Modified: web/php/trunk/ChangeLog-5.php =================================================================== --- web/php/trunk/ChangeLog-5.php 2010-01-27 19:45:03 UTC (rev 294116) +++ web/php/trunk/ChangeLog-5.php 2010-01-27 19:45:53 UTC (rev 294117) @@ -178,185 +178,6 @@ - -

Version 5.2.12

-17-December-2009 -

Security Fixes -
- Fixed a safe_mode bypass in tempnam() identified by Grzegorz Stachowiak. (Rasmus)
- Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz Stachowiak. (Rasmus)
- Added "max_file_uploads" INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion. (Ilia)
- Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check, identified by Stefan Esser. (Stas)
- (insufficient input string validation of htmlspecialchars()). (Moriyoshi, hello at iwamot dot com)
-
Updated timezone database to version 2009.19 (2009s). (Derick)
Added LIBXML_PARSEHUGE constant to overrides the maximum text size of a single text node when using libxml2.7.3+. (Kalle)
Changed "post_max_size" php.ini directive to allow unlimited post size by setting it to 0. (Rasmus)
Fixed error_log() to be binary safe when using message_type 3. (Jani)
Fixed unnecessary invocation of setitimer when timeouts have been disabled. (Arvind Srinivasan)
Fixed crash in com_print_typeinfo when an invalid typelib is given. (Pierre)
Fixed crash in SQLiteDatabase::ArrayQuery() and SQLiteDatabase::SingleQuery() when calling using Reflection. (Felipe)
Fixed crash when instantiating PDORow and PDOStatement through Reflection. (Felipe)
Fixed memory leak in openssl_pkcs12_export_to_file(). (Felipe)
(PDO-ODBC stored procedure call from Solaris 64-bit causes seg fault). (davbrown4 at yahoo dot com, Felipe)
(nanosleep not detected properly on some solaris versions). (Jani)
(Allow use of ; in values via ;; in PDO DSN). (Ilia, Pierrick)
(xmlrpc does not preserve keys in encoded indexed arrays). (Felipe)
(xmlrpc_encode_request() changes object into array in calling function). (Felipe)
(conflicting types for llabs). (Jani)
(isset() and empty() silently casts array to object). (Felipe)
(soap call Segmentation fault on a redirected url). (Pierrick)
(Compiling with libedit cannot find readline.h). (tcallawa at redhat dot com)
(segmentation fault when concatenating very large strings on 64bit linux). (Ilia)
(pg_copy_to() fails when table name contains schema. (Ilia)
(ldap_get_entries() return false instead of an empty array when there is no error). (Jani)
(Incorrectly matched docComment). (Felipe)
(FastCGI fails with wrong error on HEAD request to non-existent file). (Dmitry)
(Memory leak when fetching timestamp column from Oracle database). (Felipe)
(FILTER_VALIDATE_EMAIL fails with valid addresses containing = or ?). (Pierrick)
(parse_url() incorrect when ? in fragment). (Ilia)
(Segfault caused by uksort()). (Felipe)
(Throwing through Reflection modified Exception object makes segmentation fault). (Felipe)
(SNMP3 warning message about security level printed twice). (Jani)
(pdo_pgsql prepare() re-use previous aborted transaction). (ben dot pineau at gmail dot com, Ilia, Matteo)
(AppendIterator undefined function crash). (Johannes)
(Curl post upload functions changed). (Ilia)
(import_request_variables() always returns NULL). (Ilia, sjoerd at php dot net)
(exec() fails to return data inside 2nd parameter, given output lines >4095 bytes). (Ilia)
(time_sleep_until() is not available on OpenSolaris). (Jani)
(long2ip() can return wrong value in a multi-threaded applications). (Ilia, Florian Anderiasch)
(calling mcrypt() after mcrypt_generic_deinit() crashes). (Sriram Natarajan)
(ReflectionClass::hasProperty returns true for a private property in base class). (Felipe)
(Unexpected change in strnatcasecmp()). (Rasmus)
(ini parser crashes with apache2 and using ${something} ini variables). (Jani)
(libxml 2.7.3+ limits text nodes to 10MB). (Felipe)
(DOMUserData does not exist). (Rob)
(imap_listscan() function missing). (Felipe)
(error_log to specified file does not log time according to date.timezone). (Dmitry)
(make install-pear fails). (Hannes)
(mb_detect_encoding() returns incorrect results when mbstring.strict_mode is turned on). (Moriyoshi)
(CURLOPT_INFILESIZE sometimes causes warning "CURLPROTO_FILE cannot be set"). (Felipe)
(UTF-16 strings prefixed by BOMs wrongly converted). (Moriyoshi)
(PDO fetchObject sets values before calling constructor). (Pierrick)
(cURL's CURLOPT_FILE prevents file from being deleted after fclose()). (Ilia)
(Constants defined in Interfaces can be overridden). (Felipe)
(mb_strcut() cuts wrong length when offset is in the middle of a multibyte character). (Moriyoshi)
(Build error with Snow Leopard). (Scott)
(Floating point NaN cause garbage characters). (Sjoerd)
(crash when extending PDOStatement and trying to set queryString property). (Felipe)
(mysqli segfault on error). (Rasmus)
(IPv6 socket transport is not working). (Ilia)
(PDO_pgsql::query() always uses implicit prepared statements if v3 proto available). (Matteo, Mark Kirkwood)
(importNode doesn't preserve attribute namespaces). (Rob)
(PDOStatement->execute() returns true then false for same statement). (Pierrick)
(Failure in odbc_exec() using oracle-supplied odbc driver). (tim dot tassonis at trivadis dot com)

