From: "Paul Smedley" Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTPS id 3303264 for ecs-isp@2rosenthals.com; Tue, 22 Feb 2022 15:17:34 -0500 Received: from secmgr-va.2rosenthals.com ([50.73.8.217]:60225 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1nMbbD-0000UL-2R for ecs-isp@2rosenthals.com; Tue, 22 Feb 2022 15:17:28 -0500 Received: from sender-op-o11.zoho.com.au ([103.138.129.1]:17155) by mail2.2rosenthals.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1nMbbA-0005ew-1R for ecs-isp@2rosenthals.com; Tue, 22 Feb 2022 15:17:25 -0500 ARC-Seal: i=1; a=rsa-sha256; t=1645561038; cv=none; d=zohomail.com.au; s=zohoarc; b=to/q4UoPLgurJCg0XwFPIVy1b0S8t9gsoAJfyTYWnlRbJ/UBgJvab3BZWm4nndlytW6DEbN/YHKLS0n+BpXTRwug8a+z402Lxc2HEaPutLPmz4SBWTHapVPA/9Ub/ZC3QVAJWbK1KLIi7CdSdLga3oAXmnvZHpV5xqBGrCEtNNw= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com.au; s=zohoarc; t=1645561038; h=Content-Type:Content-Transfer-Encoding:Date:From:MIME-Version:Message-ID:Subject:To; bh=+bOMDUw9ZPE8fgiGM42TmJ1kazJIyfg+Ak4YqPjeQAU=; b=VA15AmTfXv4sWaKVet6o7u25baBUGhRH7q5Bae3tLye88e6xCukFhrZO4zuk4BnOxXm0Co74WxyruBoBSBp5fsyTRtvNY6X9+74TWh0XF4xJl00kVlF+99zTKKAYypPXKhwcIh+Jz2NXTuibR9ApPQc7+YhStEbeWlBD8d/xtC0= ARC-Authentication-Results: i=1; mx.zohomail.com.au; dkim=pass header.i=smedley.id.au; spf=pass smtp.mailfrom=paul@smedley.id.au; dmarc=pass header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1645561038; s=zmail; d=smedley.id.au; i=paul@smedley.id.au; h=Message-ID:Date:MIME-Version:To:From:Subject:Content-Type:Content-Transfer-Encoding; bh=+bOMDUw9ZPE8fgiGM42TmJ1kazJIyfg+Ak4YqPjeQAU=; b=KVCSwgzOlWfizwo3xkCsk0kfUA8OVbU8JbRjcHy9ofarHZ9vaL0qKMakcz0OipRc WipdVbhUmzKmMWGvzNrLgYr7xfZ2+mdzaNrogYYKzvuAml7Eoxesgigh6wDsotvkdyM A95fj8WwdwbT/UebLAMqjAwFQ53ggU8qxCCPrp0o= Received: from [192.168.1.159] (61-245-148-167.3df594.adl.nbn.aussiebb.net [61.245.148.167]) by mx.zoho.com.au with SMTPS id 1645561038254281.41253494950104; Wed, 23 Feb 2022 07:17:18 +1100 (AEDT) Message-ID: Date: Wed, 23 Feb 2022 06:47:17 +1030 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.5.0 Content-Language: en-AU To: eCS ISP Mailing List , Apache HTTP Server for OS/2 Subject: PHP Security Releases Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hey guys, I notice that new security fixes for PHP were released last week. Details at: https://nakedsecurity.sophos.com/2022/02/18/irony-alert-php-fixes-security-flaw-in-input-validation-code/ OS/2 builds: https://smedley.id.au/tmp/php-7.4.28-os2-20220223.zip https://smedley.id.au/tmp/php-8.0.16-os2-20220223.zip https://smedley.id.au/tmp/php-8.1.3-os2-20220223.zip Other fixes since 7.4.27/8.0.15/8.1.2 are: - gd now supports jpg & freetype (and in theory, webp) - binary uploads are now working I still need to investigate David's crashes with 8.1.x, and I think there was also a request for some additional modules. Cheers, Paul