Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Slackware 12.2: 2009-098-02 Moderate PHP Crash Security Fix

slackware
Calendar Grey April 8, 2009
Scroller Slackware
Recent updates for PHP packages are now obtainable for Slackware releases ranging from 11.0 to the latest to tackle critical security vulnerabilities.
New php packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix security issues

Summary

Here are the details from the Slackware 12.2 ChangeLog: patches/packages/php-5.2.9-i486-1_slack12.2.tgz: Upgraded to php-5.2.9. This update fixes a few security issues: - Fixed a crash on extract in zip when files or directories entry names contain a relative path. - Fixed security issue in imagerotate(), background colour isn't validated correctly with a non truecolour image. (CVE-2008-5498) Reported by Hamid Ebadi, APA Laboratory. - Fixed a segfault when malformed string is passed to json_decode(). For more information, see: https://www.cve.org/CVERecord?id=CVE-2008-5498 (* Security fix *)

Topics%20covered

Topics Covered

security advisory software update security fix slackware php package

Where Find New Packages

Updated package for Slackware 11.0:
Updated package for Slackware 12.0:
Updated package for Slackware 12.1:
Updated package for Slackware 12.2:
Updated package for Slackware -current:

MD5 Signatures

Slackware 11.0 package: 0f37384585ba9b364f1fcf3260ed934a php-5.2.9-i486-1_slack11.0.tgz
Slackware 12.0 package: b959206d13d76f58ef92489f569b7ff8 php-5.2.9-i486-1_slack12.0.tgz
Slackware 12.1 package: bab5d4abc502a0a5dc1831943a5fd1a7 php-5.2.9-i486-1_slack12.1.tgz
Slackware 12.2 package: e3c82331a09e0edb6be009e57b2569c9 php-5.2.9-i486-1_slack12.2.tgz
Slackware -current package: af4de16b609b4e797dd0fc0a9f4c84d8 php-5.2.9-i486-1.tgz

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory software update security fix slackware php package

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg php-5.2.9-i486-1_slack12.2.tgz Then, restart the web server.