PHP 5.1.3 Released!

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The PHP development team is proud to announce the release of PHP 5.1.3. This release combines a few feature enhancements with a significant amount of bug fixes and resolves a number of security issues. All PHP users are encouraged to upgrade to this release as soon as possible. The security issues resolved include the following:

        Disallow certain characters in session names.
        Fixed a buffer overflow inside the wordwrap() function.
        Prevent jumps to parent directory via the 2nd parameter of the tempnam() function.
        Enforce safe_mode for the source parameter of the copy() function.
        Fixed cross-site scripting inside the phpinfo() function.
        Fixed offset/length parameter validation inside the substr_compare() function.
        Fixed a heap corruption inside the session extension.
        Fixed a bug that would allow variable to survive unset().

The feature enhancements include the following notables:

        The use of the var keyword to declare properties no longer raises a deprecation E_STRICT.
        FastCGI interface was completely reimplemented.
        Multitude of improvements to the SPL, SimpleXML, GD, CURL and Reflection extensions.
        Support for many additional date formats added to the strtotime() function.
        A number of performance improvements added to the engine the core extensions.
        Added imap_savebody() that allows message body to be written to a file.
        Added lchown() and lchgrp() to change user/group ownership of symlinks.
        Upgraded bunbled PCRE library to version 6.6

The release also includes over 120 bug fixes with a focus on:

        Make auto_globals_jit work without too many INI changes.
        Fixed tiger hash algorithm generating wrong results on big endian platforms.
        Fixed a number of errors in the SOAP extension.
        Fixed recursion handling in the serialize() functionality.
        Make is_*() function account of open_basedir restrictions.
        Fixed a number of crashes in the DOM and PDO extensions.
        Addressed a number of regressions in the strtotime() extension.
        Make memory_limit work in Win32 systems.
        Fixed a deadlock in the sqlite extension caused by the sqlite_fetch_column_types() function.
        Fixed memory leaks in the realpath() cache.

The full details of the changes in PHP 5.1.3 can be found here: http://www.php.net/ChangeLog-5.php#5.1.3 PHP Development Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iD8DBQFEVqDILKekh381/CERAg1MAJ9xba05M+yEji9F7/VOTqISRVdeKACeI7jc VWcbkqx3Bz+47Mq052kLfFI= =xKvW -----END PGP SIGNATURE-----