cvs: phpweb / ChangeLog-4.php downloads.php index.php release_4_4_2.php releases.php

derick Fri Jan 13 13:12:40 2006 UTC Added files: /phpweb release_4_4_2.php Modified files: /phpweb ChangeLog-4.php downloads.php index.php releases.php Log: - Release 4.4.2 #- Windows will come later when edin is done.

http://cvs.php.net/viewcvs.cgi/phpweb/ChangeLog-4.php?r1=1.63&r2=1.64&diff_format=u Index: phpweb/ChangeLog-4.php diff -u phpweb/ChangeLog-4.php:1.63 phpweb/ChangeLog-4.php:1.64 --- phpweb/ChangeLog-4.php:1.63 Mon Oct 31 13:51:07 2005 +++ phpweb/ChangeLog-4.php Fri Jan 13 13:12:40 2006 @@ -1,5 +1,5 @@ <?php -// $Id: ChangeLog-4.php,v 1.63 2005/10/31 13:51:07 derick Exp $ +// $Id: ChangeLog-4.php,v 1.64 2006/01/13 13:12:40 derick Exp $ $_SERVER['BASE_PAGE'] = 'ChangeLog-4.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 4 ChangeLog"); @@ -11,6 +11,55 @@ <hr /> +<a name="4.4.2"></a> +<h3>Version 4.4.2</h3> +<b>11-Jan-2006</b> +<ul> +<li>Added missing safe_mode/open_basedir checks into cURL extension.</li> +<li>Backported missing imap_mailcompose() fixes from PHP 5.x.</li> +<li>Prevent header injection by limiting each header to a single line.</li> +<li>Fixed possible XSS inside error reporting functionality.</li> +<li>Fixed Apache 2 regression with sub-request handling on non-linux systems.</li> +<li><?php bugfix(35817); ?> (unpack() does not decode odd number of hexadecimal values).</li> +<li><?php bugfix(35735); ?> ($EGREP not defined in configure).</li> +<li><?php bugfix(35669); ?> (imap_mail_compose() crashes with multipart-multiboundary-email).</li> +<li><?php bugfix(35655); ?> (whitespace following end of heredoc is lost).</li> +<li><?php bugfix(35646); ?> (%{mod_php_memory_usage}n is not reset after exit).</li> +<li><?php bugfix(35594); ?> (Multiple calls to getopt() may result in a crash).</li> +<li><?php bugfix(35571); ?> (Fixed crash in Apache 2 SAPI when more then one php script is loaded via SSI include).</li> +<li><?php bugfix(35536); ?> (mysql_field_type() doesn't handle NEWDECIMAL).</li> +<li><?php bugfix(35410); ?> (wddx_deserialize() doesn't handle large ints as keys properly).</li> +<li><?php bugfix(35341); ?> (Fix for bug #33760 breaks build with older curl).</li> +<li><?php bugfix(35278); ?> (Multiple virtual() calls crash Apache 2 php module).</li> +<li><?php bugfix(35257); ?> (Calling ob_flush after creating an ob callback causes segfault).</li> +<li><?php bugfix(35079); ?> (stream_set_blocking(true) toggles, not enables blocking).</li> +<li><?php bugfix(35078); ?> (configure does not find ldap_start_tls_s).</li> +<li><?php bugfix(35071); ?> (Wrong fopen mode used in GD safe-mode checks).</li> +<li><?php bugfix(35067); ?>, <?php bugfix(35063); ?> (key(),current() need to work by reference).</li> +<li><?php bugfix(35062); ?> (socket_read() produces warnings on non blocking sockets).</li> +<li><?php bugfix(35059); ?> (Apache2 crash with mod_rewrite).</li> +<li><?php bugfix(35009); ?> (ZTS: Persistent resource destruct crashes when extension is compiled as shared).</li> +<li><?php bugfix(34996); ?> (ImageTrueColorToPalette() crashes when ncolors is zero).</li> +<li><?php bugfix(34851); ?> (SO_RECVTIMEO and SO_SNDTIMEO socket options expect integer parameter on Windows).</li> +<li><?php bugfix(34830); ?> (the 5th argument of mb_send_mail does not work).</li> +<li><?php bugfix(34359); ?> (Possible crash inside fopen http wrapper).</li> +<li><?php bugfix(33963); ?> (mssql_bind() fails on input parameters).</li> +<li><?php bugfix(33760); ?> (cURL needs CRYPTO_callback functions to prevent locking).</li> +<li><?php bugfix(33720); ?> (mb_encode_mimeheader does not work for multibyte chars).</li> +<li><?php bugfix(33523); ?> (Memory leak in xmlrpc_encode_request()).</li> +<li><?php bugfix(33201); ?> (Crash when fetching some data types).</li> +<li><?php bugfix(33153); ?> (crash in mssql_next result).</li> +<li><?php bugfix(32009); ?