Login
Newsletter
Werbung

Sicherheit: Mehrere Probleme in php
Aktuelle Meldungen Distributionen
Name: Mehrere Probleme in php
ID: SSA:2007-127-01
Distribution: Slackware
Plattformen: Slackware -current, Slackware 10.2, Slackware 11.0
Datum: Di, 8. Mai 2007, 06:40
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1001
Applikationen: PHP

Originalnachricht


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security] php (SSA:2007-127-01)

New php packages are available for Slackware 10.2, 11.0, and -current
to improve the stability and security of PHP. Quite a few bugs were
fixed -- please see http://www.php.net for a detailed list.
All sites that use PHP are encouraged to upgrade. Please note that
we haven't tested all PHP applications for backwards compatibility
with this new upgrade, so you should have the old package on hand
just in case.

Both PHP 4.4.7 and PHP 5.2.2 updates have been provided.


Here are the details from the Slackware 11.0 ChangeLog:
+--------------------------+
extra/php5/php-5.2.2-i486-1_slack11.0.tgz:
Upgraded to php-5.2.2.
This fixes bugs and improves security.
For more details, see:
http://www.php.net/releases/5_2_2.php
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1001
(* Security fix *)
patches/packages/php-4.4.7-i486-1_slack11.0.tgz:
Upgraded to php-4.4.7.
This fixes bugs and improves security.
For more details, see:
http://www.php.net/releases/4_4_7.php
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1001
(* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

HINT: Getting slow download speeds from ftp.slackware.com?
Give slackware.osuosl.org a try. This is another primary FTP site
for Slackware that can be considerably faster than downloading
from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating additional FTP and rsync hosting
to the Slackware project! :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated packages for Slackware 10.2:
php-4.4.7-i486-1_slack10.2.tgz
php-5.2.2-i486-1_slack10.2.tgz

Updated packages for Slackware 11.0:
php-4.4.7-i486-1_slack11.0.tgz
php-5.2.2-i486-1_slack11.0.tgz

Updated packages for Slackware -current:
php-4.4.7-i486-1.tgz
php-5.2.2-i486-1.tgz


MD5 signatures:
+-------------+

Slackware 10.2 packages:
56aa46827b63ffbc362727cbaaf586e8 php-4.4.7-i486-1_slack10.2.tgz
c05e8b71616725493bee7d150b8dc62a php-5.2.2-i486-1_slack10.2.tgz

Slackware 11.0 packages:
b949d684bd04d1f843c28ee01076d246 php-4.4.7-i486-1_slack11.0.tgz
b7be5a1e3ef61d1c758513caeda9c7c7 php-5.2.2-i486-1_slack11.0.tgz

Slackware -current packages:
38a8fe4b7bd5637e09a5a28f50a19a0e php-4.4.7-i486-1.tgz
b49eb13cc4110617f5515426f747b8d7 php-5.2.2-i486-1.tgz


Installation instructions:
+------------------------+

First, stop apache:
# apachectl stop

Next, upgrade to the new PHP package:
# upgradepkg php-4.4.7-i486-1_slack11.0.tgz

Finally, restart apache:
# apachectl start (or: apachectl startssl)


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com

+------------------------------------------------------------------------+
| To leave the slackware-security mailing list: |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGP+k7akRjwEAQIjMRAkNHAJ9uqevX7tR1PTmYt+14p4yVMPYetQCfeIN9
LlbOex2X7R6jqEU92ePmHbc=
=konX
-----END PGP SIGNATURE-----
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung