cvs: phpweb / ChangeLog-5.php index.php /include version.inc /releases 5_2_3.php index.php
| From: | Ilia Alshanetsky | Date: | Thu, 31 May 2007 22:57:31 +0000 |
| Subject: | cvs: phpweb / ChangeLog-5.php index.php /include version.inc /releases 5_2_3.php index.php | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-35559@lists.php.net to get a copy of this message | ||
iliaa Thu May 31 22:57:31 2007 UTC
Added files:
/phpweb/releases 5_2_3.php
Modified files:
/phpweb ChangeLog-5.php index.php
/phpweb/include version.inc
/phpweb/releases index.php
Log:
5.2.3 release
http://cvs.php.net/viewvc.cgi/phpweb/ChangeLog-5.php?r1=1.46&r2=1.47&diff_format=u Index: phpweb/ChangeLog-5.php diff -u phpweb/ChangeLog-5.php:1.46 phpweb/ChangeLog-5.php:1.47 --- phpweb/ChangeLog-5.php:1.46 Wed May 23 18:42:18 2007 +++ phpweb/ChangeLog-5.php Thu May 31 22:57:31 2007 @@ -1,5 +1,5 @@ <?php -// $Id: ChangeLog-5.php,v 1.46 2007/05/23 18:42:18 bjori Exp $ +// $Id: ChangeLog-5.php,v 1.47 2007/05/31 22:57:31 iliaa Exp $ $_SERVER['BASE_PAGE'] = 'ChangeLog-5.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 5 ChangeLog"); @@ -11,6 +11,82 @@ <hr /> +<a name="5.2.3"></a> +<h3>Version 5.2.3</h3> +<b>31-May-2007</b> +<ul> +<li>Security Fixes + <ul> + <li>Fixed an integer overflow inside chunk_split() (by Gerhard Wagner, CVE-2007-2872)</li> + <li>Fixed possible infinite loop in imagecreatefrompng. (by Xavier Roche, CVE-2007-2756)</li> + <li>Fixed ext/filter Email Validation Vulnerability (MOPB-45 by Stefan Esser, CVE-2007-1900)</li> + <li>Fixed bug #41492 (open_basedir/safe_mode bypass inside realpath()) (by bugs dot php dot net at chsc dot dk)</li> + <li>Improved fix for CVE-2007-1887 to work with non-bundled sqlite2 lib.</li> + <li>Added mysql_set_charset() to allow runtime altering of connection encoding.</li> + </ul> +</li> + +<li>Changed CGI install target to php-cgi and 'make install' to install CLI when CGI is selected. (Jani)</li> +<li>Changed JSON maximum nesting depth from 20 to 128. (Rasmus) + +<li>Improved compilation of heredocs and interpolated strings. (Matt, Dmitry)</li> +<li>Optimized out a couple of per-request syscalls. (Rasmus)</li> +<li>Optimized digest generation in md5() and sha1() functions. (Ilia)</li> +<li>Upgraded bundled SQLite 3 to version 3.3.17. (Ilia) + +<li>Addded "max_input_nesting_level" php.ini option to limit nesting level of input variables. Fix for MOPB-03-2007. (Stas)</li> +<li>Added a 4th parameter flag to htmlspecialchars() and htmlentities() that makes the function not encode existing html entities. (Ilia)</li> +<li>Added PDO::FETCH_KEY_PAIR mode that will fetch a 2 column result set into an associated array. (Ilia)</li> +<li>Added CURLOPT_TIMEOUT_MS and CURLOPT_CONNECTTIMEOUT_MS cURL constants. (Sara)</li> +<li>Added --ini switch to CLI that prints out configuration file names. (Marcus)</li> + +<li>Implemented FR <?php bugfix(41416); ?> (getColumnMeta() should also return table name). (Tony) + +<li>Fixed filetype() and linkinfo() processing of symlinks on ZTS systems. (Oliver Block, Tony, Dmitry)</li> +<li>Fixed SOAP extension's handler() to work even when "always_populate_raw_post_data" is off. (Ilia)</li> +<li>Fixed altering $this via argument named "this". (Dmitry)</li> +<li>Fixed PHP CLI usage of php.ini from the binary location. (Hannes)</li> +<li>Fixed segfault in strripos(). (Tony, Joxean Koret)</li> +<li>Fixed gd build when used with freetype 1.x (Pierre, Tony)</li> +<li><?php bugfix(41525); ?> (ReflectionParameter::getPosition() not available). (Marcus)</li> +<li><?php bugfix(41511); ?> (Compile failure under IRIX 6.5.30 building md5.c). (Jani)</li> +<li><?php bugfix(41504); ?