According to a new post on the main PHP site, they've released the latest version in the 4.4.x series - PHP 4.4.2.

The PHP development team is proud to announce the release of PHP 4.4.2. This release address a few small security issues, and also corrects some regressions that occurred in PHP 4.4.1. All PHP 4 users are encouraged to upgrade to this release.

Further details about this release can be found in the release announcement and the full list of changes is available in the PHP 4 ChangeLog.

Some of the things that this edition fixes includes: HTTP Response Splitting has been addressed in the header() function, an XSS problem inside the error reporting functionality has been removed, and Apache 2 regression with sub-request handling on non-Linux systems has been fixed.

So, head on over and grab this lastest distribution and upgrade today!

According to a new post on the main PHP site, they've released the latest version in the 4.4.x series - PHP 4.4.2.

The PHP development team is proud to announce the release of PHP 4.4.2. This release address a few small security issues, and also corrects some regressions that occurred in PHP 4.4.1. All PHP 4 users are encouraged to upgrade to this release.

Further details about this release can be found in the release announcement and the full list of changes is available in the PHP 4 ChangeLog.

Some of the things that this edition fixes includes: HTTP Response Splitting has been addressed in the header() function, an XSS problem inside the error reporting functionality has been removed, and Apache 2 regression with sub-request handling on non-Linux systems has been fixed.

So, head on over and grab this lastest distribution and upgrade today!

On the PHP Security Blog today, Stefan Esser has this new post with comments about the latest PHP 5.x release and the HTTP response splitting it fixes.

For all those that have not yet learned about my two new advisories through the usual channels. PHP 5.1.2 was released today, fixing among other things a serious HTTP Response Splitting vulnerability in the PHP5 session extension. The fix was implemented in a way similar to the SAPI hook in our Hardening-Patch and is the first move to get some of the Hardening-Patch features into the plain PHP. It is also merged into the PHP4 code tree.

So, basically, once the latest version of the PHP 4.x series has been released, HTTP reponse splitting issues will be a thing of the past. Great work on both sides of the version fence for taking care of this issue...

On the PHP Security Blog today, Stefan Esser has this new post with comments about the latest PHP 5.x release and the HTTP response splitting it fixes.

For all those that have not yet learned about my two new advisories through the usual channels. PHP 5.1.2 was released today, fixing among other things a serious HTTP Response Splitting vulnerability in the PHP5 session extension. The fix was implemented in a way similar to the SAPI hook in our Hardening-Patch and is the first move to get some of the Hardening-Patch features into the plain PHP. It is also merged into the PHP4 code tree.

So, basically, once the latest version of the PHP 4.x series has been released, HTTP reponse splitting issues will be a thing of the past. Great work on both sides of the version fence for taking care of this issue...

According to this post on DynamicWebPages.de today, the first Release Candidate of the PHP 4.4.2 series has been posted.

Derick Rethans, the release manager for the upcoming PHP version, 4.4.2, has published the first Release Candidate for this series. Those who use PHP under Apache 2 or mod_rewrite right now, are specifically being asked to test this release. There have been reports of failures with this specific setup.

All further changes of the version can be found in the Changelog. Originally, the final version was going to be released on Tuesday. However with the help of a few industrious testers, the few errors can found (like the crashing issue with Apache 2) and taken care of so that the new release candidate shouldn't be far behind.

You can download this latest Release Candidate here...

According to this post on DynamicWebPages.de today, the first Release Candidate of the PHP 4.4.2 series has been posted.

Derick Rethans, the release manager for the upcoming PHP version, 4.4.2, has published the first Release Candidate for this series. Those who use PHP under Apache 2 or mod_rewrite right now, are specifically being asked to test this release. There have been reports of failures with this specific setup.

All further changes of the version can be found in the Changelog. Originally, the final version was going to be released on Tuesday. However with the help of a few industrious testers, the few errors can found (like the crashing issue with Apache 2) and taken care of so that the new release candidate shouldn't be far behind.

You can download this latest Release Candidate here...