- - - - -

Version 5.2.11

-16-September-2009 -

Security Fixes -
- Fixed certificate validation inside php_openssl_apply_verification_policy. (Ryan Sleevi, Ilia)
- Added missing sanity checks around exif processing. (Ilia)
- Fixed sanity check for the color index in imagecolortransparent. (Pierre)
- (popen crashes when an invalid mode is passed). (Pierre)
-
Updated timezone database to version 2009.13 (2009m) (Derick)
Fixed zlib.deflate compress filter to actually accept level parameter. (Jani)
Fixed leak on error in popen/exec (and related functions) on Windows. (Pierre)
Fixed regression in cURL extension that prevented flush of data to output defined as a file handle. (Ilia)
Fixed memory leak in stream_is_local(). (Felipe, Tony)
(FILTER_SANITIZE_EMAIL allows disallowed characters). (Ilia)
(php engine needs to correctly check for socket API return status on windows). (Sriram Natarajan)
(segfault in php_curl_option_curl). (Pierre)
(wordwrap() wraps incorrectly on end of line boundaries). (Ilia, code-it at mail dot ru)
(bcmath module doesn't compile with phpize configure). (Jani)
(php://input (php_stream_input_read) is broken). (Jani)
(Ternary operator fails on Iterator object when used inside foreach declaration). (Etienne, Dmitry)
(Missing PHP_SUBST(PDO_MYSQL_SHARED_LIBADD)). (Jani)
(Import of schema from different host transmits original authentication details). (Dmitry)
(posix_times returns false without error). (phpbugs at gunnu dot us)
(Error in dba_exists C code). (jdornan at stanford dot edu)
(proc_get_status['exitcode'] fails on win32). (Felipe)
(private class static fields can be modified by using reflection). (Jani)
(feof never returns true for damaged file in zip). (Pierre)
(context option headers freed too early when using --with-curlwrappers). (Jani)
(SplFileObject::fscanf() variables passed by reference). (Jani)
(proc_open() can bypass safe_mode_protected_env_vars restrictions). (Ilia)
(PHP CLI in Interactive mode (php -a) crashes when including files from function). (Stas)
(zlib.output_compression does not output HTTP headers when set to a string value). (Jani)
(Crash when compiling with pdo_firebird). (Felipe)
(cURL does not upload files with specified filename). (Ilia)
(Double \r\n after HTTP headers when "header" context option is an array). (David Zülke)
(Too long error code strings in pdo_odbc driver). (naf at altlinux dot ru, Felipe)
(printf() returns incorrect outputted length). (Jani)
(Problem with imagettfbbox). (Takeshi Abe)
(RecursiveDirectoryIterator doesn't descend into symlinked directories). (Ilia)
(SIGSEGVs when using curl_copy_handle()). (Sriram Natarajan)
(ZipArchive produces corrupt archive). (dani dot church at gmail dot com, Pierre)
(IPv6 address filter still rejects valid address). (Felipe)
(CURLOPT_WRITEHEADER|CURLOPT_FILE|CURLOPT_STDERR warns on files that have been opened with r+). (Ilia)
(TTF Bounding box wrong for letters below baseline). (Takeshi Abe)
(FILTER_VALIDATE_EMAIL does not allow numbers in domain components). (Ilia)
(metaphone and 'wh'). (brettz9 at yahoo dot com, Felipe)
(mb_internal_encoding() value gets reset by parse_str()). (Moriyoshi)
(ldap_read() segfaults with invalid parameters). (Felipe)
(Double declaration of __lambda_func when lambda wrongly formatted). (peter at lvp-media dot com, Felipe)
(phpize is broken with non-bash shells). (Jani)
(mb_convert_encoding() doesn't understand hexadecimal html-entities). (Moriyoshi)
("file" fopen wrapper is overwritten when using --with-curlwrappers). (Jani)
(Error compiling of ext/date on netware). (guenter at php.net, Ilia)
(get_defined_constants() ignores categorize parameter). (Felipe)
(imap_search ALL segfaults). (Pierre)
(Invalid libreadline version not detected during configure). (Jani)
(ImageFTBBox() differs from previous versions for texts with new lines) (Takeshi Abe)
(pdo_dblib fails to connect, throws empty PDOException "SQLSTATE[] (null)"). (Felipe)
(sys_get_temp_dir() possibly inconsistent when using TMPDIR). (Ilia)
(Compile failure under IRIX 6.5.30 building gd.c). (Kalle)
(imap crashes when closing stream opened with OP_PROTOTYPE flag). (Jani)
(hash "adler32" byte order is reversed). (Scott)
(date("Y") on big endian machines produces the wrong result). (Scott)
(Infinite loop and possible crash during startup with errors when errors are logged). (Jani)
(ssl handshake fails during asynchronous socket connection). (Sriram Natarajan)
(Fixed build with Openssl 1.0). (Pierre, Al dot Smith at aeschi dot ch dot eu dot org)
(pdo_pgsql - large objects are returned as empty). (Matteo)
(Only the date fields of the first row are fetched, others are empty). (info at programmiernutte dot net)
(natcasesort() does not sort extended ASCII characters correctly). (Herman Radtke)
(Memory leak in DateTime). (Derick, Tobias John)
(Encoding bug in SoapServer->fault). (Dmitry)
(with Sun Java System Web Server 7.0 on HPUX, #define HPUX). (Uwe Schindler)
(imagefilledrectangle() clipping error). (markril at hotmail dot com, Pierre)
(Reflection of instantiated COM classes causes PHP to crash) (Paul Richards, Kalle)
(setcookie will output expires years of >4 digits). (Ilia)
(spl_autoload_functions() should return object instance when appropriate). (Hannes, Etienne)
(stream_get_meta_data() does not return same mode as used in fopen). (Jani)
(ImageLine w/ antialias = 1px shorter). (wojjie at gmail dot com, Kalle)
(Sent incorrect RCPT TO commands to SMTP server) (Garrett) - -

