PHP Razvoji tim je objavio izlazak dve nove verzije i to
PHP 4.3.10 i 5.0.3. Ovo su uglavnom verzije u kojima su ispravljeni
bagovi i nekoliko ozbiljnijih sigurnosnih propusta. Svakako savetujemo
da svi koji koriste PHP da urade upgrade na novu verziju. Sledi i
kratak spisak ispravljenih grešaka:br>
CAN-2004-1018 – shmop_write() out of bounds memory write access.
CAN-2004-1018 – integer overflow/underflow in pack() and unpack()
functions.
CAN-2004-1019 – possible information disclosure, double free and
negative reference index array underflow in deserialization code.
CAN-2004-1020 – addslashes not escaping backslash0 correctly.
CAN-2004-1063 – safe_mode execution directory bypass.
CAN-2004-1064 – arbitrary file access through path truncation.
CAN-2004-1065 – exif_read_data() overflow on long sectionname.
magic_quotes_gpc could lead to one level directory traversal with file
uploads.
* Possible crash inside ftp_get().
* get_current_user() crashes on Windows.
* Possible crash in ctype_digit on large numbers.
* Crash when parsing ?getvariable[][.
* Possible crash in the curl_getinfo() function.
* Double free when openssl_csr_new fails.
* Crash when using unknown/unsupported session.save_handler and/or
session.serialize_handler.
* Prevent infinite recursion in url redirection.
* Ensure that temporary files created by GD are removed.
* Crash in fgetcsv() with negative length. (PHP 4 only)
* Improved performance of the foreach() construct. (PHP 4 only)
* Improved number handling on non-English locales.