FreeBSD comes with Suhosin-Patch by default

Saturday, October 28. 2006

During the last weeks I was wondering why the download counter for Suhosin-Patch was increasing so fast. Today I most probably learned the reason when I was browsing through the FreeBSD ports. For 3 weeks now Suhosin-Patch is activated in FreeBSD's PHP ports by default.

This means that every FreeBSD user that installs PHP from ports will be Suhosin-Patch protected unless he disables it. Really good news for us and really bad news for Zend, because now they have to fix Zend Optimizer. After my ignored bugreport maybe their users can force them to stop Zend Optimizer from accessing already freed memory.

Posted by Stefan Esser in Security, PHP at 21:25

Comments (2)

Link to this post

Comments

Display comments as (Linear | Threaded)

#1 Jacques Marneweck wrote (Link) ()

Do you have a version of Suhosin-Patch for PHP 5.2.0?

posted on Sunday, October 29. 2006

#1.1 Stefan Esser wrote (Link) ()

Hi Jacques,

because PHP 5.2.0 is not yet final and because there have been changes in parts that get touched by Suhosin-Patch during the last Release Candidates there have been no Patch file released yet.

I am mainly waiting for PHP 5.2.0 final to be released so that I can adjust the patch to apply to the final version.

posted on Sunday, October 29. 2006

Add Comment

Name:

Email:

Homepage:

In reply to:

Comment:
Standard emoticons like :-) and ;-) are converted to images.

Remember Information? Subscribe to this entry
Submitted comments will be subject to moderation before being displayed.

Calendar