<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://forums.iis.net/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:cs="http://blogs.iis.net/"><channel><title>PHP Community</title><link>http://forums.iis.net/1102.aspx</link><description>A forum for the PHP community running on IIS</description><dc:language>en</dc:language><generator>CommunityServer 2007 SP1 (Build: 20510.895)</generator><item><title>PHP 5.2.9-1 released! cURL security fix</title><link>http://forums.iis.net/thread/1896759.aspx</link><pubDate>Sat, 14 Mar 2009 17:15:57 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1896759</guid><dc:creator>pierrejoye</dc:creator><slash:comments>0</slash:comments><comments>http://forums.iis.net/thread/1896759.aspx</comments><wfw:commentRss>http://forums.iis.net/commentrss.aspx?SectionID=1102&amp;PostID=1896759</wfw:commentRss><description>&lt;p&gt;The PHP Development Team would like to announce the availability of a new Windows build of PHP - PHP 5.2.9-1&lt;/p&gt;&lt;div&gt;
					
				     	&lt;p&gt;This
release focuses on fixing a security flaw introduced by the cURL
library (CVE-2009-0037). Please see the following for a full
description: &lt;a href="http://curl.haxx.se/docs/adv_20090303.html"&gt;http://curl.haxx.se/docs/adv_20090303.html&lt;/a&gt;&lt;/p&gt;
			     		&lt;p&gt;Please note that the affected features are disabled when open_basedir or safe_mode are enabled. &lt;br /&gt;&lt;/p&gt;
		     			&lt;p&gt;Note: Only the Windows packages are affected and no change in PHP sources has been made.&lt;/p&gt;
					&lt;p&gt;Binaries are available in our &lt;a href="http://windows.php.net/download/"&gt;downloads page&lt;/a&gt;&lt;/p&gt;
                                    &lt;/div&gt;</description></item></channel></rss>