PHP 5.3.9

[vedaadvantage]

Our security team ran a check on our php site and found PHP version 5.3.8. This caused the test to fail because of vulnerabilities in version 5.3.8. They suggest I upgrade PHP to version 5.3.9.
I loaded the latest version of Zend Server and applied the latest hotfix, but I'm still on PHP 5.3.8.

So is their a Zend Server for IBM i that supports PHP 5.3.9 or does the vulnerabilities in PHP 5.3.8 not affect the IBM i version of Zend Server?

[erich_hieden]

There's no build for IBM i with PHP 5.3.9

The exploit targeted in the latest Hotfix didn't apply to IBM i as well. But I can't say anything on the other exploits targeted in PHP 5.3.9

[aseiden]

Martin/Erich is correct. The vulnerability in 5.3.8 did not affect IBM i. What's more, the fix in 5.3.9 introduced a new flaw that has now been corrected in 5.3.10. http://www.phpclasses.org/blog/post/175 ... P-539.html

Luckily, we on IBM i were never affected by the flaw, or the flawed fix.

[vedaadvantage]

Thanks for the replies. I will relay this to our security team and tell them to chill out.