com web/windows: Factor out the news entries to separate files: docroot/index.php include/config.php news/2008-09-01-1.php news/2008-10-08-1.php
news/2008-10-23-1.php news/2009-02-19-1.php news/2009-02-26-1.php news/2009-03-10-1.php news/2009-04-07-1.php news/2009-06-18-1.php
news/2009-06-30-1.php news/2009-09-17-1.php news/2009-11-19-1.php news/2010-02-25-1.php news/2010-03-04-1.php news/2011-03-17-1.php
news/2012-03-01-1.php news/2013-06-20-1.p
| From: | Christoph Michael Becker | Date: | Mon, 05 Aug 2019 12:05:16 +0000 |
| Subject: | com web/windows: Factor out the news entries to separate files: docroot/index.php include/config.php news/2008-09-01-1.php news/2008-10-08-1.php news/2008-10-23-1.php news/2009-02-19-1.php news/2009-02-26-1.php news/2009-03-10-1.php news/2009-04-07-1.php news/2009-06-18-1.php news/2009-06-30-1.php news/2009-09-17-1.php news/2009-11-19-1.php news/2010-02-25-1.php news/2010-03-04-1.php news/2011-03-17-1.php news/2012-03-01-1.php news/2013-06-20-1.p |
||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-28279@lists.php.net to get a copy of this message | ||
Commit: a0b0e0b0872bf6c1a69f096a00e08b5ac9f87660
Author: Christoph M. Becker <cmbecker69@gmx.de> Sat, 6 Jul 2019 15:04:59 +0200
Parents: 5fef6957621761006e0d62fc106edc10a189448c
Branches: master
Link: http://git.php.net/?p=web/windows.git;a=commitdiff;h=a0b0e0b0872bf6c1a69f096a00e08b5ac9f87660
Log:
Factor out the news entries to separate files
Changed paths:
M docroot/index.php
M include/config.php
A news/2008-09-01-1.php
A news/2008-10-08-1.php
A news/2008-10-23-1.php
A news/2009-02-19-1.php
A news/2009-02-26-1.php
A news/2009-03-10-1.php
A news/2009-04-07-1.php
A news/2009-06-18-1.php
A news/2009-06-30-1.php
A news/2009-09-17-1.php
A news/2009-11-19-1.php
A news/2010-02-25-1.php
A news/2010-03-04-1.php
A news/2011-03-17-1.php
A news/2012-03-01-1.php
A news/2013-06-20-1.php
A news/2014-04-10-1.php
A news/2015-03-20-1.php
A news/2018-03-08-1.php
A news/2018-03-12-1.php
A news/2018-12-26-1.php
A news/2019-06-04-1.php
diff --git a/docroot/index.php b/docroot/index.php index 8c73f16..b17ef68 100644 --- a/docroot/index.php +++ b/docroot/index.php @@ -31,914 +31,30 @@ include TPL_PATH . 'news_line.php'; <div class="content"> <div class="block"> <!-- .block --> - <div class="info entry"> - <!-- .info --> - <h3 class="summary entry-title">Visual Studio 2019 Builds</h3> - <?php news_date('04-Jun-2019') ?> - <div> - <p>All binary packages we were offering contained "vc#" (for instance, "vc14") in the filename to designate - the Visual Studio version which has been used to build them. This number ("#") has tradionally been - the major number of the respective platform toolset. The preview releases of Visual Studio 2017 shipped - with platform toolset 15.00, so we used "vc15" to mark the files. The first GA release of Visual Studio - 2017, however, shipped with platform toolset 14.10 (to signal the backward compatibility), but the - internal Visual Studio version number stayed 15.00. To avoid confusion with already distributed packages, - we stuck with the "vc15" marker. For our Visual Studio 2019 builds (PHP 7.4 and master) we finally changed - from "vc#" to "vs#" (note the "s"), where the number now designates the major internal Visual Studio - version number. We are planning to stick with this new naming scheme for the foreseeable future. - </p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - <h3 class="summary entry-title">OpenSSL 1.1.1a</h3> - <?php news_date('26-Dec-2018') ?> - <div> - <p>The recent release candidates 7.2.14RC1 and 7.3.1RC1 use the latest OpenSSL 1.1.1 release branch. - Please help testing these release candidates with the regard to the OpenSSL compatibility and report bugs. - This concerns the OpenSSL extension itself as well as the extensions depending on OpenSSL like cURL. - </p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - <h3 class="summary entry-title">The windows.php.net site uses SSL by default</h3> - <?php news_date('12-Mar-2018') ?> - <div> - <p>Thanks to "Let's Encrypt", the site now uses SSL by default. All the non - SSL links are transparently redirected to the SSL locations. - </p> - <p>WinXP users might experience connection issues. It is a high time to switch away - from WinXP to some more recent OS version.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - <h3 class="summary entry-title">AVX builds</h3> - <?php news_date('08-Mar-2018') ?> - <div> - <p>In addition to the usual regular snapshots, the current master builds deliver binaries with - <a href="https://en.wikipedia.org/wiki/Advanced_Vector_Extensions">AVX (Advanced Vector Extensions)</a> support. - AVX is an instruction set available in many modern CPUs. The internal PHP implementation uses these - specific CPU instructions to improve performance. - </p> - - <p>Processors, manufactured after 2011, most likely support AVX. The exact information about the - hardware can be retrieved by using the <a href="https://docs.microsoft.com/en-us/sysinternals/downloads/coreinfo">Coreinfo</a> tool.</p> - - <p>Help us to test these new flavours, any feedback appreciated!</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - <h3 class="summary entry-title">OpenSSL security update</h3> - <?php news_date('20-Mar-2015') ?> - <div> - <p>The <a href="http://openssl.org/news/secadv_20150319.txt">OpenSSL Security Advisory [19 Mar 2015]</a> announces the - availability of the OpenSSL 0.9.8zf and 1.0.1m which fix twelve security vulnerabilities. - The latest PHP releases 5.4.39, 5.5.23 and 5.6.7 already contain the updated OpenSSL library. - All PHP users are strongly encouraged to upgrade to the corresponding patch versions.</p> - - <p>Alternatively, the updated OpenSSL dependency DLLs can be downloaded separately as replacement for the older PHP and Apache versions. - <ul> - <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc9/x86/openssl-0.9.8zf-vc9-x86.zip">https://windows.php.net/downloads/php-sdk/deps/vc9/x86/openssl-0.9.8zf-vc9-x86.zip</a></li> - <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1m-vc11-x86.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1m-vc11-x86.zip</a></li> - <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1m-vc11-x64.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1m-vc11-x64.zip</a></li> - </ul> - </p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - <h3 class="summary entry-title">OpenSSL security update</h3> - <?php news_date('10-Apr-2014') ?> - <div> - <p>The <a href="http://www.openssl.org/news/secadv_20140407.txt">OpenSSL Security Advisory [07 Apr 2014]</a> announces the - availability of the OpenSSL 1.0.1g which fixes CVE-2014-0160. In this regard the latest PHP release 5.5.11 was rebuilt with the OpenSSL 1.0.1g. - All PHP users are strongly encouraged to upgrade to PHP 5.5.11. If you already have downloaded this version before 10-Apr-2014, please redownload. - The existing private keys should be regenerated as soon as possible.</p> - - <p>Alternatively, the updated OpenSSL dependency DLLs can be downloaded separately as replacement for the older PHP versions. Though be aware that - this issue affects only OpenSSL 1.0.x and the DLL packages are only applicable to PHP 5.5 and upper. - <ul> - <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1g-vc11-x86.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1g-vc11-x86.zip</a></li> - <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1g-vc11-x64.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1g-vc11-x64.zip</a></li> - </ul> - - PHP 5.4 and lower is not affected by this issue. - </p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.5.0 Release - Announcement</h3> - <?php news_date('20-Jun-2013') ?> - - <div> - <p> The PHP development team is proud to announce the immediate availability of PHP 5.5.0. - This release includes a large number of new features and bug fixes.</p> - - <p> - <b>The key features of PHP 5.5.0 include:</b> - </p> - <ul> - <li>Added <a href="http://php.net/generators">generators</a> and coroutines.</li> - <li>Added the <a href="http://php.net/exceptions">finally</a> keyword.</li> - <li>Added a <a href="http://php.net/password">simplified password hashing API</a>.</li> - <li>Added <a href="http://php.net/migration55.new-features#migration55.new-features.const-dereferencing">support for constant array/string dereferencing</a>.</li> - <li>Added scalar class name resolution via <a href="http://php.net/oop5.basic#language.oop5.basic.class.class">::class</a>.</li> - <li>Added <a href="http://php.net/migration55.new-features#migration55.new-features.empty">support for using empty() on the result of function calls and other expressions</a>.</li> - <li>Added <a href="http://php.net/migration55.new-features#migration55.new-features.non-scalar-iterator-keys">support for non-scalar Iterator keys in foreach</a>.</li> - <li>Added <a href="http://php.net/foreach#control-structures.foreach.list">support for list() constructs in foreach statements</a>.</li> - <li>Added the <a href="http://php.net/opcache">Zend OPcache</a> extension for opcode caching.</li> - <li>The GD library has been upgraded to version 2.1 adding new functions and improving existing functionality.</li> - <li>A lot more improvements and fixes.</li> - </ul> - <p> - <b>Changes that affect compatibility:</b> - </p> - - <ul> - <li><a href="http://php.net/php_logo_guid">PHP logo GUIDs</a> have been removed.</li> - <li>Windows XP and 2003 support dropped.</li> - <li>Case insensitivity is no longer locale specific. All case insensitive matching for function, class and constant names is now performed in a locale independent manner according to ASCII rules.</li> - </ul> - - <p> - For users upgrading from PHP 5.4, - <a href="http://php.net/migration55">a migration guide is available</a> - detailing the changes between 5.4 and 5.5.0. - </p> - - <p> - For a full list of changes in PHP 5.5.0, see the <a href="http://php.net/ChangeLog-5.php#5.5.0">ChangeLog</a>. - </p> - </div> - - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.4.0 Release - Announcement</h3> - <?php news_date('1-Mar-2012') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team is proud to announce the - immediate availability of PHP <a href= - "http://php.net/downloads.php#v5.4.0">5.4.0</a>. This - release is a major leap forward in the 5.x series, - which includes a large number of new features and bug - fixes.