cvs: php4 / NEWS
| From: | Jani Taskinen | Date: | Mon, 17 Feb 2003 18:10:53 +0000 |
| Subject: | cvs: php4 / NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-18917@lists.php.net to get a copy of this message | ||
sniper Mon Feb 17 13:10:53 2003 EDT
Modified files:
/php4 NEWS
Log:
Update
Index: php4/NEWS
diff -u php4/NEWS:1.1340 php4/NEWS:1.1341
--- php4/NEWS:1.1340 Sun Feb 16 20:31:54 2003
+++ php4/NEWS Mon Feb 17 13:10:53 2003
@@ -55,10 +55,13 @@
. imageline antialias support
. imagepolygon antialias support
+17 Feb 2003, Version 4.3.1
+- Fixed serious security vulnerability in CGI SAPI. (Shane)
+
27 Dec 2002, Version 4.3.0
- Make PHP_AUTH_* variables not available in safe mode under Apache when an
external basic auth mechanism is used. (Philip)
-- Aliased dba_popen() to dba_open() until 4.3.1 when persistent STDIO streams
+- Aliased dba_popen() to dba_open() until 4.3.2 when persistent STDIO streams
are introduced. (Andrei)
- Fixed a security bug in the bundled MySQL library. (Georg, Stefan)
- If you don't specify building any other SAPI "make install" will install the