PHP 5.2.5 security issues

Posted by Nico Golde in
Monday, November 12. 2007

php 5.2.5 was just released.
Fefe makes fun of this release because of:
Key enhancements in PHP 5.2.5 include:
Upgraded PCRE to version 7.3

while Heise says that these vulnerabilities are fixed in pcre 7.4.

These vulnerabilities are namely CVE-2007-1659, CVE-2007-1660, CVE-2007-1661, CVE-2007-1662, CVE-2007-4766, CVE-2007-4767 and CVE-2007-4768

While I agree with him that PHP is crap, his blog post is wrong or let's say the information provided by Heise is not precise.
All those issues were fixed in the 7.3 release so there is no reason to worry about those vulnerabilities being open in the new php release, however the 7.4 release fixes some regressions introduced with 7.3 but those are (from what I see) not security relevant. So Heise is not wrong, the issues are fixed in 7.4 however they are also in 7.3

Comments (0) - Trackbacks (0)

Defined tags for this entry: comments, fefe, php, releases, security, www

Related entries by tags:

Trackbacks

Trackback specific URI for this entry

No Trackbacks

Comments

Display comments as (Linear | Threaded)

No comments

Add Comment

Name
Email
Homepage
In reply to
Comment	Enclosing asterisks marks text as bold (word), underscore are made via _word_. Standard emoticons like :-) and ;-) are converted to images. You can use [geshi lang=lang_name [,ln={y\|n}]][/geshi] tags to embed source code snippets. E-Mail addresses will not be displayed and will only be used for E-Mail notifications. To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly. Enter the string from the spam-prevention image above: You can use [geshi lang=lang_name [,ln={y\|n}]][/geshi] tags to embed source code snippets.
	Remember Information?

PHP 5.2.5 security issues

nion's blog

PHP 5.2.5 security issues

Calendar

Quicksearch

Support

Recent Entries

Archives

Syndicate This Blog

Categories

Tag cloud