[Freerealty] Security Alert! PHP vulnerabilities may affect FreeRealty

Jake Ortman jake at orty.com
Sun Dec 19 19:15:09 MST 2004


Well, I was running 4.3.9 before, so it's not like this is a huge upgrade
for me.
-jake

-----Original Message-----
From: Patrick Fleming, EA [mailto:pat at rwcinc.net] 
Sent: Sunday, December 19, 2004 6:29 PM
To: freerealty at lists.rwcinc.net
Subject: Re: [Freerealty] Security Alert! PHP vulnerabilities may affect
FreeRealty


Most vendors also backport the fix to the currently distributed version, 
at least RedHat used to and I presume that Fedora continues to do so. I 
was unable to find the advisory on Slackware's site or on the Fedora 
Core mailing list.

Jake Ortman wrote:
> I do know that the 4.3.10 cPanel upgrade completely FUBARed my site
> (www.sunrayinc.com). Though most of the errors were because of some hacked
> up scripts I have on there (mostly unrelated to FreeRealty), I'm going to
> have to test this more before I let this thing live, and make sure it just
> wasn't an Apache-related problem.
> 
> -Jake
> 
> -----Original Message-----
> From: Patrick Fleming, EA [mailto:pat at rwcinc.net] 
> Sent: Friday, December 17, 2004 3:11 PM
> To: freerealty at lists.rwcinc.net
> Subject: [Freerealty] Security Alert! PHP vulnerabilities may affect
> FreeRealty
> 
> 
> Vulnerabilities have been announced for PHP. One listed bug has the 
> potential to affect FreeRealty, namely the addslashes() vulnerability.
> This has not been tested to verify that it does affect FreeRealty, but 
> it is highly recommended that you upgrade PHP (or encourage your host to 
> upgrade if you can't upgrade it yourself)
> 
> http://www.php.net/release_4_3_10.php
> http://www.hardened-php.net/advisories/012004.txt
> 
> Minimum secure versions:
> 4.3.10 & 5.0.3
> _______________________________________________
> FreeRealty mailing list
> FreeRealty at lists.rwcinc.net
> http://lists.rwcinc.net/mailman/listinfo/freerealty
> FreeRealty web site: http://www.rwcinc.net/freerealty
> 
> 
> 
> _______________________________________________
> FreeRealty mailing list
> FreeRealty at lists.rwcinc.net
> http://lists.rwcinc.net/mailman/listinfo/freerealty
> FreeRealty web site: http://www.rwcinc.net/freerealty
> 
_______________________________________________
FreeRealty mailing list
FreeRealty at lists.rwcinc.net
http://lists.rwcinc.net/mailman/listinfo/freerealty
FreeRealty web site: http://www.rwcinc.net/freerealty







More information about the FreeRealty mailing list