PHP falls down security hole

[mushroom]

Servers running PHP are vulnerable to a number of serious security exploits, including some which could allow an attacker to execute malicious code, as well as denial-of-service exploits, according to the PHP Group.

The project has issued updates fixing the bugs, available from the PHP website and directly from various operating system vendors. "All Users of PHP are strongly encouraged to upgrade to this release," the PHP Group said in its advisory.

PHP, an open-source programming language mainly for server-side applications, runs on server operating systems such as Linux, Unix, Mac OS X and Windows.
Story; http://www.techworld.com/security/news/index.cfm?NewsID=3514

[noppid]

It should be noted that these are a few specific graphics functions that the average php driven site will not have in use.

However, if you use a php based photo/graphics gallery, you should be finding out if any of the three compromised functions are in use in the code you run and have your hosting company update php ASAP.

Without having read the specifics, the exploits seem to be able to be triggered by the server recieving an image. This would be an upload or photo fecth to somewhere remote. I would think that turning off uploads and remote file requests would keep you out of trouble till php is patched.