月別アーカイブ: 2016年5月

The 4th Annual China PHP Conference

The 4th Annual China PHP Conference – June 25 to 26, Shanghai

We will be hosting a 2-days event filled with high quality, technical sessions about PHP Core, PHP High Performance, PHP Engineering, and PHP more.

Don’t miss out on 2-great days sessions, delicious food, fantastic shows and countless networking opportunities to engage with speakers and delegates.

Go to www.phpconchina.com for tickets and more information.

PHP 5.6.22 is available

The PHP development team announces the immediate availability of PHP 5.6.22. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

For source downloads of PHP 5.6.22 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 5.5.36 is available

The PHP development team announces the immediate availability of PHP 5.5.36. This is a security release. Several security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version.

For source downloads of PHP 5.5.36 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 7.0.7 Released

The PHP development team announces the immediate availability of PHP 7.0.7. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version.

For source downloads of PHP 7.0.7 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

JVN: WPAD と名前衝突の問題

<span style="font-family: Arial, Helvetica, Tahoma, sans-serif; line-height: 16.9px;">Web Proxy Auto-Discovery (WPAD) に関する DNS クエリが社内ネットワークで解決されずに、インターネット上のネームサーバに送られる状況が観測されています。新 gTLD プログラムが開始され新たな gTLD が新設されていることから、WPAD に関する DNS クエリが外部に漏れることで名前衝突の問題が発生する可能性があります。<br /> <br /> 第三者が、関連するドメイン名の登録と WPAD に関する応答を行う環境を用意することにより、中間者攻撃 (Man-In-The-Middle attack) が行われる可能性があります。</span>続きを読む

ConFoo Vancouver 2016 Calling for Papers

We are happy to open the call for papers of ConFoo Vancouver 2016! If you are interested in speaking about PHP or other web development topics, please submit until June 6th. We will cover travel and hotel for the speakers who require it. ConFoo Vancouver will be held on December 5-7, 2016. For those who are familiar with ConFoo Montreal, that conference will still be running annually in addition to Vancouver. Visit our site to learn more about the event. Talks are 35 minutes for the topic and 10 minutes for Q&A, for a total of 45 minutes. We are eagerly expecting your proposals!

JVN: SAP 製品に対する攻撃

世界中で 36 以上の企業が SAP 製品に関する脆弱性の影響を受けていることが報告されています。Onapsis 社の調査により、これらの企業の SAP システムに対して攻撃が行われていることが判明しました。<br /> <br /> これらの攻撃は、SAP NetWeaver Application Server Java システムが提供する Invoker Servlet の脆弱性を使用しています。この脆弱性は、SAP 社が 2010年にすでに対策を提供していますが、対策を適用していない、あるいは設定を正しく行っていないまま運用されているシステムでは、今も本脆弱性の影響を受ける可能性があります。続きを読む

JVN: EC-CUBE 用プラグイン「ソーシャルボタン設置プラグイン -プレミアム-」および「ソーシャルボタン設置プラグイン」におけるクロスサイトスクリプティングの脆弱性

EC-CUBE 用プラグイン「ソーシャルボタン設置プラグイン -プレミアム-」および「ソーシャルボタン設置プラグイン」には、クロスサイトスクリプティングの脆弱性が存在します。続きを読む

Announcing PHPConf.Asia 2016. CFP Opens Now!

Announcing PHPConf.Asia 2016 - The Pan-Asian PHP Conference - CFP Opens Now

The second pan-Asian PHP conference will take place between 22nd and 24th August 2016 in Singapore - the Garden City of the East! Monday, 22nd August 2016 will be a Tutorial day. Followed by 2 days of Conference.

Come and meet with the fastest growing PHP communities in Asia. More than 300 attendees are expected in this single track conference.

CFP Opens Now!. Hop over to http://2016.phpconf.asia for more details.