Store
Your email:Zend Core Updates
Info
Mar-2009: The Core development team announces the immediate availability of Core Update 2.5.2-3;
This update includes the following changes:
Upgrade cUrl library to version 7.19.4 .
Problem description:
Security exploit was discovered in cUrl, allowing server to redirect cUrl into a client local file Impact :
malicious server can make the client expose or overwrit local file when client attempts to upload or tansfer data.
Severity :
medium
Recommendation :
upgrade cUrl to 7.19.4 and rebuild the cUrl extension (staticly).
Upgrade libevent library to version 1.4.9 .
Various bug fixes.
All Zend Core users are encouraged to upgrade to this update.
Changes since 2.5.0
| Component | Status | Old Version | New Version |
| ZendCoreInstaller | UPD | 2.0-1 | 2.0-2 |
| PHP | UPD | 5.2.4-1 | 5.2.9-1 |
| Apache Support | UPD | 5.2.4-1 | 5.2.9-1 |
| Apache2 Support | UPD | 5.2.4-1 | 5.2.9-1 |
| Apache22 Support | UPD | 5.2.4-1 | 5.2.9-1 |
| IIS Support | UPD | 5.2.4-1 | 5.2.9-1 |
| IIS Support 64 | UPD | 5.2.4-1 | 5.2.9-1 |
| ZendExtensionManager | UPD | 1.0.10-1 | 1.2.0-1 |
| ZendOptimizer | UPD | 3.3.1-1 | 3.3.7-1 |
| ZendDebugger | UPD | 5.2.10-1 | 5.2.18-2 |
| ext/bcmath | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/bz2 | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/calendar | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/curl | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/exif | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/ftp | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/gd | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/gmp | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/ibm_db2 | UPD | 1.6.2-1 | 1.8.1-1 |
| ext/imap | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/ldap | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/mcrypt | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/mhash | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/shmop | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/soap | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/sockets | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/tidy | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/tokenizer | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/xmlreader | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/xsl | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/zip | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/pdo_mysql | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/pdo_pgsql | UPD | 5.2.4-1 | 5.2.9-1 |
| lib/openssl | UPD | 0.9.8e-1 | 0.9.8j-5 |
| lib/curl | UPD | 7.16.2-1 | 7.19.4-1 |
| lib/xml2 | UPD | 2.6.27-1 | 2.7.3-1 |
| lib/openldap | UPD | 2.3.27-1 | 2.4.11-1 |
| ext/oci8 | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/mysql | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/mysqli | UPD | 5.2.4-1 | 5.2.9-1 |
| ext/pdo_ibm | UPD | 1.2.3-1 | 1.2.3-4 |
| PEAR | NEW | N/A | 5.2.9-1 |
| ext/pdo_sqlite | NEW | N/A | 5.2.9-1 |
| ext/memcache | NEW | N/A | 5.2.9-1 |
| ext/xmlrpc | NEW | N/A | 5.2.9-1 |
| ext/mssql | NEW | N/A | 5.2.9-1 |
| ext/mssqlsrv | NEW | N/A | 5.2.9-1 |
| ext/pdo_informix | NEW | N/A | 5.2.9-1 |
| lib/expat | NEW | N/A | 2.0.0-1 |
| lib/informix | NEW | N/A | 1.0-1 |