Slashdot Mirror

← Back to Stories (view on slashdot.org)

PHP 5.2.2 and 4.4.7 Released

Posted by CowboyNeal on from the hot-off-the-presses dept.

daeg writes "PHP 5.2.2 and 4.4.7 have been released with a plethora of security updates. Many of the security notifications come from the Month of PHP Bugs effort, and range from double freed memory to bugs in functions that allow attackers to enable register_globals, to memory corruption with unserialize(), to input validation flaws that allow e-mail header injections, with an unhealthy sprinkling of other bugs and flaws fixed. All administrators that run any version of PHP are encouraged to update immediately."

3 of 122 comments (clear)

  1. You must be mistaken. by Generic+Player · · Score: 0, Flamebait

    Just listen to all the PHP apologists, PHP never has any security problems, its just people writing bad software in it that gives it a bad reputation.

  2. Re:Bad release practices by cbraga · · Score: 0, Flamebait

    That's because you aren't supposed to use php for any serious stuff anyway, so it doesn't matter when it breaks, it's all in good fun.

  3. Re:I want to see someone claim again by cheater512 · · Score: 0, Flamebait

    Mono/C# are semi-compiled whilst PHP isnt (without a accelerator).

    If you tried using Mono/C# in a real world situation you'd find that it would be horrible because it would run as a CGI. The initialization for it would kill the server.

    I notice that none of the tests were remotely related to a web page as well.
    How the hell is Mandelbrot relevant?