Bu gün php.net Baktığımda php 4.4.8 yayınlanmış biliyorsunuz php4 desteği kesilmişti sadece 8 temmuza kadar güvenlik açıkları ve güncelleştirmeler için destek vereceklerini söylemiştiler aşaüıda fixledikleri güvenlik açıkları
Improved fix for MOPB-02-2007.
Fixed an integer overflow inside chunk_split(). Identified by Gerhard Wagner.
Fixed integer overlow in str[c]spn().
Fixed regression in glob when open_basedir is on introduced by #41655 fix.
Fixed money_format() not to accept multiple %i or %n tokens.
Addded "max_input_nesting_level" php.ini option to limit nesting level of input variables. Fix for MOPB-03-2007.
Fixed INFILE LOCAL option handling with MySQL - now not allowed when open_basedir or safe_mode is active.
Fixed session.save_path and error_log values to be checked against open_basedir and safe_mode (CVE-2007-3378).
Fixed bug #43010 (Fixed regression in imagearc with two equivelent angles).
Fixed bug #41765 (Recode crashes/does not work on amd64).
Fixed bug #41630 (segfault when an invalid color index is present in the image data).
Fixed bug #41628 (PHP settings leak between Virtual Hosts in Apache 1.3).
Fixed bug #38798 (OpenSSL init corrected in php5 but not in php4).
Hiç yorum yok:
Yorum Gönder