Modified: web/php/trunk/ChangeLog-5.php
===================================================================
--- web/php/trunk/ChangeLog-5.php 2010-02-25 23:00:38 UTC (rev 295518)
+++ web/php/trunk/ChangeLog-5.php 2010-02-26 00:28:51 UTC (rev 295519)
@@ -13,6 +13,71 @@
Version 5.2.13
+25-February-2010
+
+Security Fixes
+
+ Improved LCG entropy. (Rasmus, Samy Kamkar)
+ Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)
+ Fixed a possible open_basedir/safe_mode bypass in the session extension identified by Grzegorz Stachowiak. (Ilia)
+
+
+
+Updated timezone database to version 2010.2. (Derick)
+Upgraded bundled PCRE to version 7.9. (Ilia)
+
+Removed automatic file descriptor unlocking happening on shutdown and/or stream close (on all OSes excluding Windows). (Tony, Ilia)
+
+Changed tidyNode class to disallow manual node creation. (Pierrick)
+
+Added missing host validation for HTTP urls inside FILTER_VALIDATE_URL. (Ilia)
+
+Fixed bug in bundled libgd causing spurious horizontal lines drawn by gdImageFilledPolygon (libgd #100). (Takeshi Abe)
+Fixed build of mysqli with MySQL 5.5.0-m2. (Andrey)
+
+ (Custom content-length set incorrectly in Apache sapis). (Brian France, Rasmus)
+ (Wrong date by php_date.c patch with ancient gcc/glibc versions). (Derick)
+ (build fails with openssl 1.0 due to md2 deprecation). (Ilia, hanno at hboeck dot de)
+ (strip_tags() removes all tags greater then 1023 bytes long). (Ilia)
+ (HTTP fopen wrapper does not support passwordless HTTP authentication). (Jani)
+ (ReflectionFunction::isDeprecated producing "cannot be called statically" error). (Jani, Felipe)
+ (Compile failure: Bad logic in defining fopencookie emulation). (Jani)
+ (stream_set_write_buffer() has no effect on socket streams). (vnegrier at optilian dot com, Ilia)
+ (mysqli constructor without parameters does not return a working mysqli object). (Andrey)
+ (system.multiCall crashes in xmlrpc extension). (hiroaki dot kawai at gmail dot com, Ilia)
+ (exec() adds single byte twice to $output array). (Ilia)
+ (All PDOExceptions hardcode 'code' property to 0). (Joey, Ilia)
+ (Accessing mysqli->affected_rows on no connection causes segfault). (Andrey, Johannes)
+ (strtotime() does not support eighth ordinal number). (Ilia)
+ (DOMDocument::loadXML does not allow UTF-16). (Rob)
+ (copy() with an empty (zero-byte) HTTP source succeeds but returns false). (Ilia)
+ (MySQLi_Result sets values before calling constructor). (Pierrick)
+ (filter_input() does not return default value if the variable does not exist). (Ilia)
+ (XML_OPTION_SKIP_TAGSTART option has no effect). (Pierrick)
+ (PDO_PGSQL LOBs are not compatible with PostgreSQL 8.5). (Matteo)
+ (Broken object model when extending tidy). (Pierrick)
+ (Crash while running ldap_next_reference test cases). (Sriram)
+ (compile failure: Conflicting HEADER type declarations). (Jani)
+ (Reference argument converted to value in __call). (Stas)
+ (http wrapper breaks on 1024 char long headers). (Ilia)
+ (imageTTFText text shifted right). (Takeshi Abe)
+ (date_format buffer not long enough for >4 digit years). (Derick, Adam)
+ (setAttributeNS fails setting default namespace). (Rob)
+ (Implementing Iterator and IteratorAggregate). (Etienne)
+ (SoapClient does not honor max_redirects). (Sriram)
+ (Content-type parameter "boundary" is not case-insensitive in HTTP uploads). (Ilia)
+ (defined() requires class to exist when testing for class constants). (Ilia)
+ (extract() problem with array containing word "this"). (Ilia, chrisstocktonaz at gmail dot com)
+ (Field truncation when reading from dbase dbs with more then 1024 fields). (Ilia, sjoerd-php at linuxonly dot nl)
+ (strip_tags() truncates rest of string with invalid attribute). (Ilia, hradtke)
+ (define() allows :: in constant names). (Ilia)
+
+
+Version 5.3.1
19-November-2009
Modified: web/php/trunk/archive/archive.xml
===================================================================
--- web/php/trunk/archive/archive.xml 2010-02-25 23:00:38 UTC (rev 295518)
+++ web/php/trunk/archive/archive.xml 2010-02-26 00:28:51 UTC (rev 295519)
@@ -9,6 +9,7 @@
http://php.net/contact
php-webmaster@lists.php.net
+
+ PHP 5.2.13 Released!
