Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and4.2.1
| From: | Jeff Bearer | Date: | Mon, 22 Jul 2002 15:00:34 +0000 |
| Subject: | Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and4.2.1 | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-108867@lists.php.net to get a copy of this message | ||
IIRC, just about every upgrae has security fixes, you may be hard
pressed to find an older version that doesn't have any big holes in it.
On Mon, 2002-07-22 at 10:55, Ilia A. wrote:
> On July 22, 2002 10:12 am, 1LT John W. Holmes wrote:
> > [snip]
> >
> > > PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1
> >
> > [/snip]
> >
> > Looks like everyone will be using the new super globals, now... :)
> >
> > Well, I guess I'm still assuming that in a perfect world, people will
> > upgrade because of security issues...
> >
> > ---John Holmes...
>
> As the Advisory suggests, the security fault affects only the 2 latest
> versions of PHP, all the people running older PHPs are not affected, so
> unless you've had the very latest stuff running this won't affect you and
> there will be no need to upgrade.
> If anything this will only convince people looking for 'stable' PHP to wait
> even longer before upgrading their releases because of potential bugs such as
> this one creeping up in 'new' releases.
>
> Ilia
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
--
Jeff Bearer, RHCE
Webmaster, PittsburghLIVE.com
2002 EPpy Award Winner, Best Newspaper Website