LWN.net Logo

Slackware alert SSA:2007-314-01 (php)

From:  Slackware Security Team <security@slackware.com>
To:  slackware-security@slackware.com
Subject:  [slackware-security] php (SSA:2007-314-01)
Date:  Sat, 10 Nov 2007 16:06:23 -0800 (PST)
Message-ID:  <Pine.LNX.4.63.0711101606030.22932@bob.slackware.com>

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] php (SSA:2007-314-01) New PHP5 packages are available for Slackware 10.1, 10.2, 11.0, 12.0, and -current to fix security and other bugs. Note that PHP5 was not officially supported in Slackware 10.1 or 10.2 (being in the /testing directory), and was not the default version of PHP for Slackware 11.0 (being in the /extra directory), but updates are being provided anyway. Here are the details from the Slackware 12.0 ChangeLog: +--------------------------+ patches/packages/php-5.2.5-i486-1_slack12.0.tgz: Upgraded to php-5.2.5. This fixes bugs and security issues. For more information, see: http://www.php.net/releases/5_2_5.php http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4887 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com. Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating additional FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 10.1: ftp://ftp.slackware.com/pub/slackware/slackware-10.1/test... Updated package for Slackware 10.2: ftp://ftp.slackware.com/pub/slackware/slackware-10.2/test... Updated package for Slackware 11.0: ftp://ftp.slackware.com/pub/slackware/slackware-11.0/extr... Updated package for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patc... Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/s... MD5 signatures: +-------------+ Slackware 10.1 package: 8b3d6becd928cb57a885715ac7f8cff8 php-5.2.5-i486-1_slack10.1.tgz Slackware 10.2 package: 18c47598820ecb187f8d19a3e2bc7ec6 php-5.2.5-i486-1_slack10.2.tgz Slackware 11.0 package: 8cd2ec70ef323c5de88e34c041a6e6a5 php-5.2.5-i486-1_slack11.0.tgz Slackware 12.0 package: 1784adc85a1a3ff36d84baa8074d99ed php-5.2.5-i486-1_slack12.0.tgz Slackware -current package: 4ebf48ac4661da84e889688d76edec8e php-5.2.5-i486-1.tgz Installation instructions: +------------------------+ First, stop Apache: # apachectl stop Next, upgrade to the new PHP package: # upgradepkg php-5.2.5-i486-1_slack12.0.tgz Finally, restart Apache: # apachectl start Or, for Apache 1.3.x versions using SSL: # apachectl startssl +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com +------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address. | +------------------------------------------------------------------------+ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHNjKZakRjwEAQIjMRAkVoAJ9Oa4jdTS8/qcAuDXH4dPwhvkhcTACfa5KD UnJj7i2dMF0dCH2bk/H5hjU= =r4Gp -----END PGP SIGNATURE-----


(Log in to post comments)

Copyright © 2009, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds