Friday, 9 February 2007

Get Your Hands on PHP 5.2.1

Ilia Alshanetsky has announced the release of PHP 5.2.1. He says the focus of this release was to make this version stable and secure.

Some of the security enhancements and fixes in PHP 5.2.1 that the announcement points out are:

• Fixed possible safe_mode and open_basedir bypasses inside the session extension
• Prevent search engines from indexing the phpinfo() page
• Fixed a number of input processing bugs inside the filter extension
• Fixed unserialize() abuse on 64 bit systems with certain input strings
• Fixed possible overflows and stack corruptions in the session extension
• Fixed an underflow inside the internal sapi_header_op() function
• Fixed allocation bugs caused by attempts to allocate negative values in some code paths
• Fixed possible stack overflows inside zip, imap and SQLite extensions