7122e3effd
This is security fix release, fixing several important security issues. From the ChangeLog: * Fixed strip_tags() to correctly handle '\0' characters. * Improved stability during startup when memory_limit is used. * Replace alloca() with emalloc() for better stack protection. * Added missing safe_mode checks inside ftok and itpc. * Fixed bug #28963 Fixed address allocation routine in IMAP extension. * Fixed bug #28632 Prevent open_basedir bypass via MySQL's LOAD DATA LOCAL. Note: package update also includes extra patches from PHP CVS not present in stock PHP 4.3.8 release - compilation fix for mssql extension and Zend engine memory-use-after-free fix. |
||
---|---|---|
.. | ||
patches | ||
DESCR | ||
distinfo | ||
Makefile |