Koozali.org: home of the SME Server

PHP Vulnerability

Meert

PHP Vulnerability
« on: July 24, 2002, 07:32:58 PM »
I just read this page http://www.php.net/release_4_2_2.php
Is it possible to just upgrade PHP to a new version? Or would this create problems?

Dan Brown

Re: PHP Vulnerability
« Reply #1 on: July 24, 2002, 07:41:50 PM »
This vulnerability only affects PHP 4.2.0 and 4.2.1.  If you're running one of those versions, updated RPMs are available in my contrib directory.

Meert

Re: PHP Vulnerability
« Reply #2 on: July 24, 2002, 07:44:09 PM »
So as long as we keep running version 4.1.2 (standard in SME 5.5) there's no need to worry?

Rich Lafferty

Re: PHP Vulnerability
« Reply #3 on: July 24, 2002, 07:48:23 PM »
Meert wrote:
>
> So as long as we keep running version 4.1.2 (standard in SME
> 5.5) there's no need to worry?

That's correct.

(Reminder: Security concerns get rapid response at security@e-smith.com!)

Cheers,

--Rich