PHP 4.3.10 & 5.0.3 Released!

リモートから任意のコードを実行可能なものを含めて7つほど脆弱性が修正されているようなので、バージョンアップしときましょう。

• CAN-2004-1018 - shmop_write() out of bounds memory write access.
• CAN-2004-1018 - integer overflow/underflow in pack() and unpack() functions.
• CAN-2004-1019 - possible information disclosure, double free and negative reference index array underflow in deserialization code.
• CAN-2004-1020 - addslashes not escaping \0 correctly.
• CAN-2004-1063 - safe_mode execution directory bypass.
• CAN-2004-1064 - arbitrary file access through path truncation.
• CAN-2004-1065 - exif_read_data() overflow on long sectionname. magic_quotes_gpc could lead to one level directory traversal with file uploads.

関連情報

• Multiple vulnerabilities within PHP 4/5 (Hardened-PHP Project)
• PHP Input Validation Vulnerabilities (bugtraq)