> (json_decode() incorrectly decodes JSON arrays with empty string keys). (Ilia)</li> +<li><?php bugfix(41477); ?> (no arginfo about SoapClient::__soapCall()). (Ilia)</li> +<li><?php bugfix(41455); ?> (ext/dba/config.m4 pollutes global $LIBS and $LDFLAGS). (mmarek at suse dot cz, Tony)</li> +<li><?php bugfix(41442); ?> (imagegd2() under output control). (Tony)</li> +<li><?php bugfix(41430); ?> (Fatal error with negative values of maxlen parameter of file_get_contents()). (Tony)</li> +<li><?php bugfix(41423); ?> (PHP assumes wrongly that certain ciphers are enabled in OpenSSL). (Pierre)</li> +<li><?php bugfix(41421); ?> (Uncaught exception from a stream wrapper segfaults). (Tony, Dmitry)</li> +<li><?php bugfix(41403); ?> (json_decode cannot decode floats if localeconv decimal_point is not '.'). (Tony)</li> +<li><?php bugfix(41401); ?> (wrong unary operator precedence). (Stas)</li> +<li><?php bugfix(41394); ?> (dbase_create creates file with corrupted header). (Tony)</li> +<li><?php bugfix(41390); ?> (Clarify error message with invalid protocol scheme). (Scott)</li> +<li><?php bugfix(41378); ?> (fastcgi protocol lacks support for Reason-Phrase in "Status:" header). (anight at eyelinkmedia dot com, Dmitry)</li> +<li><?php bugfix(41374); ?> (whole text concats values of wrong nodes). (Rob)</li> +<li><?php bugfix(41358); ?> (configure cannot determine SSL lib with libcurl >= 7.16.2). (Mike)</li> +<li><?php bugfix(41353); ?> (crash in openssl_pkcs12_read() on invalid input). (Ilia)</li> +<li><?php bugfix(41351); ?> (Invalid opcode with foreach ($a[] as $b)). (Dmitry, Tony)</li> +<li><?php bugfix(41347); ?> (checkdnsrr() segfaults on empty hostname). (Scott)</li> +<li><?php bugfix(41337); ?> (WSDL parsing doesn't ignore non soap bindings). (Dmitry)</li> +<li><?php bugfix(41326); ?> (Writing empty tags with Xmlwriter::WriteElement[ns]) (Pierre)</li> +<li><?php bugfix(41321); ?> (downgrade read errors in getimagesize() to E_NOTICE). (Ilia)</li> +<li><?php bugfix(41304); ?> (compress.zlib temp files left). (Dmitry)</li> +<li><?php bugfix(41293); ?> (Fixed creation of HTTP_RAW_POST_DATA when there is no default post handler). (Ilia)</li> +<li><?php bugfix(41291); ?> (FastCGI does not set SO_REUSEADDR). (fmajid at kefta dot com, Dmitry)</li> +<li><?php bugfix(41287); ?> (Namespace functions don't allow xmlns definition to be optional). (Rob)</li> +<li><?php bugfix(41283); ?> (Bug with deserializing array key that are doubles or floats in wddx). (Ilia)</li> +<li><?php bugfix(41257); ?> (lookupNamespaceURI does not work as expected). (Rob)</li> +<li><?php bugfix(41236); ?> (Regression in timeout handling of non-blocking SSL connections during reads and writes). (Ilia)</li> +<li><?php bugfix(41134); ?> (zend_ts_hash_clean not thread-safe). (marco dot cova at gmail dot com, Tony)</li> +<li><?php bugfix(41097); ?> (ext/soap returning associative array as indexed without using WSDL). (Dmitry)</li> +<li><?php bugfix(41004); ?> (minOccurs="0" and null class member variable). (Dmitry)</li> +<li><?php bugfix(39542); ?> (Behavior of require/include different to < 5.2.0). (Dmitry)</li> + + +</ul> + +<hr /> + <a name="5.2.2"></a> <h3>Version 5.2.2</h3> <b>03-May-2007</b> http://cvs.php.net/viewvc.cgi/phpweb/index.php?r1=1.893&r2=1.894&diff_format=u Index: phpweb/index.php diff -u phpweb/index.php:1.893 phpweb/index.php:1.894 --- phpweb/index.php:1.893 Thu May 31 20:59:24 2007 +++ phpweb/index.php Thu May 31 22:57:31 2007 @@ -232,6 +232,47 @@ ?> <a name="7"></a> +<h1>PHP 5.2.3 Released</h1> +<p> + <span class="newsdate">[01-Jun-2007]</span> +The PHP development team would like to announce the immediate <a +href="/downloads.php#v5">availability of PHP 5.2.3</a>. +This release continues to improve the security and the stability of +the 5.X branch as well as addressing two regressions introduced +by the previous 5.2 releases. These regressions relate to the timeout +handling over non-blocking SSL connections and the lack of +HTTP_RAW_POST_DATA in certain conditions. All users are encouraged to +upgrade to this release. +</p> + +<p> +Further details about the PHP 5.2.3 release can be found in the <a + href="/releases/5_2_3.php">release announcement for 5.2.3</a>, the full list of + changes is available in the <a href="/ChangeLog-5.php#5.2.3">ChangeLog for PHP + 5</a>. +</p> + +<p> +<b>Security Enhancements and Fixes in PHP 5.2.3:</b> +</p> +<ul> + <li>Fixed an integer overflow inside chunk_split() (by Gerhard Wagner, CVE-2007-2872)</li> + <li>Fixed possible infinite loop in imagecreatefrompng. (by Xavier Roche, CVE-2007-2756)</li> + <li>Fixed ext/filter Email Validation Vulnerability (MOPB-45 by Stefan Esser, CVE-2007-1900)</li> + <li>Fixed bug #41492 (open_basedir/safe_mode bypass inside realpath()) (by bugs dot php dot net at chsc dot dk)</li> + <li>Improved fix for CVE-2007-1887 to work with non-bundled sqlite2 lib.</li> + <li>Added mysql_set_charset() to allow runtime altering of connection encoding.</li> +</ul> + +<p> +For users upgrading to PHP 5.2 from PHP 5.0 and PHP 5.1, an upgrade guide is +available <a href="/migration52">here</a>, detailing the changes between +those releases and PHP 5.2.2. +</p> + +<hr /> + +<a name="7"></a> <h1>PHP 5.2.2 and PHP 4.4.7 Released</h1> <p> <span class="newsdate">[03-May-2007]</span> http://cvs.php.net/viewvc.cgi/phpweb/include/version.inc?r1=1.12&r2=1.13&diff_format=u Index: phpweb/include/version.inc diff -u phpweb/include/version.inc:1.12 phpweb/include/version.inc:1.13 --- phpweb/include/version.inc:1.12 Fri May 25 10:47:34 2007 +++ phpweb/include/version.inc Thu May 31 22:57:31 2007 @@ -17,18 +17,18 @@ */ /* PHP 5 Release */ -$PHP_5_VERSION = "5.2.2"; -$PHP_5_DATE = "03 May 2007"; +$PHP_5_VERSION = "5.2.3"; +$PHP_5_DATE = "01 June 2007"; $PHP_5_MD5 = array( - "tar.bz2" => "d084337867d70b50a10322577be0e44e", - "tar.gz" => "7a920d0096900b2b962b21dc5c55fe3c", - "zip" => "634cf45c34f80dfb1284cabf1bbb1417", - "installer" => "eea060523d095ae421409e8a9c343207", - "pecl.zip" => "5d206368799dfbac983d83954328ae3a", - "nts.zip" => "b9abde6658b91ab66acb26eca699b5f6", - "pecl.nts" => "902360747287abaf4c8906efb609f2f8", + "tar.bz2" => "eb50b751c8e1ced05bd012d5a0e4dec3", + "tar.gz" => "df79b04d63fc4c1ccb6d8ea58a9cf3ac", + "zip" => "ff6e5dc212823009e68f26d66d85cbac", + "installer" => "4d042f649d9c264477e1b421c64c6435", + "pecl.zip" => "0480ffaf5a5333e83d90d75cece54748", + "nts.zip" => "3b291d4081af3100b83e39b8aacc444a", + "pecl.nts" => "ddf283dc8a9c49c8d2c5f38ad697c051", ); -$PHP_5_RC = "5.2.3RC1"; +$PHP_5_RC = ""; /* PHP 4 Release */ $PHP_4_VERSION = "4.4.7"; http://cvs.php.net/viewvc.cgi/phpweb/releases/index.php?r1=1.11&r2=1.12&diff_format=u Index: phpweb/releases/index.php diff -u phpweb/releases/index.php:1.11 phpweb/releases/index.php:1.12 --- phpweb/releases/index.php:1.11 Sun May 6 12:17:46 2007 +++ phpweb/releases/index.php Thu May 31 22:57:31 2007 @@ -1,5 +1,5 @@ <?php -// $Id: index.php,v 1.11 2007/05/06 12:17:46 bjori Exp $ +// $Id: index.php,v 1.12 2007/05/31 22:57:31 iliaa Exp $ $_SERVER['BASE_PAGE'] = 'releases/index.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; @@ -97,6 +97,7 @@ <option value="php-5.1.6.tar.gz">5.1.6</option> <option value="php-5.2.0.tar.gz">5.2.0</option> <option value="php-5.2.1.tar.gz">5.2.1</option> + <option value="php-5.2.2.tar.gz">5.2.1</option> </select> </p> </form> @@ -116,6 +117,38 @@ </p> <a name="v5"></a> +<a name="5.2.2"></a> +<h2>5.2.2</h2> + +<ul> + <li>Released: 03 May 2007</li> + <li>Announcement: <a href="/releases/5_2_2.php">English</a></li> + <li><a href="/ChangeLog-5.php#5.2.2">ChangeLog</a></li> + <li> + Download: + <ul> + <li> + <?php download_link('php-5.2.2.tar.bz2','Source (tar.bz2)'); ?><br /> + <span class="md5sum">md5: d084337867d70b50a10322577be0e44e</span> + </li> + <li> + <?php download_link('php-5.2.2.tar.gz','Source (tar.gz)'); ?><br /> + <span class="md5sum">md5: 7a920d0096900b2b962b21dc5c55fe3c</span> + </li> + <li> + <?php download_link('php-5.2.2-Win32.zip','Windows binary'); ?><br /> + <span class="md5sum">md5: 634cf45c34f80dfb1284cabf1bbb1417</span> + </li> + <li> + <?php download_link('pecl-5.2.2-Win32.zip','Collection of PECL modules for PHP 5.2.2'); ?><br /> + <span class="md5sum">md5: 5d206368799dfbac983d83954328ae3a</span> + </li> + </ul> + </li> +</ul> + + +<a name="v5"></a> <a name="5.2.1"></a> <h2>5.2.1</h2> http://cvs.php.net/viewvc.cgi/phpweb/releases/5_2_3.php?view=markup&rev=1.1 Index: phpweb/releases/5_2_3.php +++ phpweb/releases/5_2_3.php <?php // $Id: 5_2_3.php,v 1.1 2007/05/31 22:57:31 iliaa Exp $ $_SERVER['BASE_PAGE'] = 'releases/5_2_3.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 5.2.3 Release Announcement"); ?> <h1>PHP 5.2.3 Release Announcement</h1> <p> The PHP development team would like to announce the immediate availability of PHP 5.2.3. This release continues to improve the security and the stability of the 5.X branch as well as addressing two regressions introduced by the previous 5.2 releases. These regressions relate to the timeout handling over non-blocking SSL connections and the lack of HTTP_RAW_POST_DATA in certain conditions. All users are encouraged to upgrade to this release. </p> <p> <b>Security Enhancements and Fixes in PHP 5.2.3:</b> </p> <ul> <li>Fixed an integer overflow inside chunk_split() (by Gerhard Wagner, CVE-2007-2872)</li> <li>Fixed possible infinite loop in imagecreatefrompng. (by Xavier Roche, CVE-2007-2756)</li> <li>Fixed ext/filter Email Validation Vulnerability (MOPB-45 by Stefan Esser, CVE-2007-1900)</li> <li>Fixed bug #41492 (open_basedir/safe_mode bypass inside realpath()) (by bugs dot php dot net at chsc dot dk)</li> <li>Improved fix for CVE-2007-1887 to work with non-bundled sqlite2 lib.</li> <li>Added mysql_set_charset() to allow runtime altering of connection encoding.</li> </ul> <p> <b>The key improvements of PHP 5.2.3 include:</b> </p> <ul> <li>Improved compilation of heredocs and interpolated strings.</li> <li>Optimized out a couple of per-request syscalls.</li> <li>Optimized digest generation in md5() and sha1() functions.</li> <li>Fixed bug #41236 (Regression in timeout handling of non-blocking SSL connections during reads and writes)</li> <li>Fixed bug #39542 (Behavior of require/include different to < 5.2.0)</li> <li>Fixed bug #41293 (Fixed creation of HTTP_RAW_POST_DATA when there is no default post handler)</li> <li>Fixed bug #41347 (checkdnsrr() segfaults on empty hostname)</li> <li>Fixed bug #41353 (crash in openssl_pkcs12_read() on invalid input)</li> <li>Fixed bug #41403 (json_decode cannot decode floats if localeconv decimal_point is not '.')</li> <li>Fixed bug #41421 (Uncaught exception from a stream wrapper segfaults)</li> <li>Fixed bug #41504 (json_decode() incorrectly decodes JSON arrays with empty string keys).</li> <li>Over 40 bug fixes.</li> </ul> <p> For users upgrading from PHP 5.0 and PHP 5.1, an upgrade guide is available <a href="/UPDATE_5_2.txt">here</a>, detailing the changes between those releases and PHP 5.2.3. </p> <p> For a full list of changes in PHP 5.2.3, see the <a href="/ChangeLog-5.php#5.2.3">ChangeLog</a>. </p> <?php site_footer(); ?>
