cvs: phpweb / ChangeLog-4.php downloads.php index.php release_4_4_4.php releases.php
| From: | Derick Rethans | Date: | Thu, 17 Aug 2006 14:57:45 +0000 |
| Subject: | cvs: phpweb / ChangeLog-4.php downloads.php index.php release_4_4_4.php releases.php | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-32190@lists.php.net to get a copy of this message | ||
derick Thu Aug 17 14:57:45 2006 UTC
Added files:
/phpweb release_4_4_4.php
Modified files:
/phpweb ChangeLog-4.php downloads.php index.php releases.php
Log:
- Release files for 5.1.5 and 4.4.4 (part #2). (Ilia did part #1).
http://cvs.php.net/viewvc.cgi/phpweb/ChangeLog-4.php?r1=1.65&r2=1.66&diff_format=u Index: phpweb/ChangeLog-4.php diff -u phpweb/ChangeLog-4.php:1.65 phpweb/ChangeLog-4.php:1.66 --- phpweb/ChangeLog-4.php:1.65 Thu Aug 3 07:10:14 2006 +++ phpweb/ChangeLog-4.php Thu Aug 17 14:57:45 2006 @@ -1,5 +1,5 @@ <?php -// $Id: ChangeLog-4.php,v 1.65 2006/08/03 07:10:14 derick Exp $ +// $Id: ChangeLog-4.php,v 1.66 2006/08/17 14:57:45 derick Exp $ $_SERVER['BASE_PAGE'] = 'ChangeLog-4.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 4 ChangeLog"); @@ -11,6 +11,29 @@ <hr/> +<a name="4.4.4"></a> +<h3>Version 4.4.4</h3> +<b>17-Aug-2006</b> +<ul> +<li>Fixed memory_limit on 64bit systems.</li> +<li>Fixed overflow on 64bit systems in str_repeat() and wordwrap().</li> +<li>Disabled CURLOPT_FOLLOWLOCATION in curl when open_basedir or safe_mode are enabled.</li> +<li>Fixed a memory corruption error with an invalid foreach() call.</li> +<li><?php bugfix(38431); ?> (xmlrpc_get_type() crashes PHP on objects).</li> +<li><?php bugfix(38377); ?> (session_destroy() gives warning after session_regenerate_id()).</li> +<li><?php bugfix(38322); ?> (reading past array in sscanf() leads to arbitary code execution).</li> +<li><?php bugfix(38278); ?> (session_cache_expire()'s value does not match phpinfo's session.cache_expire).</li> +<li><?php bugfix(38251); ?> (socket_select() and invalid arguments).</li> +<li><?php bugfix(38183); ?> (disable_classes=Foobar causes disabled class to be called Foo).</li> +<li><?php bugfix(38112); ?> (corrupted gif segfaults).</li> +<li><?php bugfix(37265); ?> (Added missing safe_mode & open_basedir checks to imap_body()).</li> +<li><?php bugfix(29538); ?> (number_format and problem with 0).</li> +</ul> + +There is a <a href="release_4_4_4.php">separate announcement</a> available for this release.<br /> + +<hr /> + <a name="4.4.3"></a> <h3>Version 4.4.3</h3> <b>03-Aug-2006</b> http://cvs.php.net/viewvc.cgi/phpweb/downloads.php?r1=1.262&r2=1.263&diff_format=u Index: phpweb/downloads.php diff -u phpweb/downloads.php:1.262 phpweb/downloads.php:1.263 --- phpweb/downloads.php:1.262 Thu Aug 3 07:10:14 2006 +++ phpweb/downloads.php Thu Aug 17 14:57:45 2006 @@ -1,5 +1,5 @@ <?php -// $Id: downloads.php,v 1.262 2006/08/03 07:10:14 derick Exp $ +// $Id: downloads.php,v 1.263 2006/08/17 14:57:45 derick Exp $ $_SERVER['BASE_PAGE'] = 'downloads.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; @@ -68,37 +68,37 @@ ?> <a name="v5"></a> -<h1>PHP 5.1.4</h1> +<h1>PHP 5.1.5</h1> <h2>Complete Source Code</h2> <ul> <li> - <?php download_link('php-5.1.4.tar.bz2', 'PHP 5.1.4 (tar.bz2)'); ?> - 04 May 2006<br /> - <span class="md5sum">md5: 66a806161d4a2d3b5153ebe4cd0f2e1c</span> + <?php download_link('php-5.1.5.tar.bz2', 'PHP 5.1.5 (tar.bz2)'); ?