Patches slapped on serious PHP flaws, Security >>war

[the mul]

Two software updates have been released to fix critical flaws that could allow an attacker to compromise servers using PHP, a programming language for Web pages.

The PHP Group, a software developer community, issued versions 4.3.10 and 5.0.3 of PHP this week to remedy the problems in the major versions of the Web page-processing program.

"All users of PHP are strongly encouraged to upgrade to one of these releases as soon as possible," the group advised on its Web site.

Arguably the most critical vulnerability is in a function used to compact data for storage. By exploiting the flaw, an attacker could take control of the Web server that runs a vulnerable version of the PHP: Hypertext Preprocessing (PHP), according to the Hardened-PHP group, which found the flaw.

http://news.com.com/Patches+slapped+...l?tag=nefd.top

THE MUL