You are not logged in.

#1 2008-12-13 19:23:43

Oleg-A
Member
From: Russia, Mytishchi
Registered: 2008-07-05
Posts: 6

php 5.2.7 in extra!?

PHP 5.2.7 has been removed from distribution

[07-Dec-2008]

Due to a security bug found in the PHP 5.2.7 release, it has been removed from distribution. The bug affects configurations where magic_quotes_gpc is enabled, because it remains off even when set to on. In the meantime, use PHP 5.2.6 until PHP 5.2.8 is later released.

http://www.php.net/archive/2008.php#id2008-12-07-1

Offline

#2 2008-12-13 20:50:43

foutrelis
Developer
From: Athens, Greece
Registered: 2008-07-28
Posts: 705
Website

Re: php 5.2.7 in extra!?

5.2.7-2 contains a patch to fix the security issue you're mentioning.

I'm guessing that php-5.2.8 will be provided soon. In the meantime, it's perfectly safe to use 5.2.7-2 which does not contain the vulnerability. tongue

Offline

#3 2008-12-13 21:07:37

Pierre
Developer
From: Bonn
Registered: 2004-07-05
Posts: 1,964
Website

Re: php 5.2.7 in extra!?

The only difference between 5.2.6-2 and 5.2.8 is the version number.

Offline

#4 2008-12-13 21:20:54

foutrelis
Developer
From: Athens, Greece
Registered: 2008-07-28
Posts: 705
Website

Re: php 5.2.7 in extra!?

Pierre wrote:

The only difference between 5.2.6-2 and 5.2.8 is the version number.

I believe you meant to write 5.2.7-2 there. Anyway, I would like to see a 5.2.8 package even if the only difference is the version number. It would help to avoid confusion as well.

Offline

#5 2008-12-13 22:19:51

Pierre
Developer
From: Bonn
Registered: 2004-07-05
Posts: 1,964
Website

Re: php 5.2.7 in extra!?

Yes, I meant 5.2.7-2.

Offline

#6 2008-12-15 07:42:06

MindTooth
Member
From: Norway
Registered: 2008-11-11
Posts: 331

Re: php 5.2.7 in extra!?

Always easier to use the latest version, instead of a longer version number.

Birger smile

Offline

Board footer

Powered by FluxBB