> - 17 Aug 2006<br /> + <span class="md5sum">md5: fb4edd5ed9c536a04a241b52ea62a6c1</span> </li> <li> - <?php download_link('php-5.1.4.tar.gz', 'PHP 5.1.4 (tar.gz)'); ?> - 04 May 2006<br /> - <span class="md5sum">md5: 7c846aa09ec1fe0f54a57c8ba030d9f8</span> + <?php download_link('php-5.1.5.tar.gz', 'PHP 5.1.5 (tar.gz)'); ?> - 17 Aug 2006<br /> + <span class="md5sum">md5: 643f41b0caae908927c0c3705ac006d3</span> </li> </ul> <h2>Windows Binaries</h2> <ul> <li> - <?php download_link('php-5.1.4-Win32.zip', 'PHP 5.1.4 zip package'); ?> - 04 May 2006<br /> - <span class="md5sum">md5: bf208201a671fd20a13490dc6f38b344</span> + <?php download_link('php-5.1.5-Win32.zip', 'PHP 5.1.5 zip package'); ?> - 17 Aug 2006<br /> + <span class="md5sum">md5: 0330f932dab53176623abf7afba007ce</span> </li> <li> - <?php download_link('pecl-5.1.4-Win32.zip', 'Collection of PECL modules for PHP 5.1.4'); ?> - 04 May 2006<br /> - <span class="md5sum">md5: ff5ac6c4db975bc3ff2f3a89b7881c3f</span> + <?php download_link('pecl-5.1.5-Win32.zip', 'Collection of PECL modules for PHP 5.1.5'); ?> - 17 Aug 2006<br /> + <span class="md5sum">md5: dc2fbbed8487f58e9ff6163e2ae00c96</span> </li> <li> - <?php download_link('php-5.1.4-installer.exe', 'PHP 5.1.4 installer'); ?> - 04 May 2006<br /> + <?php download_link('php-5.1.5-installer.exe', 'PHP 5.1.5 installer'); ?> - 17 Aug 2006<br /> (CGI only, packaged as Windows installer to install and configure PHP, and automatically configure IIS, PWS and Xitami, with manual configuration for other servers. No external extensions included, get them from the zip and PECL downloads above, and install manually)<br /> - <span class="md5sum">md5: 86d83c9f42e281c60a40cf7c6d66db8d</span> + <span class="md5sum">md5: cf9a99abb9ab0a6dbfcb001ab0b05fa9</span> </li> </ul> @@ -112,23 +112,23 @@ <a name="v4"></a> -<h1>PHP 4.4.3</h1> +<h1>PHP 4.4.4</h1> <h2>Complete Source Code</h2> <ul> <li> - <?php download_link('php-4.4.3.tar.bz2','PHP 4.4.3 (tar.bz2)'); ?> - 03 Aug 2006<br /> - <span class="md5sum">md5: 9542117551c0e79f5bf21f46493094e7</span> + <?php download_link('php-4.4.4.tar.bz2','PHP 4.4.4 (tar.bz2)'); ?> - 17 Aug 2006<br /> + <span class="md5sum">md5: bc6fa8908e2ac36e93bab9f7d42cda3a</span> </li> <li> - <?php download_link('php-4.4.3.tar.gz', 'PHP 4.4.3 (tar.gz)'); ?> - 03 Aug 2006<br /> - <span class="md5sum">md5: f991b9a18ae167c436783bd0976ad749</span> + <?php download_link('php-4.4.4.tar.gz', 'PHP 4.4.4 (tar.gz)'); ?> - 17 Aug 2006<br /> + <span class="md5sum">md5: e884b9b7c2e936310553c946bc2f67c2</span> </li> </ul> <p> See the <a href="/ChangeLog-4.php">ChangeLog</a> for a complete list of - changes, or the <a href="/release_4_4_3.php">release notes</a> for more + changes, or the <a href="/release_4.4.4.php">release notes</a> for more information on this particular release. Daily snapshots are also available from <a href="http://snaps.php.net/">snaps.php.net</a> (not intended for production use!). @@ -149,19 +149,19 @@ --> <li> - <?php download_link('php-4.4.3-Win32.zip', 'PHP 4.4.3 zip package'); ?> - 03 Aug 2006<br /> + <?php download_link('php-4.4.4-Win32.zip', 'PHP 4.4.4 zip package'); ?> - 17 Aug 2006<br /> (CGI binary plus server API versions for Apache, Apache2 (experimental), ISAPI, NSAPI, Servlet and Pi3Web. MySQL support built-in, many extensions included, packaged as zip)<br /> - <span class="md5sum">md5: 9355a754c56857d921b3a945a91d729f</span> + <span class="md5sum">md5: 3ff3f58a2f573c80f34f2b670d7ac873</span> </li> <li> - <?php download_link('php-4.4.3-installer.exe', 'PHP 4.4.3 installer'); ?