</p> - - <p><b>The key features of PHP 5.4.0 include:</b></p> - - <ul> - <li>New language syntax including <a href= - "http://php.net/traits">Traits</a>, <a href= - "http://docs.php.net/manual/en/language.types.array.php"> - shortened array syntax</a> and <a href= - "http://docs.php.net/manual/en/migration54.new-features.php"> - more</a></li> - - <li>Improved performance and reduced memory - consumption</li> - - <li>Support for multibyte languages now available - in all builds of PHP at the flip of a runtime - switch</li> - - <li><a href= - "http://php.net/manual/en/features.commandline.webserver.php"> - Built-in webserver</a> in CLI mode to simplify - development workflows and testing</li> - - <li>Cleaner code base thanks to the removal of - multiple deprecated language features</li> - - <li>Many more improvements and fixes</li> - </ul> - - <p><b>Changes that affect compatibility:</b></p> - - <ul> - <li><a href= - "http://www.php.net/manual/en/security.globals.php"> - Register globals</a>, <a href= - "http://www.php.net/manual/en/security.magicquotes.php"> - magic quotes</a> and <a href= - "http://www.php.net/manual/en/features.safe-mode.php"> - safe mode</a> were removed</li> - - <li>The <a href= - "http://php.net/manual/en/control-structures.break.php"> - break</a>/<a href= - "http://php.net/manual/en/control-structures.continue.php">continue</a> - $var syntax was removed</li> - - <li>The ini option <a href= - "http://php.net/allow_call_time_pass_reference">allow_call_time_pass_reference</a> was - removed</li> - - <li>The PHP <a href= - "http://www.php.net/manual/en/ini.core.php#ini.default-charset"> - default_charset</a> is now "UTF-8"</li> - </ul> - - <p><b>Extensions moved to <a href= - "http://pecl.php.net">PECL</a>:</b></p> - - <ul> - <li><a href= - "http://www.php.net/manual/en/ref.sqlite.php">ext/sqlite</a> - (<a href= - "http://www.php.net/manual/en/book.sqlite3.php">ext/sqlite3</a> - and <a href= - "http://www.php.net/manual/en/ref.pdo-sqlite.php">ext/pdo_sqlite</a> - are not affected)</li> - </ul> - - <p><b>PHP 5.4 series will be the last versions to - support Windows XP and Windows 2003.</b> We will not - provide binary packages for these Windows versions - anymore after PHP 5.4.</p> - - <p>For users upgrading from PHP 5.3 there is a - migration guide available <a href= - "http://php.net/migration54">here</a>, detailing the - changes between those releases and PHP 5.4.0.</p> - - <p>For a full list of changes in PHP 5.4.0, see the - <a href= - "http://php.net/ChangeLog-5.php#5.4.0">ChangeLog</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.3.6 - Released!</h3> - <?php news_date('17-Mar-2011') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team would like to - announce the immediate availability of PHP - 5.3.6. This release focuses on improving the - stability of the PHP 5.3.x branch with over 60 - bug fixes, some of which are security - related.</p> - - <p><b>Security Enhancements and Fixes in PHP - 5.3.6:</b></p> - - <ul> - <li>Enforce security in the fastcgi protocol - parsing with fpm SAPI.</li> - - <li>Fixed bug #54247 (format-string - vulnerability on Phar). (CVE-2011-1153)</li> - - <li>Fixed bug #54193 (Integer overflow in - shmop_read()). (CVE-2011-1092)</li> - - <li>Fixed bug #54055 (buffer overrun with - high values for precision ini setting).</li> - - <li>Fixed bug #54002 (crash on crafted tag in - exif). (CVE-2011-0708)</li> - - <li>Fixed bug #53885 (ZipArchive segfault - with FL_UNCHANGED on empty archive). - (CVE-2011-0421)</li> - </ul> - - <p><b>Key enhancements in PHP 5.3.6 - include:</b></p> - - <ul> - <li>Upgraded bundled Sqlite3 to version - 3.7.4.</li> - - <li>Upgraded bundled PCRE to version - 8.11.</li> - - <li>Added ability to connect to HTTPS sites - through proxy with basic authentication using - stream_context/http/header/Proxy-Authorization.</li> - - <li>Added options to debug backtrace - functions.</li> - - <li>Changed default value of ini directive - serialize_precision from 100 to 17.</li> - - <li>Fixed Bug #53971 (isset() and empty() - produce apparently spurious runtime - error).</li> - - <li>Fixed Bug #53958 (Closures can't 'use' - shared variables by value and by - reference).</li> - - <li>Fixed bug #53577 (Regression introduced - in 5.3.4 in open_basedir with a trailing - forward slash).</li> - - <li>Over 60 other bug fixes.</li> - </ul> - - <p>Windows users: please mind that we do no - longer provide builds created with Visual - Studio C++ 6. It is impossible to maintain a - high quality and safe build of PHP for Windows - using this unmaintained compiler.</p> - - <p>For Apache SAPIs (php5_apache2_2.dll), be - sure that you use a Visual Studio C++ 9 version - of Apache. We recommend the Apache builds as - provided by <a href= - "http://www.apachelounge.com/">ApacheLounge</a>. - For any other SAPI (CLI, FastCGI via mod_fcgi, - FastCGI with IIS or other FastCGI capable - server), everything works as before. Third - party extension providers must rebuild their - extensions to make them compatible and loadable - with the Visual Studio C++9 builds that we now - provide.</p> - - <p>All PHP users should note that the PHP 5.2 - series is NOT supported anymore. All users are - strongly encouraged to upgrade to PHP - 5.3.6.</p> - - <p>For a full list of changes in PHP 5.3.6, see - the <a href= - "http://www.php.net/ChangeLog-5.php#5.3.6">ChangeLog</a>. - For source and binaries downloads please visit - our <a href="/download/">downloads - page</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.3.2 - released</h3> - <?php news_date('04-Mar-2010') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team is proud to - announce the immediate release of PHP 5.3.2. - This is a maintenance release in the 5.3 - series, which includes a large number of bug - fixes.</p> - - <p><b>Security Enhancements and Fixes in PHP - 5.3.2:</b></p> - - <ul> - <li>Improved LCG entropy. (Rasmus, Samy - Kamkar)</li> - - <li>Fixed safe_mode validation inside - tempnam() when the directory path does not - end with a /). (Martin Jansen)</li> - - <li>Fixed a possible open_basedir/safe_mode - bypass in the session extension identified - by Grzegorz Stachowiak. (Ilia)</li> - </ul> - - <p><b>Key Bug Fixes in PHP 5.3.2 - include:</b></p> - - <ul> - <li>Added support for SHA-256 and SHA-512 - to php's crypt.</li> - - <li>Added protection for $_SESSION from - interrupt corruption and improved - "session.save_path" check.</li> - - <li>Fixed bug #51059 (crypt crashes when - invalid salt are given).</li> - - <li>Fixed bug #50940 Custom content-length - set incorrectly in Apache sapis.</li> - - <li>Fixed bug #50847 (strip_tags() removes - all tags greater then 1023 bytes - long).</li> - - <li>Fixed bug #50723 (Bug in garbage - collector causes crash).</li> - - <li>Fixed bug #50661 (DOMDocument::loadXML - does not allow UTF-16).</li> - - <li>Fixed bug #50632 (filter_input() does - not return default value if the variable - does not exist).</li> - - <li>Fixed bug #50540 (Crash while running - ldap_next_reference test cases).</li> - - <li>Fixed bug #49851 (http wrapper breaks - on 1024 char long headers).</li> - - <li>Over 60 other bug fixes.</li> - </ul> - - <p>The SNMP extension is now available in VC9 - versions. The cURL and MPIR libraries have - been updated.</p> - - <p>For users upgrading from PHP 5.2 there is - a migration guide available <a href= - "http://php.net/migration53">here</a>, - detailing the changes between those releases - and PHP 5.3.</p> - - <p><b>Further information and - downloads:</b></p> - - <p>For a full list of changes in PHP 5.3.2, - see the <a href= - "/ChangeLog-5.php#5.3.2">ChangeLog</a>. For - source downloads please visit our <a href= - "/downloads.php">downloads page</a>, Windows - binaries can be found on <a href= - "https://windows.php.net/download/">windows.php.net/download/</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.13 - released</h3> - <?php news_date('25-Feb-2010') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team would like to - announce the immediate availability of PHP - 5.2.13. This release focuses on improving the - stability of the PHP 5.2.x branch with over - 40 bug fixes, some of which are security - related. All users of PHP 5.2 are encouraged - to upgrade to this release.</p> - - <p><b>Security Enhancements and Fixes in PHP - 5.2.13:</b></p> - - <ul> - <li>Fixed safe_mode validation inside - tempnam() when the directory path does not - end with a /). (Martin Jansen)</li> - - <li>Fixed a possible open_basedir/safe_mode - bypass in session extension identified by - Grzegorz Stachowiak. (Ilia)</li> - - <li>Improved LCG entropy. (Rasmus, Samy - Kamkar)</li> - </ul> - - <p>Further details about the PHP 5.2.13 - release can be found in the <a href= - "http://www.php.net/releases/5_2_13.php">release - announcement</a>, and the full list of - changes are available in the <a href= - "http://www.php.net/ChangeLog-5.php#5.2.13">ChangeLog</a>.</p> - - <p>The libcURL library has been updated to - 7.20.0, which fixes important bugs fixes as - well as a security flaw, see the advisory - <a href= - "http://curl.haxx.se/docs/adv_20100209.html">here</a> - and the full changelog <a href= - "http://curl.haxx.se/changes.html">here</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.3.1 - released</h3> - <?php news_date('19-Nov-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team would like to - announce the immediate availability of PHP - 5.3.1. This release focuses on improving the - stability of the PHP 5.3.x branch with over - 100 bug fixes, some of which are security - related. All users of PHP are encouraged to - upgrade to this release.</p> - - <p><b>Security Enhancements and Fixes in PHP - 5.3.1:</b></p> - - <ul> - <li>Added "max_file_uploads" INI directive, - which can be set to limit the number of - file uploads per-request to 20 by default, - to prevent possible DOS via temporary file - exhaustion.</li> - - <li>Added missing sanity checks around exif - processing.</li> - - <li>Fixed a safe_mode bypass in - tempnam().</li> - - <li>Fixed a open_basedir bypass in - posix_mkfifo().</li> - - <li>Fixed failing - safe_mode_include_dir.</li> - </ul> - - <p>Further details about the PHP 5.3.1 - release can be found in the <a href= - "http://www.php.net/releases/5_3_1.php">release - announcement</a>, and the full list of - changes are available in the <a href= - "http://www.php.net/ChangeLog-5.php#5.3.1">ChangeLog</a>.</p> - - <p>The OpenSSL library has been updated to - 0.9.8l, which fixes important bugs fixes (see - the OpenSSL <a href="http://openssl.org">website</a> for - details.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.11 - released</h3> - <?php news_date('17-Sept-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team would like to - announce the immediate availability of PHP - 5.2.11. This release focuses on improving the - stability of the PHP 5.2.x branch with over - 75 bug fixes, some of which are security - related. All users of PHP 5.2 are encouraged - to upgrade to this release.