[slackware-security]  php (SSA:2007-127-01)

New php packages are available for Slackware 10.2, 11.0, and -current
to improve the stability and security of PHP.  Quite a few bugs were
fixed -- please see http://www.php.net for a detailed list.
All sites that use PHP are encouraged to upgrade.  Please note that
we haven't tested all PHP applications for backwards compatibility
with this new upgrade, so you should have the old package on hand
just in case.

Both PHP 4.4.7 and PHP 5.2.2 updates have been provided.


Here are the details from the Slackware 11.0 ChangeLog:
+--------------------------+
extra/php5/php-5.2.2-i486-1_slack11.0.tgz:
  Upgraded to php-5.2.2.
  This fixes bugs and improves security.
  For more details, see:
    http://www.php.net/releases/5_2_2.php
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1001
  (* Security fix *)
patches/packages/php-4.4.7-i486-1_slack11.0.tgz:
  Upgraded to php-4.4.7.
  This fixes bugs and improves security.
  For more details, see:
    http://www.php.net/releases/4_4_7.php
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1001
  (* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

HINT:  Getting slow download speeds from ftp.slackware.com?
Give slackware.osuosl.org a try.  This is another primary FTP site
for Slackware that can be considerably faster than downloading
from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating additional FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated packages for Slackware 10.2:
ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/php-4.4.7-i486-1_slack10.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.2/testing/packages/php5/php-5.2.2-i486-1_slack10.2.tgz

Updated packages for Slackware 11.0:
ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/php-4.4.7-i486-1_slack11.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-11.0/extra/php5/php-5.2.2-i486-1_slack11.0.tgz

Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/php-4.4.7-i486-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-current/extra/php5/php-5.2.2-i486-1.tgz


MD5 signatures:
+-------------+

Slackware 10.2 packages:
56aa46827b63ffbc362727cbaaf586e8  php-4.4.7-i486-1_slack10.2.tgz
c05e8b71616725493bee7d150b8dc62a  php-5.2.2-i486-1_slack10.2.tgz

Slackware 11.0 packages:
b949d684bd04d1f843c28ee01076d246  php-4.4.7-i486-1_slack11.0.tgz
b7be5a1e3ef61d1c758513caeda9c7c7  php-5.2.2-i486-1_slack11.0.tgz

Slackware -current packages:
38a8fe4b7bd5637e09a5a28f50a19a0e  php-4.4.7-i486-1.tgz
b49eb13cc4110617f5515426f747b8d7  php-5.2.2-i486-1.tgz


Installation instructions:
+------------------------+

First, stop apache:
# apachectl stop

Next, upgrade to the new PHP package:
# upgradepkg php-4.4.7-i486-1_slack11.0.tgz

Finally, restart apache:
# apachectl start  (or: apachectl startssl)


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com