-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] php (SSA:2022-164-01) New php packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/php-7.4.30-i586-1_slack15.0.txz: Upgraded. This update fixes bugs and security issues: mysqlnd/pdo password buffer overflow. Uninitialized array in pg_query_params(). For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31626 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31625 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on https://slackware.com for additional mirror sites near you. Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/php-7.4.30-i586-1_slack15.0.txz Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/php-7.4.30-x86_64-1_slack15.0.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/php-7.4.30-i586-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/php-7.4.30-x86_64-1.txz MD5 signatures: +-------------+ Slackware 15.0 package: 38a0c8eed10283eaf5c3b11a13cf1c67 php-7.4.30-i586-1_slack15.0.txz Slackware x86_64 15.0 package: d455ba024a0787cdcf2b99b5556c1fc9 php-7.4.30-x86_64-1_slack15.0.txz Slackware -current package: 72100d66b185f7b228121076a4f00702 n/php-7.4.30-i586-1.txz Slackware x86_64 -current package: 3f2b4f37ad7f31ebad8c67ec8c412bce n/php-7.4.30-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg php-7.4.30-i586-1_slack15.0.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start +-----+