-i486-1_slack11.0.tgz

Slackware -current packages:
38a8fe4b7bd5637e09a5a28f50a19a0e  php-4.4.7-i486-1.tgz
b49eb13cc4110617f5515426f747b8d7  php-5.2.2-i486-1.tgz


Installation instructions:
+------------------------+

First, stop apache:
# apachectl stop

Next, upgrade to the new PHP package:
# upgradepkg php-4.4.7-i486-1_slack11.0.tgz

Finally, restart apache:
# apachectl start  (or: apachectl startssl)


+-----+

Slackware: 2007-127-01: php Security Update

May 8, 2007
New php packages are available for Slackware 10.2, 11.0, and -current to improve the stability and security of PHP

Summary

Here are the details from the Slackware 11.0 ChangeLog: extra/php5/php-5.2.2-i486-1_slack11.0.tgz: Upgraded to php-5.2.2. This fixes bugs and improves security. For more details, see: https://www.php.net//releases/5_2_2.php http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1001 (* Security fix *) patches/packages/php-4.4.7-i486-1_slack11.0.tgz: Upgraded to php-4.4.7. This fixes bugs and improves security. For more details, see: https://www.php.net//releases/4_4_7.php http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1001 (* Security fix *)

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated packages for Slackware 10.2:
Updated packages for Slackware 11.0:
Updated packages for Slackware -current:

MD5 Signatures

Slackware 10.2 packages: 56aa46827b63ffbc362727cbaaf586e8 php-4.4.7-i486-1_slack10.2.tgz c05e8b71616725493bee7d150b8dc62a php-5.2.2-i486-1_slack10.2.tgz
Slackware 11.0 packages: b949d684bd04d1f843c28ee01076d246 php-4.4.7-i486-1_slack11.0.tgz b7be5a1e3ef61d1c758513caeda9c7c7 php-5.2.2-i486-1_slack11.0.tgz
Slackware -current packages: 38a8fe4b7bd5637e09a5a28f50a19a0e php-4.4.7-i486-1.tgz b49eb13cc4110617f5515426f747b8d7 php-5.2.2-i486-1.tgz

Severity
[slackware-security] php (SSA:2007-127-01)
New php packages are available for Slackware 10.2, 11.0, and -current to improve the stability and security of PHP. Quite a few bugs were fixed -- please see https://www.php.net/ for a detailed list. All sites that use PHP are encouraged to upgrade. Please note that we haven't tested all PHP applications for backwards compatibility with this new upgrade, so you should have the old package on hand just in case.
Both PHP 4.4.7 and PHP 5.2.2 updates have been provided.

Installation Instructions

Installation instructions: First, stop apache: # apachectl stop Next, upgrade to the new PHP package: # upgradepkg php-4.4.7-i486-1_slack11.0.tgz Finally, restart apache: # apachectl start (or: apachectl startssl)

Related News