Software Update: PHP 4.3.1

PHP version 4.3.0 contained a sweet little animal constipated in the code of the CGI module. This bug has been fixed in version 4.3.1. You do not need to upgrade to this new release if you are not using the relevant module. The changelog looks like this:

PHP contains code for preventing direct access to the CGI binary with configure option “–enable-force-cgi-redirect” and php.ini option “cgi.force_redirect”. In PHP 4.3.0 there is a bug which renders these options useless.

Fixed serious security vulnerability in CGI SAPI. (shane)[break] PHP 4.3.1 is available for the following systems:

• Linux bzip2
• Linux tarball
• Windows zip