Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Slackware 15.0: 2022-304-02 Moderate: php80/php81 Buffer Overflow

slackware
Calendar Grey October 31, 2022
Dist Slackware Esm H88
Updates for php80/php81 address critical buffer overflow and out-of-bounds read vulnerabilities for Slackware 15.0 and -current installations.
New php80/php81 packages are available for Slackware 15.0 and -current to fix security issues

Summary

Here are the details from the Slackware 15.0 ChangeLog: extra/php80/php80-8.0.25-i586-1_slack15.0.txz: Upgraded. This update fixes security issues: GD: OOB read due to insufficient input validation in imageloadfont(). Hash: buffer overflow in hash_update() on long parameter. For more information, see: https://www.cve.org/CVERecord?id=CVE-2022-31630 https://www.cve.org/CVERecord?id=CVE-2022-37454 (* Security fix *) extra/php81/php81-8.1.12-i586-1_slack15.0.txz: Upgraded. This update fixes security issues: GD: OOB read due to insufficient input validation in imageloadfont(). Hash: buffer overflow in hash_update() on long parameter. For more information, see: https://www.cve.org/CVERecord?id=CVE-2022-31630 https://www.cve.org/CVERecord?id=CVE-2022-37454 (* Security fix *)

Topics%20covered

Topics Covered

security advisory buffer overflow security fix slackware php update package upgrade

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated packages for Slackware 15.0:
Updated packages for Slackware x86_64 15.0:
Updated packages for Slackware -current:
Updated packages for Slackware x86_64 -current:

MD5 Signatures

Slackware 15.0 packages: b23d70e401d447049d4ebddf9d0e9773 extra/php80/php80-8.0.25-i586-1_slack15.0.txz 4adcc9f0172babd3bbb6be4101cb0cff extra/php81/php81-8.1.12-i586-1_slack15.0.txz
Slackware x86_64 15.0 packages: 6713ebe18a904ee150696bab8ca7815a extra/php80/php80-8.0.25-x86_64-1_slack15.0.txz 15295194e9dd48c48c7baf7baec043a6 extra/php81/php81-8.1.12-x86_64-1_slack15.0.txz
Slackware -current packages: a5c76cb0f98f399c0237473b4c4f5649 extra/php80/php80-8.0.25-i586-1.txz 754154a952fc39ee2186accd80490609 extra/php81/php81-8.1.12-i586-1.txz
Slackware x86_64 -current packages: f18301c18eb474c6dc61d0f881edc2e3 extra/php80/php80-8.0.25-x86_64-1.txz b9b216076ddcd7a7c1408b1b5f97286e extra/php81/php81-8.1.12-x86_64-1.txz

Topics%20covered

Topics Covered

security advisory buffer overflow security fix slackware php update package upgrade

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg php80-8.0.25-i586-1_slack15.0.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start

Related News

Your message here