> - 03 Aug 2006<br /> + <?php download_link('php-4.4.4-installer.exe', 'PHP 4.4.4 installer'); ?> - 17 Aug 2006<br /> (CGI only, MySQL support built-in, packaged as Windows installer to install and configure PHP, and automatically configure IIS, PWS and Xitami, with manual configuration for other servers. N.B. no external extensions included)<br /> - <span class="md5sum">md5: b5b7e1953c62393cff7d7d065fb74e99</span> + <span class="md5sum">md5: e5db53efb3e0fed5407fc7c71cf0b436</span> </li> </ul> http://cvs.php.net/viewvc.cgi/phpweb/index.php?r1=1.796&r2=1.797&diff_format=u Index: phpweb/index.php diff -u phpweb/index.php:1.796 phpweb/index.php:1.797 --- phpweb/index.php:1.796 Thu Aug 3 07:10:14 2006 +++ phpweb/index.php Thu Aug 17 14:57:45 2006 @@ -148,6 +148,37 @@ // DO NOT REMOVE THIS COMMENT (the RSS parser is dependant on it) ?> +<h1>PHP 4.4.4 and PHP 5.1.5 Released</h1> +<p> + <span class="newsdate">[17-Aug-2006]</span> + PHP development team would like to announce the immediate availability of + PHP <a href="/downloads.php#v5">5.1.5</a> and <a + href="/downloads.php#v4">4.4.4</a>. The two releases address a series of + security problems discovered since PHP 5.1.4 and 4.4.3, respectively. These + include the following: +</p> +<ul> +<li>Added missing safe_mode/open_basedir checks inside the error_log(), + file_exists(), imap_open() and imap_reopen() functions.</li> +<li>Fixed overflows inside str_repeat() and wordwrap() functions on 64bit + systems.</li> +<li>Fixed possible open_basedir/safe_mode bypass in cURL extension and on PHP + 5.1.5 with realpath cache.</li> +<li>Fixed overflow in GD extension on invalid GIF images.</li> +<li>Fixed a buffer overflow inside sscanf() function.</li> +<li>Fixed an out of bounds read inside stripos() function.</li> +<li>Fixed memory_limit restriction on 64 bit system.</li> +</ul> +<p> +Further details about this release can be found in the release announcements +(<a href="/release_5_1_5.php">5.1.5</a> and +<a href="/release_4_4_4.php">4.4.4</a>) and the full list of changes is +available in the ChangeLogs (<a href="/ChangeLog-4.php#4.4.3">PHP 4</a>, +<a href="/ChangeLog-4.php#5.1.5">PHP 5</a>). +</p> + +<hr /> + <h1>PHP 4.4.3 Released</h1> <p> <span class="newsdate">[03-Aug-2006]</span> http://cvs.php.net/viewvc.cgi/phpweb/releases.php?r1=1.38&r2=1.39&diff_format=u Index: phpweb/releases.php diff -u phpweb/releases.php:1.38 phpweb/releases.php:1.39 --- phpweb/releases.php:1.38 Thu Aug 3 07:10:14 2006 +++ phpweb/releases.php Thu Aug 17 14:57:45 2006 @@ -1,5 +1,5 @@ <?php -// $Id: releases.php,v 1.38 2006/08/03 07:10:14 derick Exp $ +// $Id: releases.php,v 1.39 2006/08/17 14:57:45 derick Exp $ $_SERVER['BASE_PAGE'] = 'releases.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; @@ -77,6 +77,7 @@ <option value="php-4.4.0.tar.gz">4.4.0</option> <option value="php-4.4.1.tar.gz">4.4.1</option> <option value="php-4.4.2.tar.gz">4.4.2</option> + <option value="php-4.4.3.tar.gz">4.4.3</option> <option value="">--------</option> <option value="php-5.0.0.tar.gz">5.0.0</option> <option value="php-5.0.1.tar.gz">5.0.1</option> @@ -88,6 +89,7 @@ <option value="php-5.1.1.tar.gz">5.1.1</option> <option value="php-5.1.2.tar.gz">5.1.2</option> <option value="php-5.1.3.tar.gz">5.1.3</option> + <option value="php-5.1.4.tar.gz">5.1.4</option> </select> </p> </form> @@ -107,12 +109,47 @@ </p> <a name="v5"></a> +<a name="5.1.4"></a> +<h2>5.1.4</h2> + +<ul> + <li>Released: 04 May 2006</li> + <li>Announcement: <a href="/release_5_1_4.php">English</a></li> + <li><a href="/ChangeLog-5.php#5.1.4">ChangeLog</a></li> + <li> + Download: + <ul> + <li> + <?php download_link('php-5.1.4.tar.bz2','Source (tar.bz2)'); ?