- -

- - -

Version 5.3.0

30-June-2009 @@ -1073,6 +894,185 @@ + +

Version 5.2.12

+17-December-2009 +

Security Fixes +
- Fixed a safe_mode bypass in tempnam() identified by Grzegorz Stachowiak. (Rasmus)
- Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz Stachowiak. (Rasmus)
- Added "max_file_uploads" INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion. (Ilia)
- Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check, identified by Stefan Esser. (Stas)
- (insufficient input string validation of htmlspecialchars()). (Moriyoshi, hello at iwamot dot com)
+
Updated timezone database to version 2009.19 (2009s). (Derick)
Added LIBXML_PARSEHUGE constant to overrides the maximum text size of a single text node when using libxml2.7.3+. (Kalle)
Changed "post_max_size" php.ini directive to allow unlimited post size by setting it to 0. (Rasmus)
Fixed error_log() to be binary safe when using message_type 3. (Jani)
Fixed unnecessary invocation of setitimer when timeouts have been disabled. (Arvind Srinivasan)
Fixed crash in com_print_typeinfo when an invalid typelib is given. (Pierre)
Fixed crash in SQLiteDatabase::ArrayQuery() and SQLiteDatabase::SingleQuery() when calling using Reflection. (Felipe)
Fixed crash when instantiating PDORow and PDOStatement through Reflection. (Felipe)
Fixed memory leak in openssl_pkcs12_export_to_file(). (Felipe)
(PDO-ODBC stored procedure call from Solaris 64-bit causes seg fault). (davbrown4 at yahoo dot com, Felipe)
(nanosleep not detected properly on some solaris versions). (Jani)
(Allow use of ; in values via ;; in PDO DSN). (Ilia, Pierrick)
(xmlrpc does not preserve keys in encoded indexed arrays). (Felipe)
(xmlrpc_encode_request() changes object into array in calling function). (Felipe)
(conflicting types for llabs). (Jani)
(isset() and empty() silently casts array to object). (Felipe)
(soap call Segmentation fault on a redirected url). (Pierrick)
(Compiling with libedit cannot find readline.h). (tcallawa at redhat dot com)
(segmentation fault when concatenating very large strings on 64bit linux). (Ilia)
(pg_copy_to() fails when table name contains schema. (Ilia)
(ldap_get_entries() return false instead of an empty array when there is no error). (Jani)
(Incorrectly matched docComment). (Felipe)
(FastCGI fails with wrong error on HEAD request to non-existent file). (Dmitry)
(Memory leak when fetching timestamp column from Oracle database). (Felipe)
(FILTER_VALIDATE_EMAIL fails with valid addresses containing = or ?). (Pierrick)
(parse_url() incorrect when ? in fragment). (Ilia)
(Segfault caused by uksort()). (Felipe)
(Throwing through Reflection modified Exception object makes segmentation fault). (Felipe)
(SNMP3 warning message about security level printed twice). (Jani)
(pdo_pgsql prepare() re-use previous aborted transaction). (ben dot pineau at gmail dot com, Ilia, Matteo)
(AppendIterator undefined function crash). (Johannes)
(Curl post upload functions changed). (Ilia)
(import_request_variables() always returns NULL). (Ilia, sjoerd at php dot net)
(exec() fails to return data inside 2nd parameter, given output lines >4095 bytes). (Ilia)
(time_sleep_until() is not available on OpenSolaris). (Jani)
(long2ip() can return wrong value in a multi-threaded applications). (Ilia, Florian Anderiasch)
(calling mcrypt() after mcrypt_generic_deinit() crashes). (Sriram Natarajan)
(ReflectionClass::hasProperty returns true for a private property in base class). (Felipe)
(Unexpected change in strnatcasecmp()). (Rasmus)
(ini parser crashes with apache2 and using ${something} ini variables). (Jani)
(libxml 2.7.3+ limits text nodes to 10MB). (Felipe)
(DOMUserData does not exist). (Rob)
(imap_listscan() function missing). (Felipe)
(error_log to specified file does not log time according to date.timezone). (Dmitry)
(make install-pear fails). (Hannes)
(mb_detect_encoding() returns incorrect results when mbstring.strict_mode is turned on). (Moriyoshi)
(CURLOPT_INFILESIZE sometimes causes warning "CURLPROTO_FILE cannot be set"). (Felipe)
(UTF-16 strings prefixed by BOMs wrongly converted). (Moriyoshi)
(PDO fetchObject sets values before calling constructor). (Pierrick)
(cURL's CURLOPT_FILE prevents file from being deleted after fclose()). (Ilia)
(Constants defined in Interfaces can be overridden). (Felipe)
(mb_strcut() cuts wrong length when offset is in the middle of a multibyte character). (Moriyoshi)
(Build error with Snow Leopard). (Scott)
(Floating point NaN cause garbage characters). (Sjoerd)
(crash when extending PDOStatement and trying to set queryString property). (Felipe)
(mysqli segfault on error). (Rasmus)
(IPv6 socket transport is not working). (Ilia)
(PDO_pgsql::query() always uses implicit prepared statements if v3 proto available). (Matteo, Mark Kirkwood)
(importNode doesn't preserve attribute namespaces). (Rob)
(PDOStatement->execute() returns true then false for same statement). (Pierrick)
(Failure in odbc_exec() using oracle-supplied odbc driver). (tim dot tassonis at trivadis dot com)

