PHP 5.2.6 Released
The PHP development team started the month of May with the release of PHP 5.2.6. With over 120 bug fixes, this release is mainly focused on stability. There are however several security enhancements in PHP 5.2.6:
- Fixed possible stack buffer overflow in the FastCGI SAPI identified by Andrei Nigmatulin.
- Fixed integer overflow in printf() identified by Maksymilian Aciemowicz.
- Fixed security issue detailed in CVE-2008-0599 identified by Ryan Permeh.
- Fixed a safe_mode bypass in cURL identified by Maksymilian Arciemowicz.
- Properly address incomplete multibyte chars inside escapeshellcmd() identified by Stefan Esser.
- Upgraded bundled PCRE to version 7.6
References: Release Announcement, PHP 5.2.6 ChangeLog, PHP.net Download page
About the Author
Bryan Ruby is owner and editor for CMS Report. He founded CMSReport.com in 2006 on the belief that information technologists, website owners, and web developers desired visiting sites where they could learn more about content management systems without the sales pitch. Although Bryan has been active in the content management community for a number of years, please do not call him a CMS expert. Bryan's preference is to be labeled a CMS enthusiast.
Outside of his late night blogging hours, he is the Information Technology Officer for a field office in the federal government. Away from the computer he enjoys his family, bicycling, camping, and the outdoors.
