_:n38d46f849c5f427887d26dfe75031302xb0
<http://schema.org/description>
"-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security]  php (SSA:2011-237-01) New php packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: +--------------------------+ patches/packages/php-5.3.8-i486-1_slack13.37.txz:  Upgraded.   Security fixes vs. 5.3.6 (5.3.7 was not usable):   Updated crypt_blowfish to 1.2. (CVE-2011-2483)   Fixed crash in error_log(). Reported by Mateusz Kocielski   Fixed buffer overflow on overlog salt in crypt().   Fixed bug #54939 (File path injection vulnerability in RFC1867   File upload filename). Reported by Krzysztof Kotowicz. (CVE-2011-2202)   Fixed stack buffer overflow in socket_connect(). (CVE-2011-1938)   Fixed bug #54238 (use-after-free in substr_replace()). (CVE-2011-1148)   For more information, see:     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1148     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1938     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2202     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2483   For those upgrading from PHP 5.2.x, be aware that quite a bit has   changed, and it will very likely not &amp;#x27;drop in&amp;#x27;, but PHP 5.2.x is not   supported by php.net any longer, so there wasn&amp;#x27;t a lot of choice   in the matter.  We&amp;#x27;re not able to support a security fork of   PHP 5.2.x here either, so you&amp;#x27;ll have to just bite the bullet on   this.  You&amp;#x27;ll be better off in the long run.  :)   ( Security fix ) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project!  :-) Also see the &amp;quot;Get Slack&amp;quot; section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 11.0: ftp://ftp.slackware.com/pub/slackware/slackware-11.0/extra/php5/php-5.3.8-i486-1_slack11.0.tgz Updated package for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/php-5.3.8-i486-1_slack12.0.tgz Updated package for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/php-5.3.8-i486-1_slack12.1.tgz Updated package for Slackware 12.2: ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/php-5.3.8-i486-1_slack12.2.tgz Updated package for Slackware 13.0: ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/php-5.3.8-i486-1_slack13.0.txz Updated package for Slackware x86_64 13.0: ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/php-5.3.8-x86_64-1_slack13.0.txz Updated package for Slackware 13.1: ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/php-5.3.8-i486-1_slack13.1.txz Updated package for Slackware x86_64 13.1: ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/php-5.3.8-x86_64-1_slack13.1.txz Updated..."
<https://vulners.com/securityvulns/SECURITYVULNS:DOC:26931>