David Ansermot Web Developer / TYPO3 Integrator

PHP 5.2.12

PHP 5.2.12 is out now. It’s really important to update the production servers.

Security Enhancements and Fixes in PHP 5.2.12:

• Fixed a safe_mode bypass in tempnam() identified by Grzegorz Stachowiak. (CVE-2009-3557, Rasmus)
• Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz Stachowiak. (CVE-2009-3558, Rasmus)
• Added “max_file_uploads” INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion, identified by Bogdan Calin. (CVE-2009-4017, Ilia)
• Added protection for $_SESSION from interrupt corruption and improved “session.save_path” check, identified by Stefan Esser. (CVE-2009-4143, Stas)
• Fixed bug #49785 (insufficient input string validation of htmlspecialchars()). (CVE-2009-4142, Moriyoshi, hello at iwamot dot com)

Source : php.net

Posts that maybe you want to read ::

• PHP 5.3.2 announced
• Joomla! 1.5.17 Released
• New Facebook PHP SDK
• SabreDAV 1.3.0 available
• BpLib : Alpha 0.2 soon