"The XSS, or cross-site scripting, vulnerability in Skype 126.96.36.199 is
the result of the voice-over-IP client failing to inspect user-supplied
phone numbers for malicious code, researcher Levent Kayan said. As a
result, attackers might be able to exploit the bug to inject commands or
scripts that hijack the machine running the program.
This release fixes two bugs:
* Fixed - crypt() returns only the salt for MD5
* Reverted a change in timeout handling restoring PHP 5.3.6 behavior,
which caused mysqlnd SSL connections to hang
The first in the list is the security alert sent out a couple of days ago
advising all to hold off on updating PHP.
Please reply back to this ticket if you found this security alert useful.
"IBM researchers have found that it is possible for third party
browser. According to a paper published by the researchers, the
vulnerability exists in Android 2.3.4 and 3.1 and is believed to exist
in earlier versions.