PHP 4.3.10 & 5.0.3 released!

[TommyBALL]

Here we go

http://www.php.net/downloads.php

Changelog 4.3.10 (http://www.php.net/ChangeLog-4.php#4.3.10)
Changelog 5.0.3 (http://www.php.net/ChangeLog-5.php#5.0.3)

[Floris]

As there are issues reported with 4.3.10 of PHP and vBulletin, I advise to wait off upgrading PHP.

[Zachery]

There are no issues specificly with php 4.3.10 and vBullein, rather Zend Optimizer Php 4.3.10 and vBulletin, make sure to upgrade ZO to the latest version or leave it out for the time being

[grbear]

According to this (http://www.hardened-php.net/advisories/012004.txt), we should be upgrading IMMEDIATELY. Specifically because they claim vBulletin is affected by this new exploit.

[Zachery]

:rolleyes: its a php flaw, not vB, other software that makes use of the serilize function will be affected

[grbear]

Just for clarification, even though they expressly stated:

Examples of vulnerable scripts:

- vBulletin

Your saying the vB script is not affected by the exploitable flaw in PHP 4.3.9 and lower? If that's the case, someone should advise them so they can correct it.

[cirisme]

Just for clarification, even though they expressly stated:



Your saying the vB script is not affected by the exploitable flaw in PHP 4.3.9 and lower? If that's the case, someone should advise them so they can correct it.
It _is_ vulnerable, but it is PHP's fault, not vBulletin's.(supposedly)

Silly distinction especially when IPB and phpBB are vulnerable... but that's life.

An upgrade to PHP 4.3.10 is necessary. I just did it, and it's working well so far.

[Zachery]

Yes vB is affected but the bug is in php, not vBulletin.

[grbear]

Thank you Zachery.

I wasn't blaming vB, I was quite aware that it was a PHP problem, not vB. :)

I was refering to the post Floris made advising to hold off upgrading to the latest (4.3.10) PHP.

[Zachery]

The issue with it is the php accelerators that are not up to doate.

[Bulent Tekcan]

is mmcache working with 4.3.10 anyone test it ?

Thanks

[tomdkat]

There are no issues specificly with php 4.3.10 and vBullein, rather Zend Optimizer Php 4.3.10 and vBulletin, make sure to upgrade ZO to the latest version or leave it out for the time beingWill the version of Zend that comes with the source distro of PHP be new enough?

Peace...

[ehsan]

I just upgraded to 4.3.10 and also I was using Truck MMCache,
now vBulletin works perfects, and Truck MMCache needs a reinstall,
I had no kind of optimizers either. :)

[Bulent Tekcan]

Yes 5 minutes ago upgrade too,working without any problem.

Cheers

[ehsan]

Yes 5 minutes ago upgrade too,working without any problem.

Cheers
did you install MMCache successfully?

[Bulent Tekcan]

Yes...I have no problem for that.

[wfp]

where did you find it? all I see is source code on php.net.