</p> - - <p>Security Enhancements and Fixes in PHP - 5.2.11:</p> - - <ul> - <li>Fixed certificate validation inside - php_openssl_apply_verification_policy. - (Ryan Sleevi, Ilia)</li> - - <li>Fixed sanity check for the color index - in imagecolortransparent(). (Pierre)</li> - - <li>Added missing sanity checks around exif - processing. (Ilia)</li> - - <li>Fixed bug <a href= - "http://bugs.php.net/44683">#44683</a> - (popen crashes when an invalid mode is - passed). (Pierre)</li> - </ul> - - <p>Key enhancements in PHP 5.2.11 - include:</p> - - <ul> - <li>Fixed regression in cURL extension that - prevented flush of data to output defined - as a file handle.</li> - - <li>A number of fixes for the - FILTER_VALIDATE_EMAIL validation rule</li> - - <li>Fixed bug #49361 (wordwrap() wraps - incorrectly on end of line - boundaries).</li> - - <li>Fixed bug #48696 (ldap_read() segfaults - with invalid parameters)</li> - - <li>Fixed bug #48645 (mb_convert_encoding() - doesn't understand hexadecimal - html-entities).</li> - - <li>Fixed bug #48619 (imap_search ALL - segfaults).</li> - - <li>Fixed bug #48400 (imap crashes when - closing stream opened with OP_PROTOTYPE - flag).</li> - - <li>Fixed bug #47351 (Memory leak in - DateTime).</li> - - <li>Over 60 other bug fixes.</li> - </ul> - - <p>On windows, the cURL library has been - updated to its latest version (7.19.6) to fix - the flaws described <a href= - "http://curl.haxx.se/docs/adv_20090812.html">here</a>.</p> - - <p>Further details about the PHP 5.2.11 - release can be found in the <a href= - "http://www.php.net/releases/5_2_11.php">release - announcement</a>, and the full list of - changes are available in the <a href= - "/ChangeLog-5.php#5.2.11">ChangeLog</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.3.0 - released</h3> - <?php news_date('30-Jun-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team is proud to - announce the immediate release of PHP - <a href="http://php.net/downloads.php#v5.3.0"> - 5.3.0</a>. This release is a major - improvement in the 5.X series, which includes - a large number of new features and bug - fixes.</p> - - <p>Some of the key new features include: - <a href= - "http://php.net/namespaces">namespaces</a>, - <a href="http://php.net/lsb">late static - binding</a>, <a href= - "http://php.net/closures">closures</a>, - optional <a href= - "http://php.net/gc_enable">garbage - collection</a> for cyclic references, new - extensions (like <a href= - "http://php.net/phar">ext/phar</a>, <a href= - "http://php.net/intl">ext/intl</a> and - <a href= - "http://php.net/fileinfo">ext/fileinfo</a>), - over 140 bug fixes and much more.</p> - - <p>For users upgrading from PHP 5.2 there is - a <a href= - "http://php.net/migration53">migration - guide</a> available here, detailing the - changes between those releases and <a href= - "http://php.net/downloads.php#v5.3.0">PHP - 5.3.0</a>.</p> - - <p>Further details about the <a href= - "http://php.net/downloads.php#v5.3.0">PHP - 5.3.0</a> release can be found in the - <a href="http://php.net/releases/5_3_0.php">release - announcement</a>, and the full list of - changes are available in the <a href= - "http://php.net/ChangeLog-5.php">ChangeLog</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.10 - released</h3> - <?php news_date('18-Jun-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team would like to - announce the immediate availability of PHP - 5.2.10. This release focuses on improving the - stability of the PHP 5.2.x branch with over - 100 bug fixes, one of which is security - related. All users of PHP are encouraged to - upgrade to this release.</p> - - <p><strong>Security Enhancements and Fixes in - PHP 5.2.10:</strong></p> - - <ul> - <li>Fixed bug #48378 (exif_read_data() - segfaults on certain corrupted .jpeg - files). (Pierre)</li> - </ul> - - <p>Further details about the PHP 5.2.10 - release can be found in the <a href= - "http://php.net/releases/5_2_10.php">release - announcement</a>, and the full list of - changes are available in the <a href= - "http://php.net/ChangeLog-5.php#5.2.10">ChangeLog</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.9-2 - (Windows) released</h3> - <?php news_date('07-Apr-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP Development Team would like to - announce the availability of a new Windows - build for PHP - PHP 5.2.9-2</p> - - <p>This release focuses on fixing security - flaws in the included OpenSSL library - (CVE-2009-0590, CVE-2009-0591 and - CVE-2009-0789). The security advisory is - available <a href= - "http://openssl.org/news/secadv_20090325.txt"> - here</a>.</p> - - <p>The OpenSSL library has been updated to - 0.9.8k, which includes fixes for these - flaws.</p> - - <p>Note: Only the Windows binaries are - affected. There are no changes to the PHP - sources, therefore no source releases are - necessary.</p> - - <p>Binaries are available in our <a href= - "/download/">downloads page</a></p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.9-1 - (Windows) released</h3> - <?php news_date('10-Mar-2009s') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP Development Team would like to - announce the availability of a new Windows - build of PHP - PHP 5.2.9-1</p> - - <p>This release focuses on fixing a security - flaw introduced by the cURL library - (CVE-2009-0037). Please see the following for - a full description: <a href= - "http://curl.haxx.se/docs/adv_20090303.html">http://curl.haxx.se/docs/adv_20090303.html</a></p> - - <p>Please note that the cURL related function - is disabled when open_basedir or safe_mode - enabled.</p> - - <p>Note: Only the Windows packages are - affected.</p> - - <p>Binaries are available in our <a href= - "/download/">downloads page</a></p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.9 - released</h3> - <?php news_date('26-Feb-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>PHP 5.2.9 is now available. Get it - <a href="/download/">here</a>.</p> - - <p>The OpenSSL library has been updated to - its latest version, 0.9.8j</p> - - <p>This release has been the occasion to - greatly improve the installer, it should now - work smoothly on every supported - platform.</p> - - <p>For the full list of changes, see the - <a href= - "http://www.php.net/releases/5_2_9.php">announcement</a> - .</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.9RC3 - released</h3> - <?php news_date('19-Feb-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>PHP 5.2.9RC3 is now available for testing. - Get it <a href="/qa/">here</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">Installer and - non thread safe builds available for the - snapshots</h3> - <?php news_date('23-Oct-2008') ?> - - <div class="newsImage"></div> - - <div> - <p>The NTS builds and the installers are now - available for all php branches and - builds.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">Snapshots are - now online</h3> - <?php news_date('08-Oct-2008') ?> - - <div class="newsImage"></div> - - <div> - <p>The snapshots are back online, with more - choices and quality builds. The new Visual - c++ 2008 builds are now available for PHP 5.3 - and 6.0!</p> - - <p>x64 experimental snapshots should be - available in the next days</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">New website for - PHP Windows</h3> - <?php news_date('01-Sep-2008') ?> - - <div class="newsImage"></div> - - <div> - <p><br> - The PHP Windows Development team would like - to announce this new website. Here you will - find information specifically related to - Windows, such as downloads, snapshots and - documentation.<br> - <br> - Only the downloads are available for now.</p> - </div> - </div><!-- .info --> - </div><!-- .block --> - + <?php include NEWS_DIR . '2019-06-04-1.php'; ?> + <?php include NEWS_DIR . '2018-12-26-1.php'; ?> + <?php include NEWS_DIR . '2018-03-12-1.php'; ?> + <?php include NEWS_DIR . '2018-03-08-1.php'; ?> + <?php include NEWS_DIR . '2015-03-20-1.php'; ?> + <?php include NEWS_DIR . '2014-04-10-1.php'; ?> + <?php include NEWS_DIR . '2013-06-20-1.php'; ?> + <?php include NEWS_DIR . '2012-03-01-1.php'; ?> + <?php include NEWS_DIR . '2011-03-17-1.php'; ?> + <?php include NEWS_DIR . '2010-03-04-1.php'; ?> + <?php include NEWS_DIR . '2010-02-25-1.php'; ?> + <?php include NEWS_DIR . '2009-11-19-1.php'; ?> + <?php include NEWS_DIR . '2009-09-17-1.php'; ?> + <?php include NEWS_DIR . '2009-06-30-1.php'; ?> + <?php include NEWS_DIR . '2009-06-18-1.php'; ?> + <?php include NEWS_DIR . '2009-04-07-1.php'; ?> + <?php include NEWS_DIR . '2009-03-10-1.php'; ?> + <?php include NEWS_DIR . '2009-02-26-1.php'; ?> + <?php include NEWS_DIR . '2009-02-19-1.php'; ?> + <?php include NEWS_DIR . '2008-10-23-1.php'; ?> + <?php include NEWS_DIR . '2008-10-08-1.php'; ?> + <?php include NEWS_DIR . '2008-09-01-1.php'; ?> + + </div><!-- .block --> <p class="t-center"><!-- <a href="https://windows.php.net/archive/index.php"><strong>News Archive</strong></a> --></p> diff --git a/include/config.php b/include/config.php index a6bfbc2..5004084 100644 --- a/include/config.php +++ b/include/config.php @@ -5,6 +5,7 @@ define('RELEASES_DIR', APP_PATH . 'docroot/downloads/releases/'); define('QA_DIR', APP_PATH . 'docroot/downloads/qa/'); define('DATA_DIR', APP_PATH . '/data/'); define('LIB_DIR', APP_PATH . '/include/'); +define('NEWS_DIR', APP_PATH . '/news/'); define('TPL_PATH', APP_PATH . '/templates/'); define('DOCROOT', APP_PATH . '/docroot'); define('SNAPS_URL', '/downloads/snaps/'); diff --git a/news/2008-09-01-1.php b/news/2008-09-01-1.php new file mode 100644 index 0000000..7c20f22 --- /dev/null +++ b/news/2008-09-01-1.php @@ -0,0 +1,20 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">New website for + PHP Windows</h3> + <?php news_date('01-Sep-2008') ?> + + <div class="newsImage"></div> + + <div> + <p><br> + The PHP Windows Development team would like + to announce this new website. Here you will + find information specifically related to + Windows, such as downloads, snapshots and + documentation.<br> + <br> + Only the downloads are available for now.</p> + </div> +</div><!-- .info --> diff --git a/news/2008-10-08-1.php b/news/2008-10-08-1.php new file mode 100644 index 0000000..cfe6e20 --- /dev/null +++ b/news/2008-10-08-1.php @@ -0,0 +1,19 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">Snapshots are + now online</h3> + <?php news_date('08-Oct-2008') ?> + + <div class="newsImage"></div> + + <div> + <p>The snapshots are back online, with more + choices and quality builds. The new Visual + c++ 2008 builds are now available for PHP 5.3 + and 6.0!