-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Reference: CERT-EU Security Advisory 2012-0137 Title: PHP 5.4.9 and PHP 5.3.19 released, multiple vulnerabilities fixed [1] Version history: 23.11.2012 Initial publication Summary ======= The PHP development team announces the immediate availability of PHP 5.4.9 and PHP 5.3.19. These releases fix over 15 bugs. All users of PHP are encouraged to upgrade to PHP 5.4.9, or at least 5.3.19. Vulnerable systems ================== PHP releases before 5.4.9 and 5.3.19 Original Details ================ The PHP development team announces the immediate availability of PHP 5.4.9 and PHP 5.3.19. These releases fix over 15 bugs. All users of PHP are encouraged to upgrade to PHP 5.4.9, or at least 5.3.19. For source downloads of PHP 5.4.9 and PHP 5.3.19 please visit our downloads page [3], Windows binaries can be found on [4]. The list of changes are recorded in the ChangeLog [2]. What can you do? ================ All users of PHP are encouraged to upgrade to PHP 5.4.9, or at least 5.3.19. What to tell your users? ======================== N/A More information ================ [1] http://www.php.net/archive/2012.php#id2012-11-22-1 [2] http://www.php.net/ChangeLog-5.php [3] http://www.php.net/downloads.php [4] http://windows.php.net/download/ Best regards, CERT-EU Pre-configuration Team (http://cert.europa.eu) Phone: +32.2.2990005 / e-mail: cert-eu@ec.europa.eu PGP KeyID 0x46AC4383 FP: 9011 6BE9 D642 DD93 8348 DAFA 27A4 06CA 46AC 4383 Privacy Statement: http://cert.europa.eu/cert/plainedition/en/cert_privacy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBAgAGBQJQr1DQAAoJEPpzpNLI8SVoSrsQAL9g9vwbAOHTcWFdzZDobI3C 0VfQJ3xCv+pHWT07ILtjnPxf76+InrXrHWGYTG7SqEDLQbgpe3oKruHM+2klY+iX nb897xUlkIT5R4RCKCGz5EfJMyDDIvH73uIN1dNtkdHF/s0dKD3AwX2Bncs9ziR8 nlMaVImmpZ59lT9ym05ktGwIjOBIqYf5ecrIZpAmJwcM2I9qwlr/NNYwjwc6ZGb9 1Lo83HREN9IMHQwBL/Q6yQQxr13RulUI/ImfUhWo5kJOxUQPeRdErNzXfLbsDT+o JW3CDp2OkhAlzEBs6YuEGK3w5YiWOVO0AVe9Imrny6B+vRUDcPIRXh/mIaDme5+I 31ThS0aqsZnZvMuIFYBrNIcBeQk1tjK13Jmz4a84OSZZ3QtURIZEiFZRln0sdHCh qflSBgYyMYZkg4EA8j2PNySid3zscDKsWcY1sYxMpjD4BK1KUszSsec++xPNXOKP J6QLaccBdd0fH81ar4faOr/acZVh/tF2+UVCGBkFKFKyC50WMk5h7zXqcdNhSOnJ 1zpe1rYMOzdAzDEC2EGN/brb7xVHW2j+SCbQqPAJgPEUyaw3en+16khvXHHLib7S RcuBnmK0RQMo7fJo4s2Ed4e8A1PAOIDKiBdCl0rnEVdi3QojVjhxvJJSEpuVryQu K4fpATeZhNL2vAet43la =wVGX -----END PGP SIGNATURE-----