><br /> + <span class="md5sum">md5: 66a806161d4a2d3b5153ebe4cd0f2e1c</span> + </li> + <li> + <?php download_link('php-5.1.4.tar.gz','Source (tar.gz)'); ?><br /> + <span class="md5sum">md5: 7c846aa09ec1fe0f54a57c8ba030d9f8</span> + </li> + <li> + <?php download_link('php-5.1.4-Win32.zip','Windows binary'); ?><br /> + <span class="md5sum">md5: bf208201a671fd20a13490dc6f38b344</span> + </li> + <li> + <?php download_link('php-5.1.4-installer.exe','Windows installer'); ?><br /> + <span class="md5sum">md5: 86d83c9f42e281c60a40cf7c6d66db8d</span> + </li> + <li> + <?php download_link('pecl-5.1.4-Win32.zip','Collection of PECL modules for PHP 5.1.4'); ?><br /> + <span class="md5sum">md5: ff5ac6c4db975bc3ff2f3a89b7881c3f</span> + </li> + </ul> + </li> +</ul> + + <a name="5.1.3"></a> <h2>5.1.3</h2> <ul> <li>Released: 12 Jan 2006</li> - <li>Announcement: <a href="/release_5_1_2.php">English</a></li> + <li>Announcement: <a href="/release_5_1_3.php">English</a></li> <li><a href="/ChangeLog-5.php#5.1.3">ChangeLog</a></li> <li> Download: @@ -408,6 +445,36 @@ <hr /> <a name="v4"></a> +<a name="4.4.3"></a> +<h2>4.4.3</h2> + +<ul> + <li>Released: 03 Aug 2006</li> + <li>Announcement: <a href="/release_4.4.3.php">English</a></li> + <li><a href="/ChangeLog-4.php#4.4.3">ChangeLog</a></li> + <li> + Download: + <ul> + <li> + <?php download_link('php-4.4.3.tar.bz2','PHP 4.4.3 (tar.bz2)'); ?> - 03 Aug 2006<br /> + <span class="md5sum">md5: 9542117551c0e79f5bf21f46493094e7</span> + </li> + <li> + <?php download_link('php-4.4.3.tar.gz', 'PHP 4.4.3 (tar.gz)'); ?> - 03 Aug 2006<br /> + <span class="md5sum">md5: f991b9a18ae167c436783bd0976ad749</span> + </li> + <li> + <?php download_link('php-4.4.3-Win32.zip','Windows binary'); ?><br /> + <span class="md5sum">md5: 9355a754c56857d921b3a945a91d729f</span> + </li> + <li> + <?php download_link('php-4.4.3-installer.exe','Windows installer'); ?><br /> + <span class="md5sum">md5: b5b7e1953c62393cff7d7d065fb74e99</span> + </li> + </ul> + </li> +</ul> + <a name="4.4.2"></a> <h2>4.4.2</h2> http://cvs.php.net/viewvc.cgi/phpweb/release_4_4_4.php?view=markup&rev=1.1 Index: phpweb/release_4_4_4.php +++ phpweb/release_4_4_4.php <?php // $Id: release_4_4_4.php,v 1.1 2006/08/17 14:57:45 derick Exp $ $_SERVER['BASE_PAGE'] = 'release_4_4_4.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 4.4.4 Release Announcement"); ?> <h1>PHP 4.4.4 Release Announcement</h1> <p> This release address a series of locally exploitable security problems discovered since PHP 4.4.3. All PHP users are encouraged to upgrade to this release as soon as possible. </p> <p> This release provides the following security fixes: <ul> <li>Added missing safe_mode/open_basedir checks inside the error_log(), file_exists(), imap_open() and imap_reopen() functions.</li> <li>Fixed overflows inside str_repeat() and wordwrap() functions on 64bit systems.</li> <li>Fixed possible open_basedir/safe_mode bypass in cURL extension.</li> <li>Fixed overflow in GD extension on invalid GIF images.</li> <li>Fixed a buffer overflow inside sscanf() function.</li> <li>Fixed memory_limit restriction on 64 bit system.</li> </ul> </p> <p> In addition to the security fixes, both releases include a small number of non-security related bug fixes. </p> <p> For a full list of changes in PHP 4.4.4, see the <a href="/ChangeLog-4.php#4.4.4">ChangeLog</a>. </p> <?php site_footer(); ?>
