PHP Multiple Vulnerabilities

[ALGORYTHM]

7.5.4 runs 4.3.11

http://secunia.com/advisories/17371/

Impact: Security Bypass
Cross Site Scripting
DoS
System access

Where: From remote

Solution Status: Vendor Patch


Software: PHP 4.0.x
PHP 4.1.x
PHP 4.2.x
PHP 4.3.x
PHP 4.4.x
PHP 5.0.x

so when do we get a patch/update?

 

[hardweb]

This is true if you use FreeBSD, on the other operating systems you can upgrade the PHP RPMS.

 

[ALGORYTHM]

yea i run bsd unfortunately.

 

[moltar]

Originally posted by hardweb
This is true if you use FreeBSD, on the other operating systems you can upgrade the PHP RPMS.

up2date or yum are not finding any updates. where do I get the rpms?

 

[troymc]

http://www.atomicrocketturtle.com/

 

[Whistler]

Originally posted by ALGORYTHM http://secunia.com/advisories/17371/
so when do we get a patch/update?

PHP 4.4.1 was released 3 days ago and I think Sw-Soft will upgrade to at least this version in the next upgrade (patchlevel or upgrade) - or maybe even release a seperate PHP upgrade (it's seen at lease once before).