PHP 4.3.1 (!) released in response to CGI vulnerability

[Radio_Head]

http://www.php.net
http://www.php.net/release_4_3_1.php

 

[Radio_Head]

Anyone is interested ?

 

[thedavid]

Originally posted by thaphantom
thanks for the heads up, I am sure that Nick will get this done tonight.

Fantastic - I'll be looking forward to updating tomorrow

-David

 

[luisp]

hello

stupid question :

by the way.. how can we update this through cpanel?

thanks

 

[snowgod]

This only affects the cgi SAPI anyway. 90% of machines (and every cpanel machine i've seen) use the Apache SAPI. Everyone is most likely not affected.

 

[cPanelNick]

There is a new buildapache up there.

If you plan on trying the php+suexec patch make sure to remove the

AddModule
and
LoadModule lines for php

as well as add

AddHandler application/x-httpd-php .php .php4 .php3

to httpd.conf

This feature is experimental and not support as of yet. PHP will be slightly slower since it uses the cgi interface.