PHP 5.2.2和PHP 4.4.7发布

来源: LUPA开源社区

PHP开发组想通告立即可用的PHP 5.2.2和PHP 4.4.7。这个版本主要是5.x和4.4.x分支的稳定性和安全性的增强，并且所有的用户被强烈建议尽可能快得升级到这些版本。有关PHP5.2.2版本的进一步的细节可以在5.2.2发布通告找到，更改的完全列表在PHP 5更改日志可用。关于PHP 4.4.7版本的细节可以在4.4.7发布通告找到，更改的完全列表在PHP 4更改日志可用。

Security Enhancements and Fixes in PHP 5.2.2 and PHP 4.4.7:

• Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric)
• Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser)
• Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser)
• Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser)
• Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser)
• Added missing open_basedir & safe_mode checks to zip:// and bzip:// wrappers. (MOPB-21 by Stefan Esser).
• Limit nesting level of input variables with max_input_nesting_level as fix for (MOPB-03 by Stefan Esser)
• Fixed CRLF injection inside ftp_putcmd(). (by loveshell[at]Bug.Center.Team)
• Fixed a possible super-global overwrite inside import_request_variables(). (by Stefano Di Paola, Stefan Esser)
• Fixed a remotely trigger-able buffer overflow inside bundled libxmlrpc library. (by Stanislav Malyshev)

Security Enhancements and Fixes in PHP 5.2.2 only:

• Fixed a header injection via Subject and To parameters to the mail() function (MOPB-34 by Stefan Esser)
• Fixed wrong length calculation in unserialize S type (MOPB-29 by Stefan Esser)
• Fixed substr_compare and substr_count information leak (MOPB-14 by Stefan Esser) (Stas, Ilia)
• Fixed a remotely trigger-able buffer overflow inside make_http_soap_request(). (by Ilia Alshanetsky)
• Fixed a buffer overflow inside user_filter_factory_create(). (by Ilia Alshanetsky)

Security Enhancements and Fixes in PHP 4.4.7 only:

• XSS in phpinfo() (MOPB-8 by Stefan Esser)

While majority of the issues outlined above are local, in some circumstances given specific code paths they can be triggered externally. Therefor, we strongly recommend that if you use code utilizing the functions and extensions identified as having had vulnerabilities in them, you consider upgrading your PHP.

For users upgrading to PHP 5.2 from PHP 5.0 and PHP 5.1, an upgrade guide is available here, detailing the changes between those releases and PHP 5.2.2.

Update: May 4th; The PHP 4.4.7 Windows build was updated due to the faulty Apache2 module shipped with the original

声明：LUPA开源社区刊登此文只为传递信息，并不表示赞同或者反对。