</p> + + <p>x64 experimental snapshots should be + available in the next days</p> + </div> +</div><!-- .info --> diff --git a/news/2008-10-23-1.php b/news/2008-10-23-1.php new file mode 100644 index 0000000..9cf6727 --- /dev/null +++ b/news/2008-10-23-1.php @@ -0,0 +1,16 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">Installer and + non thread safe builds available for the + snapshots</h3> + <?php news_date('23-Oct-2008') ?> + + <div class="newsImage"></div> + + <div> + <p>The NTS builds and the installers are now + available for all php branches and + builds.</p> + </div> +</div><!-- .info --> diff --git a/news/2009-02-19-1.php b/news/2009-02-19-1.php new file mode 100644 index 0000000..9abb077 --- /dev/null +++ b/news/2009-02-19-1.php @@ -0,0 +1,14 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.9RC3 + released</h3> + <?php news_date('19-Feb-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>PHP 5.2.9RC3 is now available for testing. + Get it <a href="/qa/">here</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2009-02-26-1.php b/news/2009-02-26-1.php new file mode 100644 index 0000000..bdc3a14 --- /dev/null +++ b/news/2009-02-26-1.php @@ -0,0 +1,27 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.9 + released</h3> + <?php news_date('26-Feb-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>PHP 5.2.9 is now available. Get it + <a href="/download/">here</a>.</p> + + <p>The OpenSSL library has been updated to + its latest version, 0.9.8j</p> + + <p>This release has been the occasion to + greatly improve the installer, it should now + work smoothly on every supported + platform.</p> + + <p>For the full list of changes, see the + <a href= + "http://www.php.net/releases/5_2_9.php">announcement</a> + .</p> + </div> +</div><!-- .info --> diff --git a/news/2009-03-10-1.php b/news/2009-03-10-1.php new file mode 100644 index 0000000..64761fc --- /dev/null +++ b/news/2009-03-10-1.php @@ -0,0 +1,31 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.9-1 + (Windows) released</h3> + <?php news_date('10-Mar-2009s') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP Development Team would like to + announce the availability of a new Windows + build of PHP - PHP 5.2.9-1</p> + + <p>This release focuses on fixing a security + flaw introduced by the cURL library + (CVE-2009-0037). Please see the following for + a full description: <a href= + "http://curl.haxx.se/docs/adv_20090303.html">http://curl.haxx.se/docs/adv_20090303.html</a></p> + + <p>Please note that the cURL related function + is disabled when open_basedir or safe_mode + enabled.</p> + + <p>Note: Only the Windows packages are + affected.</p> + + <p>Binaries are available in our <a href= + "/download/">downloads page</a></p> + </div> +</div><!-- .info --> diff --git a/news/2009-04-07-1.php b/news/2009-04-07-1.php new file mode 100644 index 0000000..5389699 --- /dev/null +++ b/news/2009-04-07-1.php @@ -0,0 +1,35 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.9-2 + (Windows) released</h3> + <?php news_date('07-Apr-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP Development Team would like to + announce the availability of a new Windows + build for PHP - PHP 5.2.9-2</p> + + <p>This release focuses on fixing security + flaws in the included OpenSSL library + (CVE-2009-0590, CVE-2009-0591 and + CVE-2009-0789). The security advisory is + available <a href= + "http://openssl.org/news/secadv_20090325.txt"> + here</a>.</p> + + <p>The OpenSSL library has been updated to + 0.9.8k, which includes fixes for these + flaws.</p> + + <p>Note: Only the Windows binaries are + affected. There are no changes to the PHP + sources, therefore no source releases are + necessary.</p> + + <p>Binaries are available in our <a href= + "/download/">downloads page</a></p> + </div> +</div><!-- .info --> diff --git a/news/2009-06-18-1.php b/news/2009-06-18-1.php new file mode 100644 index 0000000..0369221 --- /dev/null +++ b/news/2009-06-18-1.php @@ -0,0 +1,35 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.10 + released</h3> + <?php news_date('18-Jun-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team would like to + announce the immediate availability of PHP + 5.2.10. This release focuses on improving the + stability of the PHP 5.2.x branch with over + 100 bug fixes, one of which is security + related. All users of PHP are encouraged to + upgrade to this release.</p> + + <p><strong>Security Enhancements and Fixes in + PHP 5.2.10:</strong></p> + + <ul> + <li>Fixed bug #48378 (exif_read_data() + segfaults on certain corrupted .jpeg + files). (Pierre)</li> + </ul> + + <p>Further details about the PHP 5.2.10 + release can be found in the <a href= + "http://php.net/releases/5_2_10.php">release + announcement</a>, and the full list of + changes are available in the <a href= + "http://php.net/ChangeLog-5.php#5.2.10">ChangeLog</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2009-06-30-1.php b/news/2009-06-30-1.php new file mode 100644 index 0000000..255446e --- /dev/null +++ b/news/2009-06-30-1.php @@ -0,0 +1,51 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.3.0 + released</h3> + <?php news_date('30-Jun-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team is proud to + announce the immediate release of PHP + <a href="http://php.net/downloads.php#v5.3.0"> + 5.3.0</a>. This release is a major + improvement in the 5.X series, which includes + a large number of new features and bug + fixes.</p> + + <p>Some of the key new features include: + <a href= + "http://php.net/namespaces">namespaces</a>, + <a href="http://php.net/lsb">late static + binding</a>, <a href= + "http://php.net/closures">closures</a>, + optional <a href= + "http://php.net/gc_enable">garbage + collection</a> for cyclic references, new + extensions (like <a href= + "http://php.net/phar">ext/phar</a>, <a href= + "http://php.net/intl">ext/intl</a> and + <a href= + "http://php.net/fileinfo">ext/fileinfo</a>), + over 140 bug fixes and much more.</p> + + <p>For users upgrading from PHP 5.2 there is + a <a href= + "http://php.net/migration53">migration + guide</a> available here, detailing the + changes between those releases and <a href= + "http://php.net/downloads.php#v5.3.0">PHP + 5.3.0</a>.</p> + + <p>Further details about the <a href= + "http://php.net/downloads.php#v5.3.0">PHP + 5.3.0</a> release can be found in the + <a href="http://php.net/releases/5_3_0.php">release + announcement</a>, and the full list of + changes are available in the <a href= + "http://php.net/ChangeLog-5.php">ChangeLog</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2009-09-17-1.php b/news/2009-09-17-1.php new file mode 100644 index 0000000..4fb7f6b --- /dev/null +++ b/news/2009-09-17-1.php @@ -0,0 +1,86 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.11 + released</h3> + <?php news_date('17-Sept-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team would like to + announce the immediate availability of PHP + 5.2.11. This release focuses on improving the + stability of the PHP 5.2.x branch with over + 75 bug fixes, some of which are security + related. All users of PHP 5.2 are encouraged + to upgrade to this release.</p> + + <p>Security Enhancements and Fixes in PHP + 5.2.11:</p> + + <ul> + <li>Fixed certificate validation inside + php_openssl_apply_verification_policy. + (Ryan Sleevi, Ilia)</li> + + <li>Fixed sanity check for the color index + in imagecolortransparent(). (Pierre)</li> + + <li>Added missing sanity checks around exif + processing. (Ilia)</li> + + <li>Fixed bug <a href= + "http://bugs.php.net/44683">#44683</a> + (popen crashes when an invalid mode is + passed). (Pierre)</li> + </ul> + + <p>Key enhancements in PHP 5.2.11 + include:</p> + + <ul> + <li>Fixed regression in cURL extension that + prevented flush of data to output defined + as a file handle.</li> + + <li>A number of fixes for the + FILTER_VALIDATE_EMAIL validation rule</li> + + <li>Fixed bug #49361 (wordwrap() wraps + incorrectly on end of line + boundaries).</li> + + <li>Fixed bug #48696 (ldap_read() segfaults + with invalid parameters)</li> + + <li>Fixed bug #48645 (mb_convert_encoding() + doesn't understand hexadecimal + html-entities).</li> + + <li>Fixed bug #48619 (imap_search ALL + segfaults).</li> + + <li>Fixed bug #48400 (imap crashes when + closing stream opened with OP_PROTOTYPE + flag).</li> + + <li>Fixed bug #47351 (Memory leak in + DateTime).</li> + + <li>Over 60 other bug fixes.</li> + </ul> + + <p>On windows, the cURL library has been + updated to its latest version (7.19.6) to fix + the flaws described <a href= + "http://curl.haxx.se/docs/adv_20090812.html">here</a>.</p> + + <p>Further details about the PHP 5.2.11 + release can be found in the <a href= + "http://www.php.net/releases/5_2_11.php">release + announcement</a>, and the full list of + changes are available in the <a href= + "/ChangeLog-5.php#5.2.11">ChangeLog</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2009-11-19-1.php b/news/2009-11-19-1.php new file mode 100644 index 0000000..4a234eb --- /dev/null +++ b/news/2009-11-19-1.php @@ -0,0 +1,54 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.3.1 + released</h3> + <?php news_date('19-Nov-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team would like to + announce the immediate availability of PHP + 5.3.1. This release focuses on improving the + stability of the PHP 5.3.x branch with over + 100 bug fixes, some of which are security + related. All users of PHP are encouraged to + upgrade to this release.</p> + + <p><b>Security Enhancements and Fixes in PHP + 5.3.1:</b></p> + + <ul> + <li>Added "max_file_uploads" INI directive, + which can be set to limit the number of + file uploads per-request to 20 by default, + to prevent possible DOS via temporary file + exhaustion.</li> + + <li>Added missing sanity checks around exif + processing.</li> + + <li>Fixed a safe_mode bypass in + tempnam().</li> + + <li>Fixed a open_basedir bypass in + posix_mkfifo().</li> + + <li>Fixed failing + safe_mode_include_dir.</li> + </ul> + + <p>Further details about the PHP 5.3.1 + release can be found in the <a href= + "http://www.php.net/releases/5_3_1.php">release + announcement</a>, and the full list of + changes are available in the <a href= + "http://www.php.net/ChangeLog-5.php#5.3.1">ChangeLog</a>.</p> + + <p>The OpenSSL library has been updated to + 0.9.8l, which fixes important bugs fixes (see + the OpenSSL <a href="http://openssl.org">website</a> for + details.</p> + </div> +</div><!-- .info --> diff --git a/news/2010-02-25-1.php b/news/2010-02-25-1.php new file mode 100644 index 0000000..2568b54 --- /dev/null +++ b/news/2010-02-25-1.php @@ -0,0 +1,50 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.13 + released</h3> + <?php news_date('25-Feb-2010') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team would like to + announce the immediate availability of PHP + 5.2.13. This release focuses on improving the + stability of the PHP 5.2.x branch with over + 40 bug fixes, some of which are security + related. All users of PHP 5.2 are encouraged + to upgrade to this release.</p> + + <p><b>Security Enhancements and Fixes in PHP + 5.2.13:</b></p> + + <ul> + <li>Fixed safe_mode validation inside + tempnam() when the directory path does not + end with a /). (Martin Jansen)</li> + + <li>Fixed a possible open_basedir/safe_mode + bypass in session extension identified by + Grzegorz Stachowiak. (Ilia)</li> + + <li>Improved LCG entropy. (Rasmus, Samy + Kamkar)</li> + </ul> + + <p>Further details about the PHP 5.2.13 + release can be found in the <a href= + "http://www.php.net/releases/5_2_13.php">release + announcement</a>, and the full list of + changes are available in the <a href= + "http://www.php.net/ChangeLog-5.php#5.2.13">ChangeLog</a>.</p> + + <p>The libcURL library has been updated to + 7.20.0, which fixes important bugs fixes as + well as a security flaw, see the advisory + <a href= + "http://curl.haxx.se/docs/adv_20100209.html">here</a> + and the full changelog <a href= + "http://curl.haxx.se/changes.html">here</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2010-03-04-1.php b/news/2010-03-04-1.php new file mode 100644 index 0000000..fb0fc28 --- /dev/null +++ b/news/2010-03-04-1.php @@ -0,0 +1,94 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.3.2 + released</h3> + <?php news_date('04-Mar-2010') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team is proud to + announce the immediate release of PHP 5.3.2. + This is a maintenance release in the 5.3 + series, which includes a large number of bug + fixes.</p> + + <p><b>Security Enhancements and Fixes in PHP + 5.3.2:</b></p> + + <ul> + <li>Improved LCG entropy. (Rasmus, Samy + Kamkar)</li> + + <li>Fixed safe_mode validation inside + tempnam() when the directory path does not + end with a /). (Martin Jansen)</li> + + <li>Fixed a possible open_basedir/safe_mode + bypass in the session extension identified + by Grzegorz Stachowiak. (Ilia)</li> + </ul> + + <p><b>Key Bug Fixes in PHP 5.3.2 + include:</b></p> + + <ul> + <li>Added support for SHA-256 and SHA-512 + to php's crypt.</li> + + <li>Added protection for $_SESSION from + interrupt corruption and improved + "session.save_path" check.</li> + + <li>Fixed bug #51059 (crypt crashes when + invalid salt are given).</li> + + <li>Fixed bug #50940 Custom content-length + set incorrectly in Apache sapis.</li> + + <li>Fixed bug #50847 (strip_tags() removes + all tags greater then 1023 bytes + long).</li> + + <li>Fixed bug #50723 (Bug in garbage + collector causes crash).</li> + + <li>Fixed bug #50661 (DOMDocument::loadXML + does not allow UTF-16).</li> + + <li>Fixed bug #50632 (filter_input() does + not return default value if the variable + does not exist).</li> + + <li>Fixed bug #50540 (Crash while running + ldap_next_reference test cases).</li> + + <li>Fixed bug #49851 (http wrapper breaks + on 1024 char long headers).</li> + + <li>Over 60 other bug fixes.</li> + </ul> + + <p>The SNMP extension is now available in VC9 + versions. The cURL and MPIR libraries have + been updated.</p> + + <p>For users upgrading from PHP 5.2 there is + a migration guide available <a href= + "http://php.net/migration53">here</a>, + detailing the changes between those releases + and PHP 5.3.</p> + + <p><b>Further information and + downloads:</b></p> + + <p>For a full list of changes in PHP 5.3.2, + see the <a href= + "/ChangeLog-5.php#5.3.2">ChangeLog</a>. For + source downloads please visit our <a href= + "/downloads.php">downloads page</a>, Windows + binaries can be found on <a href= + "https://windows.php.net/download/">windows.php.net/download/</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2011-03-17-1.php b/news/2011-03-17-1.php new file mode 100644 index 0000000..0cfcc91 --- /dev/null +++ b/news/2011-03-17-1.php @@ -0,0 +1,108 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.3.6 + Released!</h3> + <?php news_date('17-Mar-2011') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team would like to + announce the immediate availability of PHP + 5.3.6. This release focuses on improving the + stability of the PHP 5.3.x branch with over 60 + bug fixes, some of which are security + related.</p> + + <p><b>Security Enhancements and Fixes in PHP + 5.3.6:</b></p> + + <ul> + <li>Enforce security in the fastcgi protocol + parsing with fpm SAPI.</li> + + <li>Fixed bug #54247 (format-string + vulnerability on Phar). (CVE-2011-1153)</li> + + <li>Fixed bug #54193 (Integer overflow in + shmop_read()). (CVE-2011-1092)</li> + + <li>Fixed bug #54055 (buffer overrun with + high values for precision ini setting).</li> + + <li>Fixed bug #54002 (crash on crafted tag in + exif). (CVE-2011-0708)</li> + + <li>Fixed bug #53885 (ZipArchive segfault + with FL_UNCHANGED on empty archive). + (CVE-2011-0421)</li> + </ul> + + <p><b>Key enhancements in PHP 5.3.6 + include:</b></p> + + <ul> + <li>Upgraded bundled Sqlite3 to version + 3.7.4.</li> + + <li>Upgraded bundled PCRE to version + 8.11.</li> + + <li>Added ability to connect to HTTPS sites + through proxy with basic authentication using + stream_context/http/header/Proxy-Authorization.</li> + + <li>Added options to debug backtrace + functions.</li> + + <li>Changed default value of ini directive + serialize_precision from 100 to 17.</li> + + <li>Fixed Bug #53971 (isset() and empty() + produce apparently spurious runtime + error).</li> + + <li>Fixed Bug #53958 (Closures can't 'use' + shared variables by value and by + reference).</li> + + <li>Fixed bug #53577 (Regression introduced + in 5.3.4 in open_basedir with a trailing + forward slash).</li> + + <li>Over 60 other bug fixes.</li> + </ul> + + <p>Windows users: please mind that we do no + longer provide builds created with Visual + Studio C++ 6. It is impossible to maintain a + high quality and safe build of PHP for Windows + using this unmaintained compiler.</p> + + <p>For Apache SAPIs (php5_apache2_2.dll), be + sure that you use a Visual Studio C++ 9 version + of Apache. We recommend the Apache builds as + provided by <a href= + "http://www.apachelounge.com/">ApacheLounge</a>. + For any other SAPI (CLI, FastCGI via mod_fcgi, + FastCGI with IIS or other FastCGI capable + server), everything works as before. Third + party extension providers must rebuild their + extensions to make them compatible and loadable + with the Visual Studio C++9 builds that we now + provide.</p> + + <p>All PHP users should note that the PHP 5.2 + series is NOT supported anymore. All users are + strongly encouraged to upgrade to PHP + 5.3.6.</p> + + <p>For a full list of changes in PHP 5.3.6, see + the <a href= + "http://www.php.net/ChangeLog-5.php#5.3.6">ChangeLog</a>. + For source and binaries downloads please visit + our <a href="/download/">downloads + page</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2012-03-01-1.php b/news/2012-03-01-1.php new file mode 100644 index 0000000..9343724 --- /dev/null +++ b/news/2012-03-01-1.php @@ -0,0 +1,99 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.4.0 Release + Announcement</h3> + <?php news_date('1-Mar-2012') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team is proud to announce the + immediate availability of PHP <a href= + "http://php.net/downloads.php#v5.4.0">5.4.0</a>. This + release is a major leap forward in the 5.x series, + which includes a large number of new features and bug + fixes.</p> + + <p><b>The key features of PHP 5.4.0 include:</b></p> + + <ul> + <li>New language syntax including <a href= + "http://php.net/traits">Traits</a>, <a href= + "http://docs.php.net/manual/en/language.types.array.php"> + shortened array syntax</a> and <a href= + "http://docs.php.net/manual/en/migration54.new-features.php"> + more</a></li> + + <li>Improved performance and reduced memory + consumption</li> + + <li>Support for multibyte languages now available + in all builds of PHP at the flip of a runtime + switch</li> + + <li><a href= + "http://php.net/manual/en/features.commandline.webserver.php"> + Built-in webserver</a> in CLI mode to simplify + development workflows and testing</li> + + <li>Cleaner code base thanks to the removal of + multiple deprecated language features</li> + + <li>Many more improvements and fixes</li> + </ul> + + <p><b>Changes that affect compatibility:</b></p> + + <ul> + <li><a href= + "http://www.php.net/manual/en/security.globals.php"> + Register globals</a>, <a href= + "http://www.php.net/manual/en/security.magicquotes.php"> + magic quotes</a> and <a href= + "http://www.php.net/manual/en/features.safe-mode.php"> + safe mode</a> were removed</li> + + <li>The <a href= + "http://php.net/manual/en/control-structures.break.php"> + break</a>/<a href= + "http://php.net/manual/en/control-structures.continue.php">continue</a> + $var syntax was removed</li> + + <li>The ini option <a href= + "http://php.net/allow_call_time_pass_reference">allow_call_time_pass_reference</a> was + removed</li> + + <li>The PHP <a href= + "http://www.php.net/manual/en/ini.core.php#ini.default-charset"> + default_charset</a> is now "UTF-8"</li> + </ul> + + <p><b>Extensions moved to <a href= + "http://pecl.php.net">PECL</a>:</b></p> + + <ul> + <li><a href= + "http://www.php.net/manual/en/ref.sqlite.php">ext/sqlite</a> + (<a href= + "http://www.php.net/manual/en/book.sqlite3.php">ext/sqlite3</a> + and <a href= + "http://www.php.net/manual/en/ref.pdo-sqlite.php">ext/pdo_sqlite</a> + are not affected)</li> + </ul> + + <p><b>PHP 5.4 series will be the last versions to + support Windows XP and Windows 2003.</b> We will not + provide binary packages for these Windows versions + anymore after PHP 5.4.</p> + + <p>For users upgrading from PHP 5.3 there is a + migration guide available <a href= + "http://php.net/migration54">here</a>, detailing the + changes between those releases and PHP 5.4.0.</p> + + <p>For a full list of changes in PHP 5.4.0, see the + <a href= + "http://php.net/ChangeLog-5.php#5.4.0">ChangeLog</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2013-06-20-1.php b/news/2013-06-20-1.php new file mode 100644 index 0000000..bcde7ce --- /dev/null +++ b/news/2013-06-20-1.php @@ -0,0 +1,48 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.5.0 Release + Announcement</h3> + <?php news_date('20-Jun-2013') ?> + + <div> + <p> The PHP development team is proud to announce the immediate availability of PHP 5.5.0. + This release includes a large number of new features and bug fixes.