+ + + + +

Version 5.2.11

+16-September-2009 +

Security Fixes +
- Fixed certificate validation inside php_openssl_apply_verification_policy. (Ryan Sleevi, Ilia)
- Added missing sanity checks around exif processing. (Ilia)
- Fixed sanity check for the color index in imagecolortransparent. (Pierre)
- (popen crashes when an invalid mode is passed). (Pierre)
+
Updated timezone database to version 2009.13 (2009m) (Derick)
Fixed zlib.deflate compress filter to actually accept level parameter. (Jani)
Fixed leak on error in popen/exec (and related functions) on Windows. (Pierre)
Fixed regression in cURL extension that prevented flush of data to output defined as a file handle. (Ilia)
Fixed memory leak in stream_is_local(). (Felipe, Tony)
(FILTER_SANITIZE_EMAIL allows disallowed characters). (Ilia)
(php engine needs to correctly check for socket API return status on windows). (Sriram Natarajan)
(segfault in php_curl_option_curl). (Pierre)
(wordwrap() wraps incorrectly on end of line boundaries). (Ilia, code-it at mail dot ru)
(bcmath module doesn't compile with phpize configure). (Jani)
(php://input (php_stream_input_read) is broken). (Jani)
(Ternary operator fails on Iterator object when used inside foreach declaration). (Etienne, Dmitry)
(Missing PHP_SUBST(PDO_MYSQL_SHARED_LIBADD)). (Jani)
(Import of schema from different host transmits original authentication details). (Dmitry)
(posix_times returns false without error). (phpbugs at gunnu dot us)
(Error in dba_exists C code). (jdornan at stanford dot edu)
(proc_get_status['exitcode'] fails on win32). (Felipe)
(private class static fields can be modified by using reflection). (Jani)
(feof never returns true for damaged file in zip). (Pierre)
(context option headers freed too early when using --with-curlwrappers). (Jani)
(SplFileObject::fscanf() variables passed by reference). (Jani)
(proc_open() can bypass safe_mode_protected_env_vars restrictions). (Ilia)
(PHP CLI in Interactive mode (php -a) crashes when including files from function). (Stas)
(zlib.output_compression does not output HTTP headers when set to a string value). (Jani)
(Crash when compiling with pdo_firebird). (Felipe)
(cURL does not upload files with specified filename). (Ilia)
(Double \r\n after HTTP headers when "header" context option is an array). (David Zülke)
(Too long error code strings in pdo_odbc driver). (naf at altlinux dot ru, Felipe)
(printf() returns incorrect outputted length). (Jani)
(Problem with imagettfbbox). (Takeshi Abe)
(RecursiveDirectoryIterator doesn't descend into symlinked directories). (Ilia)
(SIGSEGVs when using curl_copy_handle()). (Sriram Natarajan)
(ZipArchive produces corrupt archive). (dani dot church at gmail dot com, Pierre)
(IPv6 address filter still rejects valid address). (Felipe)
