Re: [Phpwiki-talk] Re: [phpwiki-checkins] CVS: phpwiki INSTALL,1.15,1.16

[<ph...@de...>]

On Tue, 26 Feb 2002 18:16:37 -0800 (PST), "Jeff Dairiki"
<da...@da...> wrote:
=> I think 4.0.4pl1 was the unspoken standard, and would be fine.  As
=> Reini says, it's in quite common use.  IIRC, it's the first version
=> of PHP 4 which didn't have big bugs.  (BTW, 4.0.4pl1 came after 4.0.4.
=> "pl" stands for "patch level", I think.  It's a ("doh!") stupid
=> bug-fix release, I think.)

You had to tempt fate, didn't you?  <grin>

PHP 4.1.2 was released today because almost all previous PHP
versions have a security flaw related to the mime upload type,
which may allow a remote attacker to execute arbitrary code. It
appears this would afect PHP installed at a CGI in addition to
the PHP module for Apache.

More info:
http://security.e-matters.de/advisories/012002.html
http://www.php.net/

	HTH,

	- Don