> (crash when mssql_bind() is called more than once).</li> +<li><?php bugfix(31971); ?> (ftp_login fails on some SSL servers).</li> +<li><?php bugfix(30760); ?> (Remove MessageBox on win32 for E_CORE errors if display_startup_error is off).</li> +<li><?php bugfix(27678); ?> (number_format() crashes with large numbers).</li> + +</ul> + +There is a <a href="release_4_4_2.php">separate announcement</a> available for this release.<br /> + +<hr /> + <a name="4.4.1"></a> <a name="4.1.1"></a> <h3>Version 4.4.1</h3> http://cvs.php.net/viewcvs.cgi/phpweb/downloads.php?r1=1.252&r2=1.253&diff_format=u Index: phpweb/downloads.php diff -u phpweb/downloads.php:1.252 phpweb/downloads.php:1.253 --- phpweb/downloads.php:1.252 Thu Jan 12 15:18:25 2006 +++ phpweb/downloads.php Fri Jan 13 13:12:40 2006 @@ -1,5 +1,5 @@ <?php -// $Id: downloads.php,v 1.252 2006/01/12 15:18:25 iliaa Exp $ +// $Id: downloads.php,v 1.253 2006/01/13 13:12:40 derick Exp $ $_SERVER['BASE_PAGE'] = 'downloads.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; @@ -112,23 +112,23 @@ <a name="v4"></a> -<h1>PHP 4.4.1</h1> +<h1>PHP 4.4.2</h1> <h2>Complete Source Code</h2> <ul> <li> - <?php download_link('php-4.4.1.tar.bz2','PHP 4.4.1 (tar.bz2)'); ?> - 31 Oct 2005<br /> - <span class="md5sum">md5: 6b5726471189f8a1f26dd7cc5e19b442</span> + <?php download_link('php-4.4.2.tar.bz2','PHP 4.4.2 (tar.bz2)'); ?> - 13 Jan 2006<br /> + <span class="md5sum">md5: 28051cd9ef43490dd9727a4d442011b5</span> </li> <li> - <?php download_link('php-4.4.1.tar.gz', 'PHP 4.4.1 (tar.gz)'); ?> - 31 Oct 2005<br /> - <span class="md5sum">md5: 83a9d52df96f682cbb88ce87ff10efb5</span> + <?php download_link('php-4.4.2.tar.gz', 'PHP 4.4.2 (tar.gz)'); ?> - 13 Jan 2006<br /> + <span class="md5sum">md5: a7ae7ed8f2edf1592bd94eab91c634fa</span> </li> </ul> <p> See the <a href="/ChangeLog-4.php">ChangeLog</a> for a complete list of changes, - or the <a href="/release_4_4_1.php">release notes</a> for more information on + or the <a href="/release_4_4_2.php">release notes</a> for more information on this particular release. Daily snapshots are also available from <a href="http://snaps.php.net/">snaps.php.net</a> (not intended for production use!). </p> @@ -141,25 +141,25 @@ <ul> <li> - <?php download_link('php-4.4.1-Win32.zip', 'PHP 4.4.1 zip package'); ?> - 31 Oct 2005<br /> + The Windows binaries and installer will follow shortly. + </li> +<!-- + <li> + <?php download_link('php-4.4.2-Win32.zip', 'PHP 4.4.2 zip package'); ?> - 15 Jan 2006<br /> (CGI binary plus server API versions for Apache, Apache2 (experimental), ISAPI, NSAPI, Servlet and Pi3Web. MySQL support built-in, many extensions included, packaged as zip)<br /> <span class="md5sum">md5: cd0bc0289c50ec4b7716143978a535df</span> </li> -<!-- - <li> - The Windows installer will follow shortly - </li> ---> <li> - <?php download_link('php-4.4.1-installer.exe', 'PHP 4.4.1 installer'); ?> - 31 Oct 2005<br /> + <?php download_link('php-4.4.2-installer.exe', 'PHP 4.4.2 installer'); ?> - 15 Jan 2006<br /> (CGI only, MySQL support built-in, packaged as Windows installer to install and configure PHP, and automatically configure IIS, PWS and Xitami, with manual configuration for other servers. N.B. no external extensions included)<br /> <span class="md5sum">md5: b6102c68d0b76ee8de780ef7e0023e10</span> </li> +--> </ul> <hr /> http://cvs.php.net/viewcvs.cgi/phpweb/index.php?r1=1.742&r2=1.743&diff_format=u Index: phpweb/index.php diff -u phpweb/index.php:1.742 phpweb/index.php:1.743 --- phpweb/index.php:1.742 Thu Jan 12 15:30:40 2006 +++ phpweb/index.php Fri Jan 13 13:12:40 2006 @@ -148,6 +148,28 @@ // DO NOT REMOVE THIS COMMENT (the RSS parser is dependant on it) ?> +<h1>PHP 4.4.2 Released</h1> +<p> + <span class="newsdate">[13-Jan-2006]</span> + The PHP development team is proud to announce the release of <a href="/downloads.php">PHP 4.4.2</a>. + This release address a few small security issues, and also corrects some + regressions that occurred in PHP 4.4.1. All PHP 4 users are encouraged to + upgrade to this release. Some of the key changes of PHP 4.4.2 include: + +<ul> +<li>HTTP Response Splitting has been addressed in the header() function.</li> +<li>An XSS problem inside the error reporting functionality has been removed.</li> +<li>Apache 2 regression with sub-request handling on non-Linux systems has been fixed.</li> +<li>A regression with the key() and current() functions have been fixed.</li> +<li>Over 30 various bug fixes.</li> +</ul> + +Further details about this release can be found in the <a href="/release_4_4_2.php">release announcement</a> +and the full list of changes is available in the <a href="/ChangeLog-4.php#4.4.2">PHP 4 ChangeLog</a>. +</p> + +<hr /> + <h1>PHP 5.1.2 Released</h1> <p> <span class="newsdate">[12-Jan-2006]</span> http://cvs.php.net/viewcvs.cgi/phpweb/releases.php?r1=1.34&r2=1.35&diff_format=u Index: phpweb/releases.php diff -u phpweb/releases.php:1.34 phpweb/releases.php:1.35 --- phpweb/releases.php:1.34 Thu Jan 12 15:18:25 2006 +++ phpweb/releases.php Fri Jan 13 13:12:40 2006 @@ -1,5 +1,5 @@ <?php -// $Id: releases.php,v 1.34 2006/01/12 15:18:25 iliaa Exp $ +// $Id: releases.php,v 1.35 2006/01/13 13:12:40 derick Exp $ $_SERVER['BASE_PAGE'] = 'releases.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; @@ -75,6 +75,7 @@ <option value="php-4.3.10.tar.gz">4.3.10</option> <option value="php-4.3.11.tar.gz">4.3.11</option> <option value="php-4.4.0.tar.gz">4.4.0</option> + <option value="php-4.4.1.tar.gz">4.4.1</option> <option value="">--------</option> <option value="php-5.0.0.tar.gz">5.0.0</option> <option value="php-5.0.1.tar.gz">5.0.1</option> @@ -334,6 +335,36 @@ <hr /> <a name="v4"></a> +<a name="4.4.1"></a> +<h2>4.4.1</h2> + +<ul> + <li>Released: 31 Oct 2005</li> + <li>Announcement: <a href="/release_4_4_1.php">English</a></li> + <li><a href="/ChangeLog-4.php#4.4.1">ChangeLog</a></li> + <li> + Download: + <ul> + <li> + <?php download_link('php-4.4.1.tar.bz2','PHP 4.4.1 (tar.bz2)'); ?> - 31 Oct 2005<br /> + <span class="md5sum">md5: 6b5726471189f8a1f26dd7cc5e19b442</span> + </li> + <li> + <?php download_link('php-4.4.1.tar.gz', 'PHP 4.4.1 (tar.gz)'); ?> - 31 Oct 2005<br /> + <span class="md5sum">md5: 83a9d52df96f682cbb88ce87ff10efb5</span> + </li> + <li> + <?php download_link('php-4.4.1-Win32.zip','Windows binary'); ?><br /> + <span class="md5sum">md5: cd0bc0289c50ec4b7716143978a535df</span> + </li> + <li> + <?php download_link('php-4.4.1-installer.exe','Windows installer'); ?><br /> + <span class="md5sum">md5: b6102c68d0b76ee8de780ef7e0023e10</span> + </li> + </ul> + </li> +</ul> + <a name="4.4.0"></a> <h2>4.4.0</h2> http://cvs.php.net/viewcvs.cgi/phpweb/release_4_4_2.php?view=markup&rev=1.1 Index: phpweb/release_4_4_2.php +++ phpweb/release_4_4_2.php <?php // $Id: release_4_4_2.php,v 1.1 2006/01/13 13:12:40 derick Exp $ $_SERVER['BASE_PAGE'] = 'release_4_4_1.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 4.4.1 Release Announcement"); ?> <h1>PHP 4.4.2. Release Announcement</h1> <p> The PHP Development Team would like to announce the immediate release of <a href="/downloads.php">PHP 4.4.2</a>. </p> <p> This is a bug fix release, which addresses some security problems too. The major points that this release corrects are: <ul> <li>Prevent header injection by limiting each header to a single line.</li> <li>Possible XSS inside error reporting functionality.</li> <li>Missing safe_mode/open_basedir checks into cURL extension.</li> <li>Apache 2 regression with sub-request handling on non-Linux systems.</li> <li>key() and current() regression related to references.</li> </ul> </p> <p> This release also fixes about 30 other defects. </p> <p> For a full list of changes in PHP 4.4.2, see the <a href="/ChangeLog-4.php#4.4.2">ChangeLog</a>. </p> <?php site_footer(); ?>