(CURLOPT_WRITEHEADER|CURLOPT_FILE|CURLOPT_STDERR warns on files that have been opened with r+). (Ilia)
(TTF Bounding box wrong for letters below baseline). (Takeshi Abe)
(FILTER_VALIDATE_EMAIL does not allow numbers in domain components). (Ilia)
(metaphone and 'wh'). (brettz9 at yahoo dot com, Felipe)
(mb_internal_encoding() value gets reset by parse_str()). (Moriyoshi)
(ldap_read() segfaults with invalid parameters). (Felipe)
(Double declaration of __lambda_func when lambda wrongly formatted). (peter at lvp-media dot com, Felipe)
(phpize is broken with non-bash shells). (Jani)
(mb_convert_encoding() doesn't understand hexadecimal html-entities). (Moriyoshi)
("file" fopen wrapper is overwritten when using --with-curlwrappers). (Jani)
(Error compiling of ext/date on netware). (guenter at php.net, Ilia)
(get_defined_constants() ignores categorize parameter). (Felipe)
(imap_search ALL segfaults). (Pierre)
(Invalid libreadline version not detected during configure). (Jani)
(ImageFTBBox() differs from previous versions for texts with new lines) (Takeshi Abe)
(pdo_dblib fails to connect, throws empty PDOException "SQLSTATE[] (null)"). (Felipe)
(sys_get_temp_dir() possibly inconsistent when using TMPDIR). (Ilia)
(Compile failure under IRIX 6.5.30 building gd.c). (Kalle)
(imap crashes when closing stream opened with OP_PROTOTYPE flag). (Jani)
(hash "adler32" byte order is reversed). (Scott)
(date("Y") on big endian machines produces the wrong result). (Scott)
(Infinite loop and possible crash during startup with errors when errors are logged). (Jani)
(ssl handshake fails during asynchronous socket connection). (Sriram Natarajan)
(Fixed build with Openssl 1.0). (Pierre, Al dot Smith at aeschi dot ch dot eu dot org)
(pdo_pgsql - large objects are returned as empty). (Matteo)
(Only the date fields of the first row are fetched, others are empty). (info at programmiernutte dot net)
(natcasesort() does not sort extended ASCII characters correctly). (Herman Radtke)
(Memory leak in DateTime). (Derick, Tobias John)
(Encoding bug in SoapServer->fault). (Dmitry)
(with Sun Java System Web Server 7.0 on HPUX, #define HPUX). (Uwe Schindler)
(imagefilledrectangle() clipping error). (markril at hotmail dot com, Pierre)
(Reflection of instantiated COM classes causes PHP to crash) (Paul Richards, Kalle)
(setcookie will output expires years of >4 digits). (Ilia)
(spl_autoload_functions() should return object instance when appropriate). (Hannes, Etienne)
(stream_get_meta_data() does not return same mode as used in fopen). (Jani)
(ImageLine w/ antialias = 1px shorter). (wojjie at gmail dot com, Kalle)
(Sent incorrect RCPT TO commands to SMTP server) (Garrett) + +

+ +

+ + +

Version 5.2.10

18-June-2009