Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Slackware 12: 2012-195-01 Critical: Php Heap Overflow Heap Overflow Fix

slackware
Calendar Grey July 14, 2012
Scroller Slackware
Fresh PHP modules have been released for Slackware systems to tackle vulnerabilities and boost efficiency.
New php packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues

Summary

Here are the details from the Slackware 13.37 ChangeLog: patches/packages/php-5.3.14-i486-1_slack13.37.txz: Upgraded. This release fixes a weakness in the DES implementation of crypt and a heap overflow issue in the phar extension. (* Security fix *)

Topics%20covered

Topics Covered

security advisory critical php security fix slackware heap overflow

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 12.0:
Updated package for Slackware 12.1:
Updated package for Slackware 12.2:
Updated package for Slackware 13.0:
Updated package for Slackware x86_64 13.0:
Updated package for Slackware 13.1:
Updated package for Slackware x86_64 13.1:
Updated package for Slackware 13.37:
Updated package for Slackware x86_64 13.37:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 12.0 package: ff5cf4b043a266010cf01063bc5447ff php-5.3.14-i486-1_slack12.0.tgz
Slackware 12.1 package: bb73c33e2404c89603d9ededcf4c277a php-5.3.14-i486-1_slack12.1.tgz
Slackware 12.2 package: b019417c031a2f546599d7cda1b2fe48 php-5.3.14-i486-1_slack12.2.tgz
Slackware 13.0 package: 696348851428aef35cfdb2df494dd8bd php-5.3.14-i486-1_slack13.0.txz
Slackware x86_64 13.0 package: 5eea3977713508d1b41bf5fcecdb07e3 php-5.3.14-x86_64-1_slack13.0.txz
Slackware 13.1 package: 334bb09a47a54ee2cc08629c489ff651 php-5.3.14-i486-1_slack13.1.txz
Slackware x86_64 13.1 package: b41e8cbbe519970d15b3d49df5f9c0c3 php-5.3.14-x86_64-1_slack13.1.txz
Slackware 13.37 package: 29c303aa173597782d89fe93bff89525 php-5.3.14-i486-1_slack13.37.txz
Slackware x86_64 13.37 package: a5166bbb648123f65a3ee699932edbda php-5.3.14-x86_64-1_slack13.37.txz
Slackware -current package: 8547b623817fa250802f9466261bdd1d n/php-5.4.4-i486-1.txz
Slackware x86_64 -current package: 2b23d963c77da42fd2dd29cddfa98e26 n/php-5.4.4-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory critical php security fix slackware heap overflow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg php-5.3.14-i486-1_slack13.37.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start