ibiblio-announce AT lists.ibiblio.org
Subject: ibiblio services/changes announcement list
List archive
[ibiblio-announce] PHP upgraded to fix xmlrpc vulnerability
- From: John Reuning <john AT metalab.unc.edu>
- To: ibiblio-announce AT lists.ibiblio.org
- Subject: [ibiblio-announce] PHP upgraded to fix xmlrpc vulnerability
- Date: Tue, 05 Jul 2005 12:56:00 -0400
In response to the recent announcement of a remotely exploitable
vulnerability in a php-based xmlrpc library, php has been updated on all
ibiblio web servers. The current version is 4.3.11 with the latest
version of the pear XML_RPC library (instead of the version bundled with
php 4.3.11).
Note: You must still upgrade your php-based web applications. Many
apps, such has postnuke, drupal, and phpwiki (non-exhaustive list),
bundle an xmlrpc library with the software. Our core php upgrade may
not fix your problem.
For more details about the xmlrpc vulnerability, see:
http://www.gulftech.org/
http://news.netcraft.com/archives/2005/07/04/php_blogging_apps_vulnerable_to_xmlrpc_exploits.html
Thanks,
-jrr
- [ibiblio-announce] PHP upgraded to fix xmlrpc vulnerability, John Reuning, 07/05/2005
Archive powered by MHonArc 2.6.24.