</p> + + <p> + <b>The key features of PHP 5.5.0 include:</b> + </p> + <ul> + <li>Added <a href="http://php.net/generators">generators</a> and coroutines.</li> + <li>Added the <a href="http://php.net/exceptions">finally</a> keyword.</li> + <li>Added a <a href="http://php.net/password">simplified password hashing API</a>.</li> + <li>Added <a href="http://php.net/migration55.new-features#migration55.new-features.const-dereferencing">support for constant array/string dereferencing</a>.</li> + <li>Added scalar class name resolution via <a href="http://php.net/oop5.basic#language.oop5.basic.class.class">::class</a>.</li> + <li>Added <a href="http://php.net/migration55.new-features#migration55.new-features.empty">support for using empty() on the result of function calls and other expressions</a>.</li> + <li>Added <a href="http://php.net/migration55.new-features#migration55.new-features.non-scalar-iterator-keys">support for non-scalar Iterator keys in foreach</a>.</li> + <li>Added <a href="http://php.net/foreach#control-structures.foreach.list">support for list() constructs in foreach statements</a>.</li> + <li>Added the <a href="http://php.net/opcache">Zend OPcache</a> extension for opcode caching.</li> + <li>The GD library has been upgraded to version 2.1 adding new functions and improving existing functionality.</li> + <li>A lot more improvements and fixes.</li> + </ul> + <p> + <b>Changes that affect compatibility:</b> + </p> + + <ul> + <li><a href="http://php.net/php_logo_guid">PHP logo GUIDs</a> have been removed.</li> + <li>Windows XP and 2003 support dropped.</li> + <li>Case insensitivity is no longer locale specific. All case insensitive matching for function, class and constant names is now performed in a locale independent manner according to ASCII rules.</li> + </ul> + + <p> + For users upgrading from PHP 5.4, + <a href="http://php.net/migration55">a migration guide is available</a> + detailing the changes between 5.4 and 5.5.0. + </p> + + <p> + For a full list of changes in PHP 5.5.0, see the <a href="http://php.net/ChangeLog-5.php#5.5.0">ChangeLog</a>. + </p> + </div> +</div><!-- .info --> diff --git a/news/2014-04-10-1.php b/news/2014-04-10-1.php new file mode 100644 index 0000000..9849765 --- /dev/null +++ b/news/2014-04-10-1.php @@ -0,0 +1,21 @@ +<div class="info entry"> + <!-- .info --> + <h3 class="summary entry-title">OpenSSL security update</h3> + <?php news_date('10-Apr-2014') ?> + <div> + <p>The <a href="http://www.openssl.org/news/secadv_20140407.txt">OpenSSL Security Advisory [07 Apr 2014]</a> announces the + availability of the OpenSSL 1.0.1g which fixes CVE-2014-0160. In this regard the latest PHP release 5.5.11 was rebuilt with the OpenSSL 1.0.1g. + All PHP users are strongly encouraged to upgrade to PHP 5.5.11. If you already have downloaded this version before 10-Apr-2014, please redownload. + The existing private keys should be regenerated as soon as possible.</p> + + <p>Alternatively, the updated OpenSSL dependency DLLs can be downloaded separately as replacement for the older PHP versions. Though be aware that + this issue affects only OpenSSL 1.0.x and the DLL packages are only applicable to PHP 5.5 and upper.</p> + <ul> + <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1g-vc11-x86.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1g-vc11-x86.zip</a></li> + <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1g-vc11-x64.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1g-vc11-x64.zip</a></li> + </ul> + <p> + PHP 5.4 and lower is not affected by this issue. + </p> + </div> +</div><!-- .info --> diff --git a/news/2015-03-20-1.php b/news/2015-03-20-1.php new file mode 100644 index 0000000..1cf9975 --- /dev/null +++ b/news/2015-03-20-1.php @@ -0,0 +1,18 @@ +<div class="info entry"> + <!-- .info --> + <h3 class="summary entry-title">OpenSSL security update</h3> + <?php news_date('20-Mar-2015') ?> + <div> + <p>The <a href="http://openssl.org/news/secadv_20150319.txt">OpenSSL Security Advisory [19 Mar 2015]</a> announces the + availability of the OpenSSL 0.9.8zf and 1.0.1m which fix twelve security vulnerabilities. + The latest PHP releases 5.4.39, 5.5.23 and 5.6.7 already contain the updated OpenSSL library. + All PHP users are strongly encouraged to upgrade to the corresponding patch versions.</p> + + <p>Alternatively, the updated OpenSSL dependency DLLs can be downloaded separately as replacement for the older PHP and Apache versions.</p> + <ul> + <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc9/x86/openssl-0.9.8zf-vc9-x86.zip">https://windows.php.net/downloads/php-sdk/deps/vc9/x86/openssl-0.9.8zf-vc9-x86.zip</a></li> + <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1m-vc11-x86.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1m-vc11-x86.zip</a></li> + <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1m-vc11-x64.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1m-vc11-x64.zip</a></li> + </ul> + </div> +</div><!-- .info --> diff --git a/news/2018-03-08-1.php b/news/2018-03-08-1.php new file mode 100644 index 0000000..bfbda3c --- /dev/null +++ b/news/2018-03-08-1.php @@ -0,0 +1,18 @@ +<div class="info entry"> + <!-- .info --> + <h3 class="summary entry-title">AVX builds</h3> + <?php news_date('08-Mar-2018') ?> + <div> + <p> + In addition to the usual regular snapshots, the current master builds deliver binaries with + <a href="https://en.wikipedia.org/wiki/Advanced_Vector_Extensions">AVX (Advanced Vector Extensions)</a> support. + AVX is an instruction set available in many modern CPUs. The internal PHP implementation uses these + specific CPU instructions to improve performance. + </p> + + <p>Processors, manufactured after 2011, most likely support AVX. The exact information about the + hardware can be retrieved by using the <a href="https://docs.microsoft.com/en-us/sysinternals/downloads/coreinfo">Coreinfo</a> tool.</p> + + <p>Help us to test these new flavours, any feedback appreciated!</p> + </div> +</div><!-- .info --> diff --git a/news/2018-03-12-1.php b/news/2018-03-12-1.php new file mode 100644 index 0000000..13721ae --- /dev/null +++ b/news/2018-03-12-1.php @@ -0,0 +1,12 @@ +<div class="info entry"> + <!-- .info --> + <h3 class="summary entry-title">The windows.php.net site uses SSL by default</h3> + <?php news_date('12-Mar-2018') ?> + <div> + <p>Thanks to "Let's Encrypt", the site now uses SSL by default. All the non + SSL links are transparently redirected to the SSL locations. + </p> + <p>WinXP users might experience connection issues. It is a high time to switch away + from WinXP to some more recent OS version.</p> + </div> +</div><!-- .info --> diff --git a/news/2018-12-26-1.php b/news/2018-12-26-1.php new file mode 100644 index 0000000..9b28d95 --- /dev/null +++ b/news/2018-12-26-1.php @@ -0,0 +1,12 @@ +<div class="info entry"> + <!-- .info --> + <h3 class="summary entry-title">OpenSSL 1.1.1a</h3> + <?php news_date('26-Dec-2018') ?> + <div> + <p> + The recent release candidates 7.2.14RC1 and 7.3.1RC1 use the latest OpenSSL 1.1.1 release branch. + Please help testing these release candidates with the regard to the OpenSSL compatibility and report bugs. + This concerns the OpenSSL extension itself as well as the extensions depending on OpenSSL like cURL. + </p> + </div> +</div><!-- .info --> diff --git a/news/2019-06-04-1.php b/news/2019-06-04-1.php new file mode 100644 index 0000000..1643f53 --- /dev/null +++ b/news/2019-06-04-1.php @@ -0,0 +1,18 @@ +<div class="info entry"> + <!-- .info --> + <h3 class="summary entry-title">Visual Studio 2019 Builds</h3> + <?php news_date('04-Jun-2019') ?> + <div> + <p> + All binary packages we were offering contained "vc#" (for instance, "vc14") in the filename to designate + the Visual Studio version which has been used to build them. This number ("#") has tradionally been + the major number of the respective platform toolset. The preview releases of Visual Studio 2017 shipped + with platform toolset 15.00, so we used "vc15" to mark the files. The first GA release of Visual Studio + 2017, however, shipped with platform toolset 14.10 (to signal the backward compatibility), but the + internal Visual Studio version number stayed 15.00. To avoid confusion with already distributed packages, + we stuck with the "vc15" marker. For our Visual Studio 2019 builds (PHP 7.4 and master) we finally changed + from "vc#" to "vs#" (note the "s"), where the number now designates the major internal Visual Studio + version number. We are planning to stick with this new naming scheme for the foreseeable future. + </p> + </div> +</div><!-- .info -->
diff --git a/docroot/index.php b/docroot/index.php index 8c73f16..b17ef68 100644 --- a/docroot/index.php +++ b/docroot/index.php @@ -31,914 +31,30 @@ include TPL_PATH . 'news_line.php'; <div class="content"> <div class="block"> <!-- .block --> - <div class="info entry"> - <!-- .info --> - <h3 class="summary entry-title">Visual Studio 2019 Builds</h3> - <?php news_date('04-Jun-2019') ?> - <div> - <p>All binary packages we were offering contained "vc#" (for instance, "vc14") in the filename to designate - the Visual Studio version which has been used to build them. This number ("#") has tradionally been - the major number of the respective platform toolset. The preview releases of Visual Studio 2017 shipped - with platform toolset 15.00, so we used "vc15" to mark the files. The first GA release of Visual Studio - 2017, however, shipped with platform toolset 14.10 (to signal the backward compatibility), but the - internal Visual Studio version number stayed 15.00. To avoid confusion with already distributed packages, - we stuck with the "vc15" marker. For our Visual Studio 2019 builds (PHP 7.4 and master) we finally changed - from "vc#" to "vs#" (note the "s"), where the number now designates the major internal Visual Studio - version number. We are planning to stick with this new naming scheme for the foreseeable future. - </p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - <h3 class="summary entry-title">OpenSSL 1.1.1a</h3> - <?php news_date('26-Dec-2018') ?> - <div> - <p>The recent release candidates 7.2.14RC1 and 7.3.1RC1 use the latest OpenSSL 1.1.1 release branch. - Please help testing these release candidates with the regard to the OpenSSL compatibility and report bugs. - This concerns the OpenSSL extension itself as well as the extensions depending on OpenSSL like cURL. - </p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - <h3 class="summary entry-title">The windows.php.net site uses SSL by default</h3> - <?php news_date('12-Mar-2018') ?