Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Slackware 14.0, 14.1 Security Advisory: PHP Segfault And CPU Issue

slackware
Calendar Grey March 16, 2014
Dist Slackware Esm H88
Recent updates for PHP packages address a segfault or performance problem in Slackware. Users are advised to upgrade for versions 14.0 and 14.1.
New php packages are available for Slackware 14.0, 14.1, and -current to fix a security issue

Summary

Here are the details from the Slackware 14.1 ChangeLog: patches/packages/php-5.4.26-i486-1_slack14.1.txz: Upgraded. This update fixes a flaw where a specially crafted data file may cause a segfault or 100% CPU consumption when a web page uses fileinfo() on it. For more information, see: https://www.cve.org/CVERecord?id=CVE-2014-1943 (* Security fix *)

Topics%20covered

Topics Covered

security advisory security issue software update slackware segfault cpu consumption php package

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 14.0 package: 1c864df50286602ccb2d3efbabb9d7ec php-5.4.24-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: cc0f365855b83708c82a84ea44a4ad21 php-5.4.24-x86_64-1_slack14.0.txz
Slackware 14.1 package: 1091912280ef2fbe271da2aa304dba36 php-5.4.24-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: 22b91ef0428a15b3124c5b4fb911b1bc php-5.4.24-x86_64-1_slack14.1.txz
Slackware -current package: 41157dbaae1a9c3c7b0aa82abbbb9d5c n/php-5.4.26-i486-1.txz
Slackware x86_64 -current package: ef27596b3bbf2eba8f6c66092e8b9d21 n/php-5.4.26-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory security issue software update slackware segfault cpu consumption php package

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg php-5.4.24-i486-1_slack14.1.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start

Related News

Your message here