+ http://www.php.net/archive/2010.php#id2010-02-25-1
+ 2010-02-25T16:41:39-05:00
+ 2010-02-25T16:41:39-05:00
+
+
+
+ The PHP development team would like to announce the immediate
+ availability of PHP 5.2.13. This release focuses on improving the stability of
+ the PHP 5.2.x branch with over 40 bug fixes, some of which are security related.
+ All users of PHP 5.2 are encouraged to upgrade to this release.
+
+
+
+ Security Enhancements and Fixes in PHP 5.2.13:
+
+
+ Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)
+ Fixed a possible open_basedir/safe_mode bypass in session extension identified by Grzegorz Stachowiak. (Ilia)
+ Improved LCG entropy. (Rasmus, Samy Kamkar)
+
+
+
+ Further details about the PHP 5.2.13 release can be found in the release announcement , and the full list of changes are available in the ChangeLog .
+
+
+
Modified: web/php/trunk/include/releases.inc
===================================================================
--- web/php/trunk/include/releases.inc 2010-02-25 23:00:38 UTC (rev 295518)
+++ web/php/trunk/include/releases.inc 2010-02-26 00:28:51 UTC (rev 295519)
@@ -2,6 +2,82 @@
$OLDRELEASES = array (
5 =>
array (
+ '5.2.12' =>
+ array (
+ 'announcement' =>
+ array (
+ 'English' => '/releases/5_2_12.php',
+ ),
+ 'source' =>
+ array (
+ 0 =>
+ array (
+ 'filename' => 'php-5.2.12.tar.bz2',
+ 'name' => 'PHP 5.2.12 (tar.bz2)',
+ 'md5' => '5b7077e366c7eeab34da31dd860a1923',
+ 'date' => '17 December 2009',
+ ),
+ 1 =>
+ array (
+ 'filename' => 'php-5.2.11.tar.gz',
+ 'name' => 'PHP 5.2.11 (tar.gz)',
+ 'md5' => 'e6d6cc6570c77f60d8d4c99565d42ffd',
+ 'date' => '17 December 2009',
+ ),
+ ),
+ 'windows' =>
+ array (
+ 0 =>
+ array (
+ 'filename' => 'php-5.2.12-Win32.zip',
+ 'name' => 'PHP 5.2.12 zip package',
+ 'md5' => 'e04f2944175dc19d7d007b5e889690b4',
+ 'date' => '17 December 2009',
+ 'note' => 'The PECL package will not be released for
+this version. The 5.2.6 PECL package does however work with this release',
+ ),
+ 1 =>
+ array (
+ 'filename' => 'php-5.2.12-win32-installer.msi',
+ 'name' => 'PHP 5.2.12 installer',
+ 'md5' => 'df73529935bb855842e38afda8a295d7',
+ 'date' => '17 December 2009',
+ 'note' => '',
+ ),
+ 2 =>
+ array (
+ 'filename' => 'php-debug-pack-5.2.12-Win32.zip',
+ 'name' => 'PHP 5.2.12 Win32 Debug Pack',
+ 'md5' => 'b21a5abb9e5bae4c657d0983986c4434',
+ 'date' => '17 December 2009',
+ ),
+ 3 =>
+ array (
+ 'filename' => 'php-5.2.12-nts-Win32.zip',
+ 'name' => 'PHP 5.2.12 Non-thread-safe zip package',
+ 'md5' => 'ff0c67bb622c062f0820598e8d6bc12c',
+ 'date' => '17 December 2009',
+ 'note' => 'The PECL package will not be released for
+this version. The 5.2.6 PECL package does however work with this release',
+ ),
+ 4 =>
+ array (
+ 'filename' => 'php-5.2.12-nts-win32-installer.msi',
+ 'name' => 'PHP 5.2.12 Non-thread-safe installer',
+ 'md5' => '418656307a52c99f2175c748da31a9d8',
+ 'date' => '17 December 2009',
+ ),
+ 5 =>
+ array (
+ 'filename' => 'php-debug-pack-5.2.12-nts-Win32.zip',
+ 'name' => 'PHP 5.2.12 Non-thread-safe Win32 Debug Pack',
+ 'md5' => 'e2620df81442ddefc0c3450be58540f9',
+ 'date' => '17 December 2009',
+ ),
+ ),
+ 'date' => '17 December 2009',
+ 'museum' => false,
+ ),
'5.2.11' =>
array (
'announcement' =>
Modified: web/php/trunk/include/version.inc
===================================================================