http://cvs.php.net/viewvc.cgi/phpweb/ChangeLog-4.php?r1=1.65&r2=1.66&diff_format=u Index: phpweb/ChangeLog-4.php diff -u phpweb/ChangeLog-4.php:1.65 phpweb/ChangeLog-4.php:1.66 --- phpweb/ChangeLog-4.php:1.65 Thu Aug 3 07:10:14 2006 +++ phpweb/ChangeLog-4.php Thu Aug 17 14:57:45 2006 @@ -1,5 +1,5 @@ <?php -// $Id: ChangeLog-4.php,v 1.65 2006/08/03 07:10:14 derick Exp $ +// $Id: ChangeLog-4.php,v 1.66 2006/08/17 14:57:45 derick Exp $ $_SERVER['BASE_PAGE'] = 'ChangeLog-4.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 4 ChangeLog"); @@ -11,6 +11,29 @@ <hr/> +<a name="4.4.4"></a> +<h3>Version 4.4.4</h3> +<b>17-Aug-2006</b> +<ul> +<li>Fixed memory_limit on 64bit systems.</li> +<li>Fixed overflow on 64bit systems in str_repeat() and wordwrap().</li> +<li>Disabled CURLOPT_FOLLOWLOCATION in curl when open_basedir or safe_mode are enabled.</li> +<li>Fixed a memory corruption error with an invalid foreach() call.</li> +<li><?php bugfix(38431); ?> (xmlrpc_get_type() crashes PHP on objects).</li> +<li><?php bugfix(38377); ?> (session_destroy() gives warning after session_regenerate_id()).</li> +<li><?php bugfix(38322); ?> (reading past array in sscanf() leads to arbitary code execution).</li> +<li><?php bugfix(38278); ?> (session_cache_expire()'s value does not match phpinfo's session.cache_expire).</li> +<li><?php bugfix(38251); ?> (socket_select() and invalid arguments).</li> +<li><?php bugfix(38183); ?> (disable_classes=Foobar causes disabled class to be called Foo).</li> +<li><?php bugfix(38112); ?> (corrupted gif segfaults).</li> +<li><?php bugfix(37265); ?> (Added missing safe_mode & open_basedir checks to imap_body()).</li> +<li><?php bugfix(29538); ?> (number_format and problem with 0).</li> +</ul> + +There is a <a href="release_4_4_4.php">separate announcement</a> available for this release.<br /> + +<hr /> + <a name="4.4.3"></a> <h3>Version 4.4.3</h3> <b>03-Aug-2006</b> http://cvs.php.net/viewvc.cgi/phpweb/downloads.php?r1=1.262&r2=1.263&diff_format=u Index: phpweb/downloads.php diff -u phpweb/downloads.php:1.262 phpweb/downloads.php:1.263 --- phpweb/downloads.php:1.262 Thu Aug 3 07:10:14 2006 +++ phpweb/downloads.php Thu Aug 17 14:57:45 2006 @@ -1,5 +1,5 @@ <?php -// $Id: downloads.php,v 1.262 2006/08/03 07:10:14 derick Exp $ +// $Id: downloads.php,v 1.263 2006/08/17 14:57:45 derick Exp $ $_SERVER['BASE_PAGE'] = 'downloads.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; @@ -68,37 +68,37 @@ ?> <a name="v5"></a> -<h1>PHP 5.1.4</h1> +<h1>PHP 5.1.5</h1> <h2>Complete Source Code</h2> <ul> <li> - <?php download_link('php-5.1.4.tar.bz2', 'PHP 5.1.4 (tar.bz2)'); ?> - 04 May 2006<br /> - <span class="md5sum">md5: 66a806161d4a2d3b5153ebe4cd0f2e1c</span> + <?php download_link('php-5.1.5.tar.bz2', 'PHP 5.1.5 (tar.bz2)'); ?> - 17 Aug 2006<br /> + <span class="md5sum">md5: fb4edd5ed9c536a04a241b52ea62a6c1</span> </li> <li> - <?php download_link('php-5.1.4.tar.gz', 'PHP 5.1.4 (tar.gz)'); ?> - 04 May 2006<br /> - <span class="md5sum">md5: 7c846aa09ec1fe0f54a57c8ba030d9f8</span> + <?php download_link('php-5.1.5.tar.gz', 'PHP 5.1.5 (tar.gz)'); ?