Skip to Content.
Sympa Menu

ibiblio-announce - [ibiblio-announce] PHP upgraded to fix xmlrpc vulnerability

ibiblio-announce AT lists.ibiblio.org

Subject: ibiblio services/changes announcement list

List archive

Chronological Thread  
  • From: John Reuning <john AT metalab.unc.edu>
  • To: ibiblio-announce AT lists.ibiblio.org
  • Subject: [ibiblio-announce] PHP upgraded to fix xmlrpc vulnerability
  • Date: Tue, 05 Jul 2005 12:56:00 -0400

In response to the recent announcement of a remotely exploitable
vulnerability in a php-based xmlrpc library, php has been updated on all
ibiblio web servers. The current version is 4.3.11 with the latest
version of the pear XML_RPC library (instead of the version bundled with
php 4.3.11).

Note: You must still upgrade your php-based web applications. Many
apps, such has postnuke, drupal, and phpwiki (non-exhaustive list),
bundle an xmlrpc library with the software. Our core php upgrade may
not fix your problem.

For more details about the xmlrpc vulnerability, see:

http://www.gulftech.org/
http://news.netcraft.com/archives/2005/07/04/php_blogging_apps_vulnerable_to_xmlrpc_exploits.html

Thanks,

-jrr



  • [ibiblio-announce] PHP upgraded to fix xmlrpc vulnerability, John Reuning, 07/05/2005

Archive powered by MHonArc 2.6.24.

Top of Page