Slackware: 2018-136-02 Critical: PHP Buffer Overflow and More
slackware
May 17, 2018
New php packages are available for Slackware 14.0, 14.1, and 14.2 to fix security issues
Summary
Here are the details from the Slackware 14.2 ChangeLog: patches/packages/php-5.6.36-i586-1_slack14.2.txz: Upgraded. This fixes many bugs, including some security issues: Heap Buffer Overflow (READ: 1786) in exif_iif_add_value stream filter convert.iconv leads to infinite loop on invalid sequence Malicious LDAP-Server Response causes crash fix for CVE-2018-5712 may not be complete For more information, see: https://www.cve.org/CVERecord?id=CVE-2018-10549 https://www.cve.org/CVERecord?id=CVE-2018-10546 https://www.cve.org/CVERecord?id=CVE-2018-10548 https://www.cve.org/CVERecord?id=CVE-2018-10547 (* Security fix *)
Where Find New Packages
Thanks to the friendly folks at the OSU Open Source Lab
(https://osuosl.org/) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for
additional mirror sites near you.
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware 14.2:
Updated package for Slackware x86_64 14.2:
MD5 Signatures
Slackware 14.0 package:
4daf072adf746379ffa6062a44deba83 php-5.6.36-i486-1_slack14.0.txz
Slackware x86_64 14.0 package:
50275f93ed5f4c41bffd4829b9a34511 php-5.6.36-x86_64-1_slack14.0.txz
Slackware 14.1 package:
4de2f669fad7c183650ae48baf5bf1cf php-5.6.36-i486-1_slack14.1.txz
Slackware x86_64 14.1 package:
fd66a7ab788c9200bf9a3eb16649c4f9 php-5.6.36-x86_64-1_slack14.1.txz
Slackware 14.2 package:
e0b2e7c338595c6ef1d2b5da26cfafbf php-5.6.36-i586-1_slack14.2.txz
Slackware x86_64 14.2 package:
a3f8e64ee8d2c2e45f41166a923190ca php-5.6.36-x86_64-1_slack14.2.txz
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Installation Instructions
Installation instructions: Upgrade the package as root: # upgradepkg php-5.6.36-i586-1_slack14.2.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!