PHP 5.2.2 and PHP 4.4.7 Released

The PHP development team would like to announce the immediate availability of PHP 5.2.2 and availability of PHP 4.4.7. These releases are major stability and security enhancements of the 5.x and 4.4.x branches, and all users are strongly encouraged to upgrade to it as soon as possible. Further details about the PHP 5.2.2 release can be found in the release announcement for 5.2.2, the full list of changes is available in the ChangeLog for PHP 5. Details about the PHP 4.4.7 release can be found in the release announcement for 4.4.7, the full list of changes is available in the ChangeLog for PHP 4.

Security Enhancements and Fixes in PHP 5.2.2 and PHP 4.4.7:

* Fixed CVE-2007-1001, GD wbmp used with invalid image size (by Ivan Fratric)
* Fixed asciiz byte truncation inside mail() (MOPB-33 by Stefan Esser)
* Fixed a bug in mb_parse_str() that can be used to activate register_globals (MOPB-26 by Stefan Esser)
* Fixed unallocated memory access/double free in in array_user_key_compare() (MOPB-24 by Stefan Esser)
* Fixed a double free inside session_regenerate_id() (MOPB-22 by Stefan Esser)
* Added missing open_basedir & safe_mode checks to zip:// and bzip:// wrappers. (MOPB-21 by Stefan Esser).
* Limit nesting level of input variables with max_input_nesting_level as fix for (MOPB-03 by Stefan Esser)
* Fixed CRLF injection inside ftp_putcmd(). (by loveshell[at]Bug.Center.Team)
* Fixed a possible super-global overwrite inside import_request_variables(). (by Stefano Di Paola, Stefan Esser)
* Fixed a remotely trigger-able buffer overflow inside bundled libxmlrpc library. (by Stanislav Malyshev)

Ref : PHP.net

KNOPPIX - FROM ZERO TO LINUX IN 5 MINUTES

What is KNOPPIX?

KNOPPIX is a bootable CD with a collection of GNU/Linux software, automatic hardware detection, and support for many graphics cards, sound cards, SCSI and USB devices and other peripherals. KNOPPIX can be used as a Linux demo, educational CD, rescue system, or adapted and used as a platform for commercial software product demos. It is not necessary to install anything on a hard disk. Due to on-the-fly decompression, the CD can have up to 2 GB of executable software installed on it.

What software is installed on the KNOPPIX-CD?

The following Highlights are available in this Debian-based (www.debian.org) CD:

* Linux-Kernel 2.4.x and 2.6.x
* KDE as the standard desktop with K Office and the Konqueror WWW-browser konqueror
* X Multimedia System (xmms) an MPEG-video, MP3, Ogg Vorbis Audio player and xine
* Internet connection software kppp,pppoeconf (DSL) and isdn-config
* Gnu Image Manipulation Program (GIMP)
* utilities for data recovery and system repairs, even for other operating systems
* network and security analysis tools for network administrators
* OpenOffice(TM), the GPL-developed version of the well-known StarOffice(TM) office suite
* many programming languages, development tools (including kdevelop) and libraries for developers
* in total more than 900 installed software packages with over 2000 executable user programs, utilities, and games


For more information, see Klaus Knopper's Knoppix Page, and the Knoppix page at DistroWatch.com.