News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

PHPClasses.org:
Another Serious Security Bug on PHP 5.3.9
February 06, 2012 @ 14:16:22

On the PHPClasses.org blog there's a new post detailing an issue that came up in the PHP 5.3.9 release that caused a large security issue (PHP 5.3.10 has, however, already been released to correct the issue).

PHP 5.3.9 release was mostly meant to fix a security bug, but it introduced a new more serious bug. PHP 5.3.10 was just released to fix this issue. [...] This time it is a bug that allows arbitrary remote code execution. This means that it allows to run arbitrary code on the server, injected by an eventual attacker, so it can be used to cause many types of damage inside a server.

The upgrade to PHP 5.3.10 is highly recommended to prevent this issue from effecting your applications. The post also mentions the dropping of Suhosin support (a security plugin for PHP) on the Debian linux distribution's default installation and how the PHP community has reacted to the decision.

0 comments voice your opinion now!
security bug release update suhosin


blog comments powered by Disqus

Similar Posts

Doctrine Blog: Doctrine 1.0.8 and 1.1.0-RC2 Released

Zend Developer Zone: Zend Framework v1.7.3 Released

Jared White's Blog: Developer Preview 2 of Willowgarden has been released today

Greg Beaver\'s Blog: Why it is very important to upgrade to PEAR 1.4.6 from PEAR 1.3.x

Lukas Smith\'s Blog: MDB2 2.0.0RC1 rapidly approaching


Community Events

Don't see your event here?
Let us know!


community composer api list opinion interview podcast part2 yii2 symfony laravel introduction framework example configure application php7 series language project

All content copyright, 2015 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework