cvs: phpweb / ChangeLog-5.php release_5_1_5.php

iliaa Thu Aug 17 14:57:34 2006 UTC Added files: /phpweb release_5_1_5.php Modified files: /phpweb ChangeLog-5.php Log: 5.1.5 news http://cvs.php.net/viewvc.cgi/phpweb/ChangeLog-5.php?r1=1.35&r2=1.36&diff_format=u Index: phpweb/ChangeLog-5.php diff -u phpweb/ChangeLog-5.php:1.35 phpweb/ChangeLog-5.php:1.36 --- phpweb/ChangeLog-5.php:1.35 Fri May 5 00:34:54 2006 +++ phpweb/ChangeLog-5.php Thu Aug 17 14:57:34 2006 @@ -1,5 +1,5 @@ <?php -// $Id: ChangeLog-5.php,v 1.35 2006/05/05 00:34:54 iliaa Exp $ +// $Id: ChangeLog-5.php,v 1.36 2006/08/17 14:57:34 iliaa Exp $ $_SERVER['BASE_PAGE'] = 'ChangeLog-5.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 5 ChangeLog"); @@ -8,6 +8,33 @@ ?> <h1>PHP 5 ChangeLog</h1> +<a name="5.1.5"></a> +<h3>Version 5.1.5</h3> +<b>17-Aug-2006</b> +<ul> + <li>Fixed memory_limit on 64bit systems. (Stefan E.)</li> + <li>Fixed overflow on 64bit systems in str_repeat() and wordwrap(). (Stefan E.) </li> + <li>Disabled CURLOPT_FOLLOWLOCATION in curl when open_basedir or safe_mode are enabled. (Stefan E., Ilia)</li> + <li><?php bugfix(38322); ?>(reading past array in sscanf() leads to arbitrary code execution). (Tony)</li> + <li><?php bugfix(38125); ?>(undefined reference to spl_dual_it_free_storage). (Marcus)</li> + <li><?php bugfix(38112); ?>(corrupted gif segfaults) (Pierre)</li> + <li><?php bugfix(37587); ?>(var without attribute causes segfault). (Marcus)</li> + <li><?php bugfix(37576); ?>(FastCGI env (cgi vars) table overflow). (Piotr)</li> + <li><?php bugfix(37496); ?>(FastCGI output buffer overrun). (Piotr, Dmitry)</li> + <li><?php bugfix(37487); ?>(oci_fetch_array() array-type should always default to OCI_BOTH). (Tony)</li> + <li><?php bugfix(37416); ?>(iterator_to_array() hides exceptions thrown in rewind() method). (Tony) </li> + <li><?php bugfix(37392); ?>(Unnecessary call to OCITransRollback() at the end of request). (Tony)</li> + <li><?php bugfix(37341); ?>($_SERVER in included file is shortened to two entries, if $_ENV gets used). (Dmitry)</li> + <li><?php bugfix(37313); ?>(sigemptyset() used without including <signal.h>). (jdolecek)</li> + <li><?php bugfix(37346); ?>(invalid colormap format) (Pierre)</li> + <li><?php bugfix(37360); ?>(invalid gif size) (Pierre)</li> + <li><?php bugfix(37306); ?>(max_execution_time = max_input_time). (Dmitry)</li> + <li><?php bugfix(37278); ?>(SOAP not respecting uri in __soapCall). (Dmitry)</li> + <li><?php bugfix(37265); ?>(Added missing safe_mode & open_basedir checks to imap_body()). (Ilia)</li> + <li><?php bugfix(37256); ?>(php-fastcgi doesn't handle connection abort). (Dmitry)</li> +</ul> + +<h1>PHP 5 ChangeLog</h1> <a name="5.1.4"></a> <h3>Version 5.1.4</h3> <b>04-May-2006</b> http://cvs.php.net/viewvc.cgi/phpweb/release_5_1_5.php?view=markup&rev=1.1 Index: phpweb/release_5_1_5.php +++ phpweb/release_5_1_5.php <?php // $Id: release_5_1_5.php,v 1.1 2006/08/17 14:57:34 iliaa Exp $ $_SERVER['BASE_PAGE'] = 'release_5_1_5.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 5.1.5 Release Announcement"); ?> <h1>PHP 5.1.5 Release Announcement</h1> <p> This release address a series of locally exploitable security problems discovered since PHP 5.1.4. All PHP users are encouraged to upgrade to this release as soon as possible. </p> <p> This release provides the following security fixes: <ul> <li>Added missing safe_mode/open_basedir checks inside the error_log(), file_exists(), imap_open() and imap_reopen() functions.</li> <li>Fixed overflows inside str_repeat() and wordwrap() functions on 64bit systems.</li> <li>Fixed possible open_basedir/safe_mode bypass in cURL extension and with realpath cache.</li> <li>Fixed overflow in GD extension on invalid GIF images.</li> <li>Fixed a buffer overflow inside sscanf() function.</li> <li>Fixed an out of bounds read inside stripos() function.</li> <li>Fixed memory_limit restriction on 64 bit system.</li> </ul> </p> <p> In addition to the security fixes, both releases include a small number of non-security related bug fixes. </p> <p> For a full list of changes in PHP 5.1.5, see the <a href="/ChangeLog-5.php#5.1.5">ChangeLog</a>. </p> <?php site_footer(); ?>