MKの日記： PHP 5.2.3 / Security Enhancements and Fixes

- PHP: PHP 5.2.3 Release Announcement
http://www.php.net/releases/5_2_3.php

Security Enhancements and Fixes in PHP 5.2.3:
 
    * Fixed an integer overflow inside chunk_split() (by Gerhard Wagner, CVE-2007-2872)
    * Fixed possible infinite loop in imagecreatefrompng. (by Xavier Roche, CVE-2007-2756)
    * Fixed ext/filter Email Validation Vulnerability (MOPB-45 by Stefan Esser, CVE-2007-1900)
    * Fixed bug #41492 (open_basedir/safe_mode bypass inside realpath()) (by bugs dot php dot net at chsc dot dk)
    * Improved fix for CVE-2007-1887 to work with non-bundled sqlite2 lib.
    * Added mysql_set_charset() to allow runtime altering of connection encoding.

- PHP: Hypertext Preprocessor
http://www.php.net/