http://cvs.php.net/viewvc.cgi/phpweb/ChangeLog-5.php?r1=1.46&r2=1.47&diff_format=u Index: phpweb/ChangeLog-5.php diff -u phpweb/ChangeLog-5.php:1.46 phpweb/ChangeLog-5.php:1.47 --- phpweb/ChangeLog-5.php:1.46 Wed May 23 18:42:18 2007 +++ phpweb/ChangeLog-5.php Thu May 31 22:57:31 2007 @@ -1,5 +1,5 @@ <?php -// $Id: ChangeLog-5.php,v 1.46 2007/05/23 18:42:18 bjori Exp $ +// $Id: ChangeLog-5.php,v 1.47 2007/05/31 22:57:31 iliaa Exp $ $_SERVER['BASE_PAGE'] = 'ChangeLog-5.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 5 ChangeLog"); @@ -11,6 +11,82 @@ <hr /> +<a name="5.2.3"></a> +<h3>Version 5.2.3</h3> +<b>31-May-2007</b> +<ul> +<li>Security Fixes + <ul> + <li>Fixed an integer overflow inside chunk_split() (by Gerhard Wagner, CVE-2007-2872)</li> + <li>Fixed possible infinite loop in imagecreatefrompng. (by Xavier Roche, CVE-2007-2756)</li> + <li>Fixed ext/filter Email Validation Vulnerability (MOPB-45 by Stefan Esser, CVE-2007-1900)</li> + <li>Fixed bug #41492 (open_basedir/safe_mode bypass inside realpath()) (by bugs dot php dot net at chsc dot dk)</li> + <li>Improved fix for CVE-2007-1887 to work with non-bundled sqlite2 lib.</li> + <li>Added mysql_set_charset() to allow runtime altering of connection encoding.</li> + </ul> +</li> + +<li>Changed CGI install target to php-cgi and 'make install' to install CLI when CGI is selected. (Jani)</li> +<li>Changed JSON maximum nesting depth from 20 to 128. (Rasmus) + +<li>Improved compilation of heredocs and interpolated strings. (Matt, Dmitry)</li> +<li>Optimized out a couple of per-request syscalls. (Rasmus)</li> +<li>Optimized digest generation in md5() and sha1() functions. (Ilia)</li> +<li>Upgraded bundled SQLite 3 to version 3.3.17. (Ilia) + +<li>Addded "max_input_nesting_level" php.ini option to limit nesting level of input variables. Fix for MOPB-03-2007. (Stas)</li> +<li>Added a 4th parameter flag to htmlspecialchars() and htmlentities() that makes the function not encode existing html entities. (Ilia)</li> +<li>Added PDO::FETCH_KEY_PAIR mode that will fetch a 2 column result set into an associated array. (Ilia)</li> +<li>Added CURLOPT_TIMEOUT_MS and CURLOPT_CONNECTTIMEOUT_MS cURL constants. (Sara)</li> +<li>Added --ini switch to CLI that prints out configuration file names. (Marcus)</li> + +<li>Implemented FR <?php bugfix(41416); ?> (getColumnMeta() should also return table name). (Tony) + +<li>Fixed filetype() and linkinfo() processing of symlinks on ZTS systems. (Oliver Block, Tony, Dmitry)</li> +<li>Fixed SOAP extension's handler() to work even when "always_populate_raw_post_data" is off. (Ilia)</li> +<li>Fixed altering $this via argument named "this". (Dmitry)</li> +<li>Fixed PHP CLI usage of php.ini from the binary location. (Hannes)</li> +<li>Fixed segfault in strripos(). (Tony, Joxean Koret)</li> +<li>Fixed gd build when used with freetype 1.x (Pierre, Tony)</li> +<li><?php bugfix(41525); ?> (ReflectionParameter::getPosition() not available). (Marcus)</li> +<li><?php bugfix(41511); ?> (Compile failure under IRIX 6.5.30 building md5.c). (Jani)</li> +<li><?php bugfix(41504); ?> (json_decode() incorrectly decodes JSON arrays with empty string keys). (Ilia)</li> +<li><?php bugfix(41477); ?> (no arginfo about SoapClient::__soapCall()). (Ilia)</li> +<li><?php bugfix(41455); ?> (ext/dba/config.m4 pollutes global $LIBS and $LDFLAGS). (mmarek at suse dot cz, Tony)</li> +<li><?php bugfix(41442); ?> (imagegd2() under output control). (Tony)</li> +<li><?php bugfix(41430); ?> (Fatal error with negative values of maxlen parameter of file_get_contents()). (Tony)</li> +<li><?php bugfix(41423); ?> (PHP assumes wrongly that certain ciphers are enabled in OpenSSL). (Pierre)</li> +<li><?php bugfix(41421); ?> (Uncaught exception from a stream wrapper segfaults). (Tony, Dmitry)</li> +<li><?php bugfix(41403); ?> (json_decode cannot decode floats if localeconv decimal_point is not '.'). (Tony)</li> +<li><?php bugfix(41401); ?> (wrong unary operator precedence). (Stas)</li> +<li><?php bugfix(41394); ?> (dbase_create creates file with corrupted header). (Tony)</li> +<li><?php bugfix(41390); ?> (Clarify error message with invalid protocol scheme). (Scott)</li> +<li><?php bugfix(41378); ?> (fastcgi protocol lacks support for Reason-Phrase in "Status:" header). (anight at eyelinkmedia dot com, Dmitry)</li> +<li><?php bugfix(41374); ?> (whole text concats values of wrong nodes). (Rob)</li> +<li><?php bugfix(41358); ?> (configure cannot determine SSL lib with libcurl >= 7.16.2). (Mike)</li> +<li><?php bugfix(41353); ?> (crash in openssl_pkcs12_read() on invalid input). (Ilia)</li> +<li><?php bugfix(41351); ?> (Invalid opcode with foreach ($a[] as $b)). (Dmitry, Tony)</li> +<li><?php bugfix(41347); ?> (checkdnsrr() segfaults on empty hostname). (Scott)</li> +<li><?php bugfix(41337); ?> (WSDL parsing doesn't ignore non soap bindings). (Dmitry)</li> +<li><?php bugfix(41326); ?> (Writing empty tags with Xmlwriter::WriteElement[ns]) (Pierre)</li> +<li><?php bugfix(41321); ?> (downgrade read errors in getimagesize() to E_NOTICE). (Ilia)</li> +<li><?php bugfix(41304); ?> (compress.zlib temp files left). (Dmitry)</li> +<li><?php bugfix(41293); ?> (Fixed creation of HTTP_RAW_POST_DATA when there is no default post handler). (Ilia)</li> +<li><?php bugfix(41291); ?> (FastCGI does not set SO_REUSEADDR). (fmajid at kefta dot com, Dmitry)</li> +<li><?php bugfix(41287); ?> (Namespace functions don't allow xmlns definition to be optional). (Rob)</li> +<li><?php bugfix(41283); ?> (Bug with deserializing array key that are doubles or floats in wddx). (Ilia)</li> +<li><?php bugfix(41257); ?> (lookupNamespaceURI does not work as expected). (Rob)</li> +<li><?php bugfix(41236); ?> (Regression in timeout handling of non-blocking SSL connections during reads and writes). (Ilia)</li> +<li><?php bugfix(41134); ?> (zend_ts_hash_clean not thread-safe). (marco dot cova at gmail dot com, Tony)</li> +<li><?php bugfix(41097); ?> (ext/soap returning associative array as indexed without using WSDL). (Dmitry)</li> +<li><?php bugfix(41004); ?> (minOccurs="0" and null class member variable). (Dmitry)</li> +<li><?php bugfix(39542); ?> (Behavior of require/include different to < 5.2.0). (Dmitry)</li> + + +</ul> + +<hr /> + <a name="5.2.2"></a> <h3>Version 5.2.2</h3> <b>03-May-2007</b> http://cvs.php.net/viewvc.cgi/phpweb/index.php?r1=1.893&r2=1.894&diff_format=u Index: phpweb/index.php diff -u phpweb/index.php:1.893 phpweb/index.php:1.894 --- phpweb/index.php:1.893 Thu May 31 20:59:24 2007 +++ phpweb/index.php Thu May 31 22:57:31 2007 @@ -232,6 +232,47 @@ ?