- CentOS release 5.10 (Final)
- WHM 11.40.0 (26)
- EasyApache 3.22.24 rev9999 compiled apache 2.2.26 and PHP 5.3.27 w/ SuHosin 0.9.33
I already had PHP 5.3.27 installed (since before most of documents/patches for CVE-2013-4248 came out), so I'm not sure it's downloading the patched version from anywhere if it thinks it already has the newest version locally. Looking at the logs, this is what I'm afraid of.
Also, apparently there are only peripheral PHP RPM packages installed, so running a command like:
rpm -q --changelog php53
yields a "no package" message.
just gives me the gross output of the version number along with ioncube, etc. versions.
Is there a local changelog file a can check that would have the info I want? I simply can't find one with either the
find command or by looking at the directories with core php files in them.
I am specifically looking for changes/patch(es) made toward fixing CVE-2013-4248.
Thank you, I've spent several hours searching/reading on the web and still don't have an answer specific to my flavor of Linux/etc.