PHP 5 Upgraded for Security

We’ve updated PHP 5 on our servers to cover sixteen recently identified security issues. This only affects customers who have chosen to use PHP 5 — but since this upgrade only fixes security bugs, even those customers shouldn’t notice any changes.

Read the rest of this entry »

PEAR package updates

The following stable PEAR packages were updated on our hosting servers today:

  • File_SearchReplace: 1.1.1 to 1.1.2
  • Net_UserAgent_Detect: 2.2.0 to 2.3.0
  • PEAR: 1.5.1 to 1.5.3

The full list of PEAR modules we have available (and more details about PEAR) is on this page.

PHP 4 Upgraded for Security

We’ve updated PHP 4 on our servers to cover six recently identified security issues. Users shouldn’t notice any changes.

An upgrade for PHP 5 is also in progress. After testing, we actually rolled out the update onto our servers for a short time, until a customer reported an unusual problem with vBulletin posts getting cut off when they contain an odd number of apostrophes shortly afterward. This problem appears to be related to the update, so we have rolled back to the previous version of PHP 5 while we investigate this. (This kind of thing is very rare: this is the first security update in over year that has caused a problem. We have a suite of “regression tests” that we use to test PHP upgrades, and there wasn’t a general problem with it. We’ll follow up with more details when we know more.)

By the way, if you’re unfamiliar with what we mean by a “security update”, this page will help.