> <a name="7"></a> +<h1>PHP 5.2.3 Released</h1> +<p> + <span class="newsdate">[01-Jun-2007]</span> +The PHP development team would like to announce the immediate <a +href="/downloads.php#v5">availability of PHP 5.2.3</a>. +This release continues to improve the security and the stability of +the 5.X branch as well as addressing two regressions introduced +by the previous 5.2 releases. These regressions relate to the timeout +handling over non-blocking SSL connections and the lack of +HTTP_RAW_POST_DATA in certain conditions. All users are encouraged to +upgrade to this release. +</p> + +<p> +Further details about the PHP 5.2.3 release can be found in the <a + href="/releases/5_2_3.php">release announcement for 5.2.3</a>, the full list of + changes is available in the <a href="/ChangeLog-5.php#5.2.3">ChangeLog for PHP + 5</a>. +</p> + +<p> +<b>Security Enhancements and Fixes in PHP 5.2.3:</b> +</p> +<ul> + <li>Fixed an integer overflow inside chunk_split() (by Gerhard Wagner, CVE-2007-2872)</li> + <li>Fixed possible infinite loop in imagecreatefrompng. (by Xavier Roche, CVE-2007-2756)</li> + <li>Fixed ext/filter Email Validation Vulnerability (MOPB-45 by Stefan Esser, CVE-2007-1900)</li> + <li>Fixed bug #41492 (open_basedir/safe_mode bypass inside realpath()) (by bugs dot php dot net at chsc dot dk)</li> + <li>Improved fix for CVE-2007-1887 to work with non-bundled sqlite2 lib.</li> + <li>Added mysql_set_charset() to allow runtime altering of connection encoding.</li> +</ul> + +<p> +For users upgrading to PHP 5.2 from PHP 5.0 and PHP 5.1, an upgrade guide is +available <a href="/migration52">here</a>, detailing the changes between +those releases and PHP 5.2.2. +</p> + +<hr /> + +<a name="7"></a> <h1>PHP 5.2.2 and PHP 4.4.7 Released</h1> <p> <span class="newsdate">[03-May-2007]</span> http://cvs.php.net/viewvc.cgi/phpweb/include/version.inc?r1=1.12&r2=1.13&diff_format=u Index: phpweb/include/version.inc diff -u phpweb/include/version.inc:1.12 phpweb/include/version.inc:1.13 --- phpweb/include/version.inc:1.12 Fri May 25 10:47:34 2007 +++ phpweb/include/version.inc Thu May 31 22:57:31 2007 @@ -17,18 +17,18 @@ */ /* PHP 5 Release */ -$PHP_5_VERSION = "5.2.2"; -$PHP_5_DATE = "03 May 2007"; +$PHP_5_VERSION = "5.2.3"; +$PHP_5_DATE = "01 June 2007"; $PHP_5_MD5 = array( - "tar.bz2" => "d084337867d70b50a10322577be0e44e", - "tar.gz" => "7a920d0096900b2b962b21dc5c55fe3c", - "zip" => "634cf45c34f80dfb1284cabf1bbb1417", - "installer" => "eea060523d095ae421409e8a9c343207", - "pecl.zip" => "5d206368799dfbac983d83954328ae3a", - "nts.zip" => "b9abde6658b91ab66acb26eca699b5f6", - "pecl.nts" => "902360747287abaf4c8906efb609f2f8", + "tar.bz2" => "eb50b751c8e1ced05bd012d5a0e4dec3", + "tar.gz" => "df79b04d63fc4c1ccb6d8ea58a9cf3ac", + "zip" => "ff6e5dc212823009e68f26d66d85cbac", + "installer" => "4d042f649d9c264477e1b421c64c6435", + "pecl.zip" => "0480ffaf5a5333e83d90d75cece54748", + "nts.zip" => "3b291d4081af3100b83e39b8aacc444a", + "pecl.nts" => "ddf283dc8a9c49c8d2c5f38ad697c051", ); -$PHP_5_RC = "5.2.3RC1"; +$PHP_5_RC = ""; /* PHP 4 Release */ $PHP_4_VERSION = "4.4.7"; http://cvs.php.net/viewvc.cgi/phpweb/releases/index.php?r1=1.11&r2=1.12&diff_format=u Index: phpweb/releases/index.php diff -u phpweb/releases/index.php:1.11 phpweb/releases/index.php:1.12 --- phpweb/releases/index.php:1.11 Sun May 6 12:17:46 2007 +++ phpweb/releases/index.php Thu May 31 22:57:31 2007 @@ -1,5 +1,5 @@ <?php -// $Id: index.php,v 1.11 2007/05/06 12:17:46 bjori Exp $ +// $Id: index.php,v 1.12 2007/05/31 22:57:31 iliaa Exp $ $_SERVER['BASE_PAGE'] = 'releases/index.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; @@ -97,6 +97,7 @@ <option value="php-5.1.6.tar.gz">5.1.6</option> <option value="php-5.2.0.tar.gz">5.2.0</option> <option value="php-5.2.1.tar.gz">5.2.1</option> + <option value="php-5.2.2.tar.gz">5.2.1</option> </select> </p> </form> @@ -116,6 +117,38 @@ </p> <a name="v5"></a> +<a name="5.2.2"></a> +<h2>5.2.2</h2> + +<ul> + <li>Released: 03 May 2007</li> + <li>Announcement: <a href="/releases/5_2_2.php">English</a></li> + <li><a href="/ChangeLog-5.php#5.2.2">ChangeLog</a></li> + <li> + Download: + <ul> + <li> + <?php download_link('php-5.2.2.tar.bz2','Source (tar.bz2)'); ?