XAMPP released updated , official support for all the latest platform release a new version of XAMPP PHP series, including PHP 7.2.29,7.3.16 and 7.4.4.
This release resolves Maximilian Barz report security issues CVE-2020-11107 in the Windows Platforms. Lower than 7.2.29,7.3.16 and 7.4.4 of XAMPP Windows version allows non-privileged users to access and modify its editor and browser configuration. An attacker could modify the "xampp-contol.ini", set it to a value of malicious .exe or .bat file, the file will attempt to execute a file is opened by other users at the control panel. This issue does not affect Linux or OS X platform.
Users can from http://www.apachefriends.org/download.html download the new installer.
Package contains the following components:
7.2.29-0 / 7.3.16-0 / 7.4.4-0
- PHP 7.2.29，7.3.16，7.4.4
- Apache 2.4.41
- MariaDB 10.4.11
- Perl 5.16.3
- OpenSSL 1.1.1e（UNIX only）
- phpMyAdmin 5.0.2
XAMPP is a popular PHP development environment, Apache release is an easy to install, which contains MariaDB, PHP and Perl. Only need to download and install the program to start, is that simple.