> - <div> - <p>Thanks to "Let's Encrypt", the site now uses SSL by default. All the non - SSL links are transparently redirected to the SSL locations. - </p> - <p>WinXP users might experience connection issues. It is a high time to switch away - from WinXP to some more recent OS version.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - <h3 class="summary entry-title">AVX builds</h3> - <?php news_date('08-Mar-2018') ?> - <div> - <p>In addition to the usual regular snapshots, the current master builds deliver binaries with - <a href="https://en.wikipedia.org/wiki/Advanced_Vector_Extensions">AVX (Advanced Vector Extensions)</a> support. - AVX is an instruction set available in many modern CPUs. The internal PHP implementation uses these - specific CPU instructions to improve performance. - </p> - - <p>Processors, manufactured after 2011, most likely support AVX. The exact information about the - hardware can be retrieved by using the <a href="https://docs.microsoft.com/en-us/sysinternals/downloads/coreinfo">Coreinfo</a> tool.</p> - - <p>Help us to test these new flavours, any feedback appreciated!</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - <h3 class="summary entry-title">OpenSSL security update</h3> - <?php news_date('20-Mar-2015') ?> - <div> - <p>The <a href="http://openssl.org/news/secadv_20150319.txt">OpenSSL Security Advisory [19 Mar 2015]</a> announces the - availability of the OpenSSL 0.9.8zf and 1.0.1m which fix twelve security vulnerabilities. - The latest PHP releases 5.4.39, 5.5.23 and 5.6.7 already contain the updated OpenSSL library. - All PHP users are strongly encouraged to upgrade to the corresponding patch versions.</p> - - <p>Alternatively, the updated OpenSSL dependency DLLs can be downloaded separately as replacement for the older PHP and Apache versions. - <ul> - <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc9/x86/openssl-0.9.8zf-vc9-x86.zip">https://windows.php.net/downloads/php-sdk/deps/vc9/x86/openssl-0.9.8zf-vc9-x86.zip</a></li> - <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1m-vc11-x86.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1m-vc11-x86.zip</a></li> - <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1m-vc11-x64.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1m-vc11-x64.zip</a></li> - </ul> - </p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - <h3 class="summary entry-title">OpenSSL security update</h3> - <?php news_date('10-Apr-2014') ?> - <div> - <p>The <a href="http://www.openssl.org/news/secadv_20140407.txt">OpenSSL Security Advisory [07 Apr 2014]</a> announces the - availability of the OpenSSL 1.0.1g which fixes CVE-2014-0160. In this regard the latest PHP release 5.5.11 was rebuilt with the OpenSSL 1.0.1g. - All PHP users are strongly encouraged to upgrade to PHP 5.5.11. If you already have downloaded this version before 10-Apr-2014, please redownload. - The existing private keys should be regenerated as soon as possible.</p> - - <p>Alternatively, the updated OpenSSL dependency DLLs can be downloaded separately as replacement for the older PHP versions. Though be aware that - this issue affects only OpenSSL 1.0.x and the DLL packages are only applicable to PHP 5.5 and upper. - <ul> - <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1g-vc11-x86.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1g-vc11-x86.zip</a></li> - <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1g-vc11-x64.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1g-vc11-x64.zip</a></li> - </ul> - - PHP 5.4 and lower is not affected by this issue. - </p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.5.0 Release - Announcement</h3> - <?php news_date('20-Jun-2013') ?> - - <div> - <p> The PHP development team is proud to announce the immediate availability of PHP 5.5.0. - This release includes a large number of new features and bug fixes.</p> - - <p> - <b>The key features of PHP 5.5.0 include:</b> - </p> - <ul> - <li>Added <a href="http://php.net/generators">generators</a> and coroutines.</li> - <li>Added the <a href="http://php.net/exceptions">finally</a> keyword.</li> - <li>Added a <a href="http://php.net/password">simplified password hashing API</a>.</li> - <li>Added <a href="http://php.net/migration55.new-features#migration55.new-features.const-dereferencing">support for constant array/string dereferencing</a>.</li> - <li>Added scalar class name resolution via <a href="http://php.net/oop5.basic#language.oop5.basic.class.class">::class</a>.</li> - <li>Added <a href="http://php.net/migration55.new-features#migration55.new-features.empty">support for using empty() on the result of function calls and other expressions</a>.</li> - <li>Added <a href="http://php.net/migration55.new-features#migration55.new-features.non-scalar-iterator-keys">support for non-scalar Iterator keys in foreach</a>.</li> - <li>Added <a href="http://php.net/foreach#control-structures.foreach.list">support for list() constructs in foreach statements</a>.</li> - <li>Added the <a href="http://php.net/opcache">Zend OPcache</a> extension for opcode caching.</li> - <li>The GD library has been upgraded to version 2.1 adding new functions and improving existing functionality.</li> - <li>A lot more improvements and fixes.</li> - </ul> - <p> - <b>Changes that affect compatibility:</b> - </p> - - <ul> - <li><a href="http://php.net/php_logo_guid">PHP logo GUIDs</a> have been removed.</li> - <li>Windows XP and 2003 support dropped.</li> - <li>Case insensitivity is no longer locale specific. All case insensitive matching for function, class and constant names is now performed in a locale independent manner according to ASCII rules.</li> - </ul> - - <p> - For users upgrading from PHP 5.4, - <a href="http://php.net/migration55">a migration guide is available</a> - detailing the changes between 5.4 and 5.5.0. - </p> - - <p> - For a full list of changes in PHP 5.5.0, see the <a href="http://php.net/ChangeLog-5.php#5.5.0">ChangeLog</a>. - </p> - </div> - - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.4.0 Release - Announcement</h3> - <?php news_date('1-Mar-2012') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team is proud to announce the - immediate availability of PHP <a href= - "http://php.net/downloads.php#v5.4.0">5.4.0</a>. This - release is a major leap forward in the 5.x series, - which includes a large number of new features and bug - fixes.</p> - - <p><b>The key features of PHP 5.4.0 include:</b></p> - - <ul> - <li>New language syntax including <a href= - "http://php.net/traits">Traits</a>, <a href= - "http://docs.php.net/manual/en/language.types.array.php"> - shortened array syntax</a> and <a href= - "http://docs.php.net/manual/en/migration54.new-features.php"> - more</a></li> - - <li>Improved performance and reduced memory - consumption</li> - - <li>Support for multibyte languages now available - in all builds of PHP at the flip of a runtime - switch</li> - - <li><a href= - "http://php.net/manual/en/features.commandline.webserver.php"> - Built-in webserver</a> in CLI mode to simplify - development workflows and testing</li> - - <li>Cleaner code base thanks to the removal of - multiple deprecated language features</li> - - <li>Many more improvements and fixes</li> - </ul> - - <p><b>Changes that affect compatibility:</b></p> - - <ul> - <li><a href= - "http://www.php.net/manual/en/security.globals.php"> - Register globals</a>, <a href= - "http://www.php.net/manual/en/security.magicquotes.php"> - magic quotes</a> and <a href= - "http://www.php.net/manual/en/features.safe-mode.php"> - safe mode</a> were removed</li> - - <li>The <a href= - "http://php.net/manual/en/control-structures.break.php"> - break</a>/<a href= - "http://php.net/manual/en/control-structures.continue.php">continue</a> - $var syntax was removed</li> - - <li>The ini option <a href= - "http://php.net/allow_call_time_pass_reference">allow_call_time_pass_reference</a> was - removed</li> - - <li>The PHP <a href= - "http://www.php.net/manual/en/ini.core.php#ini.default-charset"> - default_charset</a> is now "UTF-8"</li> - </ul> - - <p><b>Extensions moved to <a href= - "http://pecl.php.net">PECL</a>:</b></p> - - <ul> - <li><a href= - "http://www.php.net/manual/en/ref.sqlite.php">ext/sqlite</a> - (<a href= - "http://www.php.net/manual/en/book.sqlite3.php">ext/sqlite3</a> - and <a href= - "http://www.php.net/manual/en/ref.pdo-sqlite.php">ext/pdo_sqlite</a> - are not affected)</li> - </ul> - - <p><b>PHP 5.4 series will be the last versions to - support Windows XP and Windows 2003.</b> We will not - provide binary packages for these Windows versions - anymore after PHP 5.4.</p> - - <p>For users upgrading from PHP 5.3 there is a - migration guide available <a href= - "http://php.net/migration54">here</a>, detailing the - changes between those releases and PHP 5.4.0.</p> - - <p>For a full list of changes in PHP 5.4.0, see the - <a href= - "http://php.net/ChangeLog-5.php#5.4.0">ChangeLog</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.3.6 - Released!</h3> - <?php news_date('17-Mar-2011') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team would like to - announce the immediate availability of PHP - 5.3.6. This release focuses on improving the - stability of the PHP 5.3.x branch with over 60 - bug fixes, some of which are security - related.</p> - - <p><b>Security Enhancements and Fixes in PHP - 5.3.6:</b></p> - - <ul> - <li>Enforce security in the fastcgi protocol - parsing with fpm SAPI.</li> - - <li>Fixed bug #54247 (format-string - vulnerability on Phar). (CVE-2011-1153)</li> - - <li>Fixed bug #54193 (Integer overflow in - shmop_read()). (CVE-2011-1092)</li> - - <li>Fixed bug #54055 (buffer overrun with - high values for precision ini setting).</li> - - <li>Fixed bug #54002 (crash on crafted tag in - exif). (CVE-2011-0708)</li> - - <li>Fixed bug #53885 (ZipArchive segfault - with FL_UNCHANGED on empty archive). - (CVE-2011-0421)</li> - </ul> - - <p><b>Key enhancements in PHP 5.3.6 - include:</b></p> - - <ul> - <li>Upgraded bundled Sqlite3 to version - 3.7.4.</li> - - <li>Upgraded bundled PCRE to version - 8.11.</li> - - <li>Added ability to connect to HTTPS sites - through proxy with basic authentication using - stream_context/http/header/Proxy-Authorization.</li> - - <li>Added options to debug backtrace - functions.</li> - - <li>Changed default value of ini directive - serialize_precision from 100 to 17.</li> - - <li>Fixed Bug #53971 (isset() and empty() - produce apparently spurious runtime - error).</li> - - <li>Fixed Bug #53958 (Closures can't 'use' - shared variables by value and by - reference).</li> - - <li>Fixed bug #53577 (Regression introduced - in 5.3.4 in open_basedir with a trailing - forward slash).