><br /> + <span class="md5sum">md5: d084337867d70b50a10322577be0e44e</span> + </li> + <li> + <?php download_link('php-5.2.2.tar.gz','Source (tar.gz)'); ?><br /> + <span class="md5sum">md5: 7a920d0096900b2b962b21dc5c55fe3c</span> + </li> + <li> + <?php download_link('php-5.2.2-Win32.zip','Windows binary'); ?><br /> + <span class="md5sum">md5: 634cf45c34f80dfb1284cabf1bbb1417</span> + </li> + <li> + <?php download_link('pecl-5.2.2-Win32.zip','Collection of PECL modules for PHP 5.2.2'); ?><br /> + <span class="md5sum">md5: 5d206368799dfbac983d83954328ae3a</span> + </li> + </ul> + </li> +</ul> + + +<a name="v5"></a> <a name="5.2.1"></a> <h2>5.2.1</h2> http://cvs.php.net/viewvc.cgi/phpweb/releases/5_2_3.php?view=markup&rev=1.1 Index: phpweb/releases/5_2_3.php +++ phpweb/releases/5_2_3.php <?php // $Id: 5_2_3.php,v 1.1 2007/05/31 22:57:31 iliaa Exp $ $_SERVER['BASE_PAGE'] = 'releases/5_2_3.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 5.2.3 Release Announcement"); ?> <h1>PHP 5.2.3 Release Announcement</h1> <p> The PHP development team would like to announce the immediate availability of PHP 5.2.3. This release continues to improve the security and the stability of the 5.X branch as well as addressing two regressions introduced by the previous 5.2 releases. These regressions relate to the timeout handling over non-blocking SSL connections and the lack of HTTP_RAW_POST_DATA in certain conditions. All users are encouraged to upgrade to this release. </p> <p> <b>Security Enhancements and Fixes in PHP 5.2.3:</b> </p> <ul> <li>Fixed an integer overflow inside chunk_split() (by Gerhard Wagner, CVE-2007-2872)</li> <li>Fixed possible infinite loop in imagecreatefrompng. (by Xavier Roche, CVE-2007-2756)</li> <li>Fixed ext/filter Email Validation Vulnerability (MOPB-45 by Stefan Esser, CVE-2007-1900)</li> <li>Fixed bug #41492 (open_basedir/safe_mode bypass inside realpath()) (by bugs dot php dot net at chsc dot dk)</li> <li>Improved fix for CVE-2007-1887 to work with non-bundled sqlite2 lib.</li> <li>Added mysql_set_charset() to allow runtime altering of connection encoding.</li> </ul> <p> <b>The key improvements of PHP 5.2.3 include:</b> </p> <ul> <li>Improved compilation of heredocs and interpolated strings.</li> <li>Optimized out a couple of per-request syscalls.</li> <li>Optimized digest generation in md5() and sha1() functions.</li> <li>Fixed bug #41236 (Regression in timeout handling of non-blocking SSL connections during reads and writes)</li> <li>Fixed bug #39542 (Behavior of require/include different to < 5.2.0)</li> <li>Fixed bug #41293 (Fixed creation of HTTP_RAW_POST_DATA when there is no default post handler)</li> <li>Fixed bug #41347 (checkdnsrr() segfaults on empty hostname)</li> <li>Fixed bug #41353 (crash in openssl_pkcs12_read() on invalid input)</li> <li>Fixed bug #41403 (json_decode cannot decode floats if localeconv decimal_point is not '.')</li> <li>Fixed bug #41421 (Uncaught exception from a stream wrapper segfaults)</li> <li>Fixed bug #41504 (json_decode() incorrectly decodes JSON arrays with empty string keys).</li> <li>Over 40 bug fixes.</li> </ul> <p> For users upgrading from PHP 5.0 and PHP 5.1, an upgrade guide is available <a href="/UPDATE_5_2.txt">here</a>, detailing the changes between those releases and PHP 5.2.3. </p> <p> For a full list of changes in PHP 5.2.3, see the <a href="/ChangeLog-5.php#5.2.3">ChangeLog</a>. </p> <?php site_footer(); ?>