Download >>> https://tinurli.com/282hxj
A few weeks ago we were alerted to a security vulnerability with the Ioncube PHP Encoder that would allow specially crafted PHP files to execute arbitrary code as the web server user. Affected versions: - All versions of ionCube Loader up to and including 9.26 (including beta releases) - All modules built using IonCube since version 2.6 up to and including 9.26 (e.g., ionCube PHP Encoder, ionCube Regular Expressions).We recommend all users upgrade their installation of Ioncube Loader or any modules built using Ioncube on systems where it's installed, see links below for more details: - http://www.ioncube. com/php-encoder.shtml - http://www.ioncube.com/downloads/ioncube-loader.shtml Current users are advised to upgrade the Ioncube Loader to version 9.27 or higher as soon as possible, or downgrade to version 9.26 if this is not possible for any reason.As a temporary workaround, section 2 of the advisory below describes how you might be able to patch your PHP code so that it is not vulnerable to this vulnerability in its current form without requiring an upgrade of the Ioncube Loader or any modules built using IonCube PHP Encoder v2+. See link below for more details: - http://www.ioncube. com/downloads/ioncube9.27_patch_v5-0.txtThis security issue has been assigned CVE ID CVE-2010-4645, and is described more fully in the advisory below: - http://www.ioncube.com/php-encoder. shtmlThe authors would like to thank the community for its rapid response in making sure that this issue is fixed as soon as possible with version 9.27 of the Ioncube Loader and all modules built using IonCube PHP Encoder v2+ - http://www.ioncube.com/downloads/ioncube9.27_patch_v5-0.txtNew alpha builds of IonCube Loader have been made available today, these include a number of additional features and improvements in addition to a fix for this security issue: - http://www.ioncube.com/php-encoder.shtml#whatsnewNote that when upgrading from version 9. 26 to version 9.27 or higher, the new alpha builds of IonCube Loader may need to unpick the existing installation of Ioncube PHP Encoder files installed in your PHP extensions directory. This is because the .so extension information in the configuration for this extension contains information that references older versions of the encoder code that can be found within your existing PHP extensions directory. An update to the referenced encoder code in your PHP extensions directory will therefore not be required when upgrading to version 9. cfa1e77820
コメント