| Author |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
 Posted: Fri 03 Feb '12 10:18 Post subject: PHP 5.3.10 has been released |
 |
|
In PHP 5.3.9 there is a serious security bug. Please update your installations to 5.3.10. Alternative: Disable your php  |
|
| Back to top |
|
Kanashii
Joined: 17 Jul 2006
Posts: 155
Location: Porando
|
| Posted: Fri 03 Feb '12 19:30 Post subject: |
|
|
Problem:
http://thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos/
offtopic
How to make hot replace for new PHP
Use "unlocker" software to unlock folder where is PHP
Rename to phptmp
create folder php copy old files
replace with new php
I use Wincache so page are still available 
bat file hot.bat
TASKKILL /F /IM php-cgi.exe
httpd -n Apache -k restart
So will be gracefull restart old connection will be continue and new will be create new apache instance |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
| Posted: Sat 04 Feb '12 12:31 Post subject: |
|
|
That hot thing works only when running php over fcgid.
Module or fcgid I create a new folder like php5310 change the paths in httpd.conf. Copy the php.ini change there the paths for the extensions and restart apache. Advantage I can switch back. Disadvantage it takes a bit longer |
|
| Back to top |
|
KurtDJ
Joined: 27 Feb 2012
Posts: 2
Location: Virginia Beach
|
| Posted: Mon 27 Feb '12 21:01 Post subject: |
|
|
| With this new release of php 5.3.10, i'm running Windows Server 2003 and Apache Server 2.2.22. i want to upgrade php to 5.3.10 but windows.php.net downloads site says not to use VC9 version with Apache binaries. am i able to upgrade? |
|
| Back to top |
|
bagu
Joined: 06 Jan 2011
Posts: 193
Location: France
|
| Posted: Mon 27 Feb '12 22:10 Post subject: |
|
|
| Quote: | Do NOT use VC9 version with apache.org binaries
VC9 versions of Apache can be fetched at Apache Lounge. We use their binaries to build the Apache SAPIs |
So if you use apache from here, you can use php5.3.10 from php.net |
|
| Back to top |
|
Rocker
Joined: 26 Feb 2012
Posts: 16
Location: Brazil
|
| Posted: Tue 28 Feb '12 18:32 Post subject: |
|
|
Hey, I'm using PHP VC9 (from php.net) with Apache from apache.org ...
It works fine. |
|
| Back to top |
|
osportflio
Joined: 27 May 2011
Posts: 1
|
| Posted: Thu 05 Apr '12 11:57 Post subject: |
|
|
| It's been days since 5.3.10 was released and still no word from cPanel! When you say you're working on it, what's to work on? Surely it's the same as 5.3.9 (which you've already released) but just includes 1 security fix. A day or two maybe, but several days??? |
|
| Back to top |
|
