From: "Paul Smedley" <ecs-isp@2rosenthals.com>
Received: from [192.168.100.201] (HELO mail.2rosenthals.com)
  by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10)
  with ESMTPS id 3303264 for ecs-isp@2rosenthals.com; Tue, 22 Feb 2022 15:17:34 -0500
Received: from secmgr-va.2rosenthals.com ([50.73.8.217]:60225 helo=mail2.2rosenthals.com)
	by mail.2rosenthals.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <paul@smedley.id.au>)
	id 1nMbbD-0000UL-2R
	for ecs-isp@2rosenthals.com; Tue, 22 Feb 2022 15:17:28 -0500
Received: from sender-op-o11.zoho.com.au ([103.138.129.1]:17155)
	by mail2.2rosenthals.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <paul@smedley.id.au>)
	id 1nMbbA-0005ew-1R
	for ecs-isp@2rosenthals.com; Tue, 22 Feb 2022 15:17:25 -0500
ARC-Seal: i=1; a=rsa-sha256; t=1645561038; cv=none; 
	d=zohomail.com.au; s=zohoarc; 
	b=to/q4UoPLgurJCg0XwFPIVy1b0S8t9gsoAJfyTYWnlRbJ/UBgJvab3BZWm4nndlytW6DEbN/YHKLS0n+BpXTRwug8a+z402Lxc2HEaPutLPmz4SBWTHapVPA/9Ub/ZC3QVAJWbK1KLIi7CdSdLga3oAXmnvZHpV5xqBGrCEtNNw=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com.au; s=zohoarc; 
	t=1645561038; h=Content-Type:Content-Transfer-Encoding:Date:From:MIME-Version:Message-ID:Subject:To; 
	bh=+bOMDUw9ZPE8fgiGM42TmJ1kazJIyfg+Ak4YqPjeQAU=; 
	b=VA15AmTfXv4sWaKVet6o7u25baBUGhRH7q5Bae3tLye88e6xCukFhrZO4zuk4BnOxXm0Co74WxyruBoBSBp5fsyTRtvNY6X9+74TWh0XF4xJl00kVlF+99zTKKAYypPXKhwcIh+Jz2NXTuibR9ApPQc7+YhStEbeWlBD8d/xtC0=
ARC-Authentication-Results: i=1; mx.zohomail.com.au;
	dkim=pass  header.i=smedley.id.au;
	spf=pass  smtp.mailfrom=paul@smedley.id.au;
	dmarc=pass header.from=<paul@smedley.id.au>
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1645561038;
	s=zmail; d=smedley.id.au; i=paul@smedley.id.au;
	h=Message-ID:Date:MIME-Version:To:From:Subject:Content-Type:Content-Transfer-Encoding;
	bh=+bOMDUw9ZPE8fgiGM42TmJ1kazJIyfg+Ak4YqPjeQAU=;
	b=KVCSwgzOlWfizwo3xkCsk0kfUA8OVbU8JbRjcHy9ofarHZ9vaL0qKMakcz0OipRc
	WipdVbhUmzKmMWGvzNrLgYr7xfZ2+mdzaNrogYYKzvuAml7Eoxesgigh6wDsotvkdyM
	A95fj8WwdwbT/UebLAMqjAwFQ53ggU8qxCCPrp0o=
Received: from [192.168.1.159] (61-245-148-167.3df594.adl.nbn.aussiebb.net [61.245.148.167]) by mx.zoho.com.au
	with SMTPS id 1645561038254281.41253494950104; Wed, 23 Feb 2022 07:17:18 +1100 (AEDT)
Message-ID: <c9832de1-4a79-55b7-e644-fecb6f169a74@smedley.id.au>
Date: Wed, 23 Feb 2022 06:47:17 +1030
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
 Thunderbird/91.5.0
Content-Language: en-AU
To: eCS ISP Mailing List <ecs-isp@2rosenthals.com>,
 Apache HTTP Server for OS/2 <apache2@googlegroups.com>
Subject: PHP Security Releases
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit


Hey guys,

I notice that new security fixes for PHP were released last week.

Details at: 
https://nakedsecurity.sophos.com/2022/02/18/irony-alert-php-fixes-security-flaw-in-input-validation-code/

OS/2 builds:
https://smedley.id.au/tmp/php-7.4.28-os2-20220223.zip
https://smedley.id.au/tmp/php-8.0.16-os2-20220223.zip
https://smedley.id.au/tmp/php-8.1.3-os2-20220223.zip

Other fixes since 7.4.27/8.0.15/8.1.2 are:
- gd now supports jpg & freetype (and in theory, webp)
- binary uploads are now working

I still need to investigate David's crashes with 8.1.x, and I think 
there was also a request for some additional modules.

Cheers,

Paul