Published on 2007-05-06 23:13:53
The month of PHP Bugs (March 2007) started giving its fruits with the release of PHP 5.2.2 and 4.4.7 which fixed the majority of bugs and issues identified by Stefan Esser as well as some security bugs that were identified by other security researchers as well as PHP's own developers. These releases are major stability and security enhancements of the 5.x and 4.4.x branches, and all users are strongly encouraged to upgrade to it as soon as possible. Release details are available in the release announcement for 5.2.2 and for a full list of changes check the ChangeLog for PHP 5.
While majority of the issues outlined above are local, in some circumstances given specific code paths they can be triggered externally. Therefor, we strongly recommend that if you use code utilizing the functions and extensions identified as having had vulnerabilities in them, you consider upgrading your PHP.
Member of the PHP Magazine Network, Copyright (C) 2005-2008 phpmagazine.net All Rights Reserved