2 replies to this topic

[AplusWebMaster]

FYI...

- http://secunia.com/advisories/26642/
Release Date: 2007-08-31
Critical: Moderately critical
Impact: Unknown, Security Bypass
Where: From remote
Solution Status: Vendor Patch
Software: PHP 5.2.x
...The vulnerabilities are reported in PHP versions prior to 5.2.4.
Solution: Update to PHP version 5.2.4.
http://www.php.net/downloads.php ...
Original Advisory:
http://www.php.net/releases/5_2_4.php

.

Edited by AplusWebMaster, 12 November 2007 - 05:42 AM.

[AplusWebMaster]

FYI...

- http://secunia.com/advisories/27648/
Release Date: 2007-11-12
Critical: Moderately critical
Impact: Unknown, Security Bypass
Where: From remote
Solution Status: Vendor Patch
Software: PHP 5.2.x
...vulnerabilities and weaknesses have been reported in PHP, where some have unknown impacts and others can be exploited to bypass certain security restrictions.
Solution: Update to version 5.2.5.
http://www.php.net/downloads.php ...
Original Advisory:
http://www.php.net/releases/5_2_5.php

[AplusWebMaster]

FYI...

- http://secunia.com/advisories/28318/
Release Date: 2008-01-03
Critical: Moderately critical
Impact: Unknown, Security Bypass
Where: From remote
Solution Status: Vendor Patch
Software: PHP 4.4.x
Solution: Update to version 4.4.8.
http://www.php.net/downloads.php ...
(Note: Support for PHP 4 has been discontinued since 2007-12-31. Please consider upgrading to PHP 5.2)
Original Advisory: http://www.php.net/releases/4_4_8.php
"...This release wraps up all the outstanding patches for the PHP 4.4 series, and is therefore the last normal PHP 4.4 release..."

ChangeLog
- http://www.php.net/C...Log-4.php#4.4.8

> http://nvd.nist.gov/...e=CVE-2007-3378