> - 17 Aug 2006<br /> + <span class="md5sum">md5: 643f41b0caae908927c0c3705ac006d3</span> </li> </ul> <h2>Windows Binaries</h2> <ul> <li> - <?php download_link('php-5.1.4-Win32.zip', 'PHP 5.1.4 zip package'); ?> - 04 May 2006<br /> - <span class="md5sum">md5: bf208201a671fd20a13490dc6f38b344</span> + <?php download_link('php-5.1.5-Win32.zip', 'PHP 5.1.5 zip package'); ?> - 17 Aug 2006<br /> + <span class="md5sum">md5: 0330f932dab53176623abf7afba007ce</span> </li> <li> - <?php download_link('pecl-5.1.4-Win32.zip', 'Collection of PECL modules for PHP 5.1.4'); ?> - 04 May 2006<br /> - <span class="md5sum">md5: ff5ac6c4db975bc3ff2f3a89b7881c3f</span> + <?php download_link('pecl-5.1.5-Win32.zip', 'Collection of PECL modules for PHP 5.1.5'); ?> - 17 Aug 2006<br /> + <span class="md5sum">md5: dc2fbbed8487f58e9ff6163e2ae00c96</span> </li> <li> - <?php download_link('php-5.1.4-installer.exe', 'PHP 5.1.4 installer'); ?> - 04 May 2006<br /> + <?php download_link('php-5.1.5-installer.exe', 'PHP 5.1.5 installer'); ?> - 17 Aug 2006<br /> (CGI only, packaged as Windows installer to install and configure PHP, and automatically configure IIS, PWS and Xitami, with manual configuration for other servers. No external extensions included, get them from the zip and PECL downloads above, and install manually)<br /> - <span class="md5sum">md5: 86d83c9f42e281c60a40cf7c6d66db8d</span> + <span class="md5sum">md5: cf9a99abb9ab0a6dbfcb001ab0b05fa9</span> </li> </ul> @@ -112,23 +112,23 @@ <a name="v4"></a> -<h1>PHP 4.4.3</h1> +<h1>PHP 4.4.4</h1> <h2>Complete Source Code</h2> <ul> <li> - <?php download_link('php-4.4.3.tar.bz2','PHP 4.4.3 (tar.bz2)'); ?> - 03 Aug 2006<br /> - <span class="md5sum">md5: 9542117551c0e79f5bf21f46493094e7</span> + <?php download_link('php-4.4.4.tar.bz2','PHP 4.4.4 (tar.bz2)'); ?> - 17 Aug 2006<br /> + <span class="md5sum">md5: bc6fa8908e2ac36e93bab9f7d42cda3a</span> </li> <li> - <?php download_link('php-4.4.3.tar.gz', 'PHP 4.4.3 (tar.gz)'); ?> - 03 Aug 2006<br /> - <span class="md5sum">md5: f991b9a18ae167c436783bd0976ad749</span> + <?php download_link('php-4.4.4.tar.gz', 'PHP 4.4.4 (tar.gz)'); ?> - 17 Aug 2006<br /> + <span class="md5sum">md5: e884b9b7c2e936310553c946bc2f67c2</span> </li> </ul> <p> See the <a href="/ChangeLog-4.php">ChangeLog</a> for a complete list of - changes, or the <a href="/release_4_4_3.php">release notes</a> for more + changes, or the <a href="/release_4.4.4.php">release notes</a> for more information on this particular release. Daily snapshots are also available from <a href="http://snaps.php.net/">snaps.php.net</a> (not intended for production use!). @@ -149,19 +149,19 @@ --> <li> - <?php download_link('php-4.4.3-Win32.zip', 'PHP 4.4.3 zip package'); ?> - 03 Aug 2006<br /> + <?php download_link('php-4.4.4-Win32.zip', 'PHP 4.4.4 zip package'); ?> - 17 Aug 2006<br /> (CGI binary plus server API versions for Apache, Apache2 (experimental), ISAPI, NSAPI, Servlet and Pi3Web. MySQL support built-in, many extensions included, packaged as zip)<br /> - <span class="md5sum">md5: 9355a754c56857d921b3a945a91d729f</span> + <span class="md5sum">md5: 3ff3f58a2f573c80f34f2b670d7ac873</span> </li> <li> - <?php download_link('php-4.4.3-installer.exe', 'PHP 4.4.3 installer'); ?> - 03 Aug 2006<br /> + <?php download_link('php-4.4.4-installer.exe', 'PHP 4.4.4 installer'); ?> - 17 Aug 2006<br /> (CGI only, MySQL support built-in, packaged as Windows installer to install and configure PHP, and automatically configure IIS, PWS and Xitami, with manual configuration for other servers. N.B. no external extensions included)<br /> - <span class="md5sum">md5: b5b7e1953c62393cff7d7d065fb74e99</span> + <span class="md5sum">md5: e5db53efb3e0fed5407fc7c71cf0b436</span> </li> </ul> http://cvs.php.net/viewvc.cgi/phpweb/index.php?r1=1.796&r2=1.797&diff_format=u Index: phpweb/index.php diff -u phpweb/index.php:1.796 phpweb/index.php:1.797 --- phpweb/index.php:1.796 Thu Aug 3 07:10:14 2006 +++ phpweb/index.php Thu Aug 17 14:57:45 2006 @@ -148,6 +148,37 @@ // DO NOT REMOVE THIS COMMENT (the RSS parser is dependant on it) ?> +<h1>PHP 4.4.4 and PHP 5.1.5 Released</h1> +<p> + <span class="newsdate">[17-Aug-2006]</span> + PHP development team would like to announce the immediate availability of + PHP <a href="/downloads.php#v5">5.1.5</a> and <a + href="/downloads.php#v4">4.4.4</a>. The two releases address a series of + security problems discovered since PHP 5.1.4 and 4.4.3, respectively. These + include the following: +</p> +<ul> +<li>Added missing safe_mode/open_basedir checks inside the error_log(), + file_exists(), imap_open() and imap_reopen() functions.</li> +<li>Fixed overflows inside str_repeat() and wordwrap() functions on 64bit + systems.</li> +<li>Fixed possible open_basedir/safe_mode bypass in cURL extension and on PHP + 5.1.5 with realpath cache.</li> +<li>Fixed overflow in GD extension on invalid GIF images.</li> +<li>Fixed a buffer overflow inside sscanf() function.</li> +<li>Fixed an out of bounds read inside stripos() function.</li> +<li>Fixed memory_limit restriction on 64 bit system.</li> +</ul> +<p> +Further details about this release can be found in the release announcements +(<a href="/release_5_1_5.php">5.1.5</a> and +<a href="/release_4_4_4.php">4.4.4</a>) and the full list of changes is +available in the ChangeLogs (<a href="/ChangeLog-4.php#4.4.3">PHP 4</a>, +<a href="/ChangeLog-4.php#5.1.5">PHP 5</a>). +</p> + +<hr /> + <h1>PHP 4.4.3 Released</h1> <p> <span class="newsdate">[03-Aug-2006]</span> http://cvs.php.net/viewvc.cgi/phpweb/releases.php?r1=1.38&r2=1.39&diff_format=u Index: phpweb/releases.php diff -u phpweb/releases.php:1.38 phpweb/releases.php:1.39 --- phpweb/releases.php:1.38 Thu Aug 3 07:10:14 2006 +++ phpweb/releases.php Thu Aug 17 14:57:45 2006 @@ -1,5 +1,5 @@ <?php -// $Id: releases.php,v 1.38 2006/08/03 07:10:14 derick Exp $ +// $Id: releases.php,v 1.39 2006/08/17 14:57:45 derick Exp $ $_SERVER['BASE_PAGE'] = 'releases.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; @@ -77,6 +77,7 @@ <option value="php-4.4.0.tar.gz">4.4.0</option> <option value="php-4.4.1.tar.gz">4.4.1</option> <option value="php-4.4.2.tar.gz">4.4.2</option> + <option value="php-4.4.3.tar.gz">4.4.3</option> <option value="">--------</option> <option value="php-5.0.0.tar.gz">5.0.0</option> <option value="php-5.0.1.tar.gz">5.0.1</option> @@ -88,6 +89,7 @@ <option value="php-5.1.1.tar.gz">5.1.1</option> <option value="php-5.1.2.tar.gz">5.1.2</option> <option value="php-5.1.3.tar.gz">5.1.3</option> + <option value="php-5.1.4.tar.gz">5.1.4</option> </select> </p> </form> @@ -107,12 +109,47 @@ </p> <a name="v5"></a> +<a name="5.1.4"></a> +<h2>5.1.4</h2> + +<ul> + <li>Released: 04 May 2006</li> + <li>Announcement: <a href="/release_5_1_4.php">English</a></li> + <li><a href="/ChangeLog-5.php#5.1.4">ChangeLog</a></li> + <li> + Download: + <ul> + <li> + <?php download_link('php-5.1.4.tar.bz2','Source (tar.bz2)'); ?