--- web/php/trunk/include/version.inc 2010-02-25 23:00:38 UTC (rev 295518)
+++ web/php/trunk/include/version.inc 2010-02-26 00:28:51 UTC (rev 295519)
@@ -29,23 +29,23 @@
);
/* PHP 5.2 Release */
-$PHP_5_2_RC = '5.2.13RC2';
-$PHP_5_2_RC_DATE = "11 Feb 2010";
+$PHP_5_2_RC = false; //'5.2.13RC2';
+$PHP_5_2_RC_DATE = ""; //"11 Feb 2010";
-$PHP_5_2_VERSION = "5.2.12";
-$PHP_5_2_DATE = "17 December 2009";
+$PHP_5_2_VERSION = "5.2.13";
+$PHP_5_2_DATE = "25 February 2010";
$PHP_5_2_WINDOWS_DATE = $PHP_5_2_DATE;
$PHP_5_2_WINDOWS_VERSION = $PHP_5_2_VERSION;
$PHP_5_2_MD5 = array(
- "tar.bz2" => "5b7077e366c7eeab34da31dd860a1923",
- "tar.gz" => "e6d6cc6570c77f60d8d4c99565d42ffd",
- "zip" => "e04f2944175dc19d7d007b5e889690b4",
- "installer" => "df73529935bb855842e38afda8a295d7",
- "nts.zip" => "ff0c67bb622c062f0820598e8d6bc12c",
- "nts.installer" => "418656307a52c99f2175c748da31a9d8",
- "debugpack" => "b21a5abb9e5bae4c657d0983986c4434",
- "nts.debugpack" => "e2620df81442ddefc0c3450be58540f9",
+ "tar.bz2" => "eb4d0766dc4fb9667f05a68b6041e7d1",
+ "tar.gz" => "cdf95cdc1ebccccce9c96653fd593dd4",
+ "zip" => "3074bad887d613acf992ebdfea0e4465",
+ "installer" => "891e3262428851ebe71d5432a97be6d5",
+ "nts.zip" => "a7bd052e7a1413b743c07ae37171980d",
+ "nts.installer" => "d0e502db99565afde77b4f58f13fbad2",
+ "debugpack" => "e3382d5acbb527d21b768766f563a75d",
+ "nts.debugpack" => "3693478973cd41752e2c0a1c3cddb997",
);
$PHP_5_2_WINDOWS_NOTE_MSI = "";
Added: web/php/trunk/releases/5_2_13.php
===================================================================
--- web/php/trunk/releases/5_2_13.php (rev 0)
+++ web/php/trunk/releases/5_2_13.php 2010-02-26 00:28:51 UTC (rev 295519)
@@ -0,0 +1,49 @@
+
+
+PHP 5.2.13 Release Announcement
+
+The PHP development team would like to announce the immediate
+availability of PHP 5.2.13. This release focuses on improving the stability of
+the PHP 5.2.x branch with over 40 bug fixes, some of which are security related.
+All users of PHP 5.2 are encouraged to upgrade to this release.
+
+
+
+Security Enhancements and Fixes in PHP 5.2.13:
+
+
+ Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)
+ Fixed a possible open_basedir/safe_mode bypass in the session extension identified by Grzegorz Stachowiak. (Ilia)
+ Improved LCG entropy. (Rasmus, Samy Kamkar)
+
+
+
+Key enhancements in PHP 5.2.13 include:
+
+
+ Fixed bug #50940 Custom content-length set incorrectly in Apache sapis. (Brian France, Rasmus)
+ Fixed bug #50847 (strip_tags() removes all tags greater then 1023 bytes long). (Ilia)
+ Fixed bug #50661 (DOMDocument::loadXML does not allow UTF-16). (Rob)
+ Fixed bug #50632 (filter_input() does not return default value if the variable does not exist). (Ilia)
+ Fixed bug #50540 (Crash while running ldap_next_reference test cases). (Sriram)
+ Fixed bug #49851 (http wrapper breaks on 1024 char long headers). (Ilia)
+
+ Over 30 other bug fixes.
+
+
+
+For users upgrading from PHP 5.0 and PHP 5.1, an upgrade guide is available
+here , detailing the changes between those releases
+and PHP 5.2.13.
+
+
+
+ For a full list of changes in PHP 5.2.13, see the ChangeLog .
+
+
+
Property changes on: web/php/trunk/releases/5_2_13.php
___________________________________________________________________
Added: svn:keywords
+ Id Rev Revision
Added: svn:eol-style
+ native