Re: php4

[Ed White <ed_(_dot_)_white_(_at_)_libero_(_dot_)_it>]

On Tuesday 25 May 2004 11:33, Sam Smith wrote:
> > Are we sure that 4.3.5RC3 has no known security bugs ?
>
> Audit it yourself and tell us?

uhm...I'll try to be more clear.

The 3.5-stable branch include PHP version 4.3.5RC3.

I've read the changelog for more recent versions, 4.3.5 and 4.3.6, and I've 
seen a lot of bugfixes:

-> http://www.php.net/ChangeLog-4.php#4.3.6
-> http://www.php.net/ChangeLog-4.php#4.3.5


Given the fact that it's difficult to know if one or more of those bugs is 
exploitable, maybe someone should consider updating the 3.5-stable port 
version.


	Ed