><br /> + <span class="md5sum">md5: 66a806161d4a2d3b5153ebe4cd0f2e1c</span> + </li> + <li> + <?php download_link('php-5.1.4.tar.gz','Source (tar.gz)'); ?><br /> + <span class="md5sum">md5: 7c846aa09ec1fe0f54a57c8ba030d9f8</span> + </li> + <li> + <?php download_link('php-5.1.4-Win32.zip','Windows binary'); ?><br /> + <span class="md5sum">md5: bf208201a671fd20a13490dc6f38b344</span> + </li> + <li> + <?php download_link('php-5.1.4-installer.exe','Windows installer'); ?><br /> + <span class="md5sum">md5: 86d83c9f42e281c60a40cf7c6d66db8d</span> + </li> + <li> + <?php download_link('pecl-5.1.4-Win32.zip','Collection of PECL modules for PHP 5.1.4'); ?><br /> + <span class="md5sum">md5: ff5ac6c4db975bc3ff2f3a89b7881c3f</span> + </li> + </ul> + </li> +</ul> + + <a name="5.1.3"></a> <h2>5.1.3</h2> <ul> <li>Released: 12 Jan 2006</li> - <li>Announcement: <a href="/release_5_1_2.php">English</a></li> + <li>Announcement: <a href="/release_5_1_3.php">English</a></li> <li><a href="/ChangeLog-5.php#5.1.3">ChangeLog</a></li> <li> Download: @@ -408,6 +445,36 @@ <hr /> <a name="v4"></a> +<a name="4.4.3"></a> +<h2>4.4.3</h2> + +<ul> + <li>Released: 03 Aug 2006</li> + <li>Announcement: <a href="/release_4.4.3.php">English</a></li> + <li><a href="/ChangeLog-4.php#4.4.3">ChangeLog</a></li> + <li> + Download: + <ul> + <li> + <?php download_link('php-4.4.3.tar.bz2','PHP 4.4.3 (tar.bz2)'); ?> - 03 Aug 2006<br /> + <span class="md5sum">md5: 9542117551c0e79f5bf21f46493094e7</span> + </li> + <li> + <?php download_link('php-4.4.3.tar.gz', 'PHP 4.4.3 (tar.gz)'); ?> - 03 Aug 2006<br /> + <span class="md5sum">md5: f991b9a18ae167c436783bd0976ad749</span> + </li> + <li> + <?php download_link('php-4.4.3-Win32.zip','Windows binary'); ?><br /> + <span class="md5sum">md5: 9355a754c56857d921b3a945a91d729f</span> + </li> + <li> + <?php download_link('php-4.4.3-installer.exe','Windows installer'); ?><br /> + <span class="md5sum">md5: b5b7e1953c62393cff7d7d065fb74e99</span> + </li> + </ul> + </li> +</ul> + <a name="4.4.2"></a> <h2>4.4.2</h2> http://cvs.php.net/viewvc.cgi/phpweb/release_4_4_4.php?view=markup&rev=1.1 Index: phpweb/release_4_4_4.php +++ phpweb/release_4_4_4.php <?php // $Id: release_4_4_4.php,v 1.1 2006/08/17 14:57:45 derick Exp $ $_SERVER['BASE_PAGE'] = 'release_4_4_4.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 4.4.4 Release Announcement"); ?> <h1>PHP 4.4.4 Release Announcement</h1> <p> This release address a series of locally exploitable security problems discovered since PHP 4.4.3. All PHP users are encouraged to upgrade to this release as soon as possible. </p> <p> This release provides the following security fixes: <ul> <li>Added missing safe_mode/open_basedir checks inside the error_log(), file_exists(), imap_open() and imap_reopen() functions.</li> <li>Fixed overflows inside str_repeat() and wordwrap() functions on 64bit systems.</li> <li>Fixed possible open_basedir/safe_mode bypass in cURL extension.</li> <li>Fixed overflow in GD extension on invalid GIF images.</li> <li>Fixed a buffer overflow inside sscanf() function.</li> <li>Fixed memory_limit restriction on 64 bit system.</li> </ul> </p> <p> In addition to the security fixes, both releases include a small number of non-security related bug fixes. </p> <p> For a full list of changes in PHP 4.4.4, see the <a href="/ChangeLog-4.php#4.4.4">ChangeLog</a>. </p> <?php site_footer(); ?>