Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

Slackware 13.37: 2012-041-02 Critical: PHP Code Execution Threat

slackware
Calendar Grey February 10, 2012
Dist Slackware Esm H88
Recent updates to PHP packages are now accessible for various Slackware distributions, addressing significant security vulnerabilities. Please apply these updates without delay.
New php packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues

Summary

Here are the details from the Slackware 13.37 ChangeLog: patches/packages/php-5.3.10-i486-1_slack13.37.txz: Upgraded. Fixed arbitrary remote code execution vulnerability reported by Stefan Esser, CVE-2012-0830. (Stas, Dmitry) For more information, see: https://www.cve.org/CVERecord?id=CVE-2012-0830 (* Security fix *)

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 12.0:
Updated package for Slackware 12.1:
Updated package for Slackware 12.2:
Updated package for Slackware 13.0:
Updated package for Slackware x86_64 13.0:
Updated package for Slackware 13.1:
Updated package for Slackware x86_64 13.1:
Updated package for Slackware 13.37:
Updated package for Slackware x86_64 13.37:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 12.0 package: bf5512a57e0e7ba3c9d836636f056036 php-5.3.10-i486-1_slack12.0.tgz
Slackware 12.1 package: 474400e31f8701a07aa97aeee956226e php-5.3.10-i486-1_slack12.1.tgz
Slackware 12.2 package: f359c739e8db9130806c3cb256990804 php-5.3.10-i486-1_slack12.2.tgz
Slackware 13.0 package: 5b38767541b0367dd64539537ca3cfc5 php-5.3.10-i486-1_slack13.0.txz
Slackware x86_64 13.0 package: bcccb9fdde0e548d999447b352f4b322 php-5.3.10-x86_64-1_slack13.0.txz
Slackware 13.1 package: 7bdee84117e3cd1ac8e6087d9c936355 php-5.3.10-i486-1_slack13.1.txz
Slackware x86_64 13.1 package: 2d05770a236fdc52754e1ba9d657d6d7 php-5.3.10-x86_64-1_slack13.1.txz
Slackware 13.37 package: 7555e89aa4dc5a6b68c2fcfd1b8a6dc3 php-5.3.10-i486-1_slack13.37.txz
Slackware x86_64 13.37 package: cf6a47e0046b13b2adba13466b3b5e7e php-5.3.10-x86_64-1_slack13.37.txz
Slackware -current package: 1191d7d49f21f0dba3c4f35cc19e6b88 n/php-5.3.10-i486-1.txz
Slackware x86_64 -current package: 25a12f2407be6f03ff1dc50ad1b3c80b n/php-5.3.10-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg php-5.3.10-i486-1_slack13.37.txz Then, restart the httpd daemon.

Related News

Your message here