</li> - - <li>Over 60 other bug fixes.</li> - </ul> - - <p>Windows users: please mind that we do no - longer provide builds created with Visual - Studio C++ 6. It is impossible to maintain a - high quality and safe build of PHP for Windows - using this unmaintained compiler.</p> - - <p>For Apache SAPIs (php5_apache2_2.dll), be - sure that you use a Visual Studio C++ 9 version - of Apache. We recommend the Apache builds as - provided by <a href= - "http://www.apachelounge.com/">ApacheLounge</a>. - For any other SAPI (CLI, FastCGI via mod_fcgi, - FastCGI with IIS or other FastCGI capable - server), everything works as before. Third - party extension providers must rebuild their - extensions to make them compatible and loadable - with the Visual Studio C++9 builds that we now - provide.</p> - - <p>All PHP users should note that the PHP 5.2 - series is NOT supported anymore. All users are - strongly encouraged to upgrade to PHP - 5.3.6.</p> - - <p>For a full list of changes in PHP 5.3.6, see - the <a href= - "http://www.php.net/ChangeLog-5.php#5.3.6">ChangeLog</a>. - For source and binaries downloads please visit - our <a href="/download/">downloads - page</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.3.2 - released</h3> - <?php news_date('04-Mar-2010') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team is proud to - announce the immediate release of PHP 5.3.2. - This is a maintenance release in the 5.3 - series, which includes a large number of bug - fixes.</p> - - <p><b>Security Enhancements and Fixes in PHP - 5.3.2:</b></p> - - <ul> - <li>Improved LCG entropy. (Rasmus, Samy - Kamkar)</li> - - <li>Fixed safe_mode validation inside - tempnam() when the directory path does not - end with a /). (Martin Jansen)</li> - - <li>Fixed a possible open_basedir/safe_mode - bypass in the session extension identified - by Grzegorz Stachowiak. (Ilia)</li> - </ul> - - <p><b>Key Bug Fixes in PHP 5.3.2 - include:</b></p> - - <ul> - <li>Added support for SHA-256 and SHA-512 - to php's crypt.</li> - - <li>Added protection for $_SESSION from - interrupt corruption and improved - "session.save_path" check.</li> - - <li>Fixed bug #51059 (crypt crashes when - invalid salt are given).</li> - - <li>Fixed bug #50940 Custom content-length - set incorrectly in Apache sapis.</li> - - <li>Fixed bug #50847 (strip_tags() removes - all tags greater then 1023 bytes - long).</li> - - <li>Fixed bug #50723 (Bug in garbage - collector causes crash).</li> - - <li>Fixed bug #50661 (DOMDocument::loadXML - does not allow UTF-16).</li> - - <li>Fixed bug #50632 (filter_input() does - not return default value if the variable - does not exist).</li> - - <li>Fixed bug #50540 (Crash while running - ldap_next_reference test cases).</li> - - <li>Fixed bug #49851 (http wrapper breaks - on 1024 char long headers).</li> - - <li>Over 60 other bug fixes.</li> - </ul> - - <p>The SNMP extension is now available in VC9 - versions. The cURL and MPIR libraries have - been updated.</p> - - <p>For users upgrading from PHP 5.2 there is - a migration guide available <a href= - "http://php.net/migration53">here</a>, - detailing the changes between those releases - and PHP 5.3.</p> - - <p><b>Further information and - downloads:</b></p> - - <p>For a full list of changes in PHP 5.3.2, - see the <a href= - "/ChangeLog-5.php#5.3.2">ChangeLog</a>. For - source downloads please visit our <a href= - "/downloads.php">downloads page</a>, Windows - binaries can be found on <a href= - "https://windows.php.net/download/">windows.php.net/download/</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.13 - released</h3> - <?php news_date('25-Feb-2010') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team would like to - announce the immediate availability of PHP - 5.2.13. This release focuses on improving the - stability of the PHP 5.2.x branch with over - 40 bug fixes, some of which are security - related. All users of PHP 5.2 are encouraged - to upgrade to this release.</p> - - <p><b>Security Enhancements and Fixes in PHP - 5.2.13:</b></p> - - <ul> - <li>Fixed safe_mode validation inside - tempnam() when the directory path does not - end with a /). (Martin Jansen)</li> - - <li>Fixed a possible open_basedir/safe_mode - bypass in session extension identified by - Grzegorz Stachowiak. (Ilia)</li> - - <li>Improved LCG entropy. (Rasmus, Samy - Kamkar)</li> - </ul> - - <p>Further details about the PHP 5.2.13 - release can be found in the <a href= - "http://www.php.net/releases/5_2_13.php">release - announcement</a>, and the full list of - changes are available in the <a href= - "http://www.php.net/ChangeLog-5.php#5.2.13">ChangeLog</a>.</p> - - <p>The libcURL library has been updated to - 7.20.0, which fixes important bugs fixes as - well as a security flaw, see the advisory - <a href= - "http://curl.haxx.se/docs/adv_20100209.html">here</a> - and the full changelog <a href= - "http://curl.haxx.se/changes.html">here</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.3.1 - released</h3> - <?php news_date('19-Nov-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team would like to - announce the immediate availability of PHP - 5.3.1. This release focuses on improving the - stability of the PHP 5.3.x branch with over - 100 bug fixes, some of which are security - related. All users of PHP are encouraged to - upgrade to this release.</p> - - <p><b>Security Enhancements and Fixes in PHP - 5.3.1:</b></p> - - <ul> - <li>Added "max_file_uploads" INI directive, - which can be set to limit the number of - file uploads per-request to 20 by default, - to prevent possible DOS via temporary file - exhaustion.</li> - - <li>Added missing sanity checks around exif - processing.</li> - - <li>Fixed a safe_mode bypass in - tempnam().</li> - - <li>Fixed a open_basedir bypass in - posix_mkfifo().</li> - - <li>Fixed failing - safe_mode_include_dir.</li> - </ul> - - <p>Further details about the PHP 5.3.1 - release can be found in the <a href= - "http://www.php.net/releases/5_3_1.php">release - announcement</a>, and the full list of - changes are available in the <a href= - "http://www.php.net/ChangeLog-5.php#5.3.1">ChangeLog</a>.</p> - - <p>The OpenSSL library has been updated to - 0.9.8l, which fixes important bugs fixes (see - the OpenSSL <a href="http://openssl.org">website</a> for - details.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.11 - released</h3> - <?php news_date('17-Sept-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team would like to - announce the immediate availability of PHP - 5.2.11. This release focuses on improving the - stability of the PHP 5.2.x branch with over - 75 bug fixes, some of which are security - related. All users of PHP 5.2 are encouraged - to upgrade to this release.</p> - - <p>Security Enhancements and Fixes in PHP - 5.2.11:</p> - - <ul> - <li>Fixed certificate validation inside - php_openssl_apply_verification_policy. - (Ryan Sleevi, Ilia)</li> - - <li>Fixed sanity check for the color index - in imagecolortransparent(). (Pierre)</li> - - <li>Added missing sanity checks around exif - processing. (Ilia)</li> - - <li>Fixed bug <a href= - "http://bugs.php.net/44683">#44683</a> - (popen crashes when an invalid mode is - passed). (Pierre)</li> - </ul> - - <p>Key enhancements in PHP 5.2.11 - include:</p> - - <ul> - <li>Fixed regression in cURL extension that - prevented flush of data to output defined - as a file handle.</li> - - <li>A number of fixes for the - FILTER_VALIDATE_EMAIL validation rule</li> - - <li>Fixed bug #49361 (wordwrap() wraps - incorrectly on end of line - boundaries).</li> - - <li>Fixed bug #48696 (ldap_read() segfaults - with invalid parameters)</li> - - <li>Fixed bug #48645 (mb_convert_encoding() - doesn't understand hexadecimal - html-entities).</li> - - <li>Fixed bug #48619 (imap_search ALL - segfaults).</li> - - <li>Fixed bug #48400 (imap crashes when - closing stream opened with OP_PROTOTYPE - flag).</li> - - <li>Fixed bug #47351 (Memory leak in - DateTime).</li> - - <li>Over 60 other bug fixes.</li> - </ul> - - <p>On windows, the cURL library has been - updated to its latest version (7.19.6) to fix - the flaws described <a href= - "http://curl.haxx.se/docs/adv_20090812.html">here</a>.</p> - - <p>Further details about the PHP 5.2.11 - release can be found in the <a href= - "http://www.php.net/releases/5_2_11.php">release - announcement</a>, and the full list of - changes are available in the <a href= - "/ChangeLog-5.php#5.2.11">ChangeLog</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.3.0 - released</h3> - <?php news_date('30-Jun-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team is proud to - announce the immediate release of PHP - <a href="http://php.net/downloads.php#v5.3.0"> - 5.3.0</a>. This release is a major - improvement in the 5.X series, which includes - a large number of new features and bug - fixes.</p> - - <p>Some of the key new features include: - <a href= - "http://php.net/namespaces">namespaces</a>, - <a href="http://php.net/lsb">late static - binding</a>, <a href= - "http://php.net/closures">closures</a>, - optional <a href= - "http://php.net/gc_enable">garbage - collection</a> for cyclic references, new - extensions (like <a href= - "http://php.net/phar">ext/phar</a>, <a href= - "http://php.net/intl">ext/intl</a> and - <a href= - "http://php.net/fileinfo">ext/fileinfo</a>), - over 140 bug fixes and much more.</p> - - <p>For users upgrading from PHP 5.2 there is - a <a href= - "http://php.net/migration53">migration - guide</a> available here, detailing the - changes between those releases and <a href= - "http://php.net/downloads.php#v5.3.0">PHP - 5.3.0</a>.</p> - - <p>Further details about the <a href= - "http://php.net/downloads.php#v5.3.0">PHP - 5.3.0</a> release can be found in the - <a href="http://php.net/releases/5_3_0.php">release - announcement</a>, and the full list of - changes are available in the <a href= - "http://php.net/ChangeLog-5.php">ChangeLog</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.10 - released</h3> - <?php news_date('18-Jun-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP development team would like to - announce the immediate availability of PHP - 5.2.10. This release focuses on improving the - stability of the PHP 5.2.x branch with over - 100 bug fixes, one of which is security - related. All users of PHP are encouraged to - upgrade to this release.</p> - - <p><strong>Security Enhancements and Fixes in - PHP 5.2.10:</strong></p> - - <ul> - <li>Fixed bug #48378 (exif_read_data() - segfaults on certain corrupted .jpeg - files). (Pierre)</li> - </ul> - - <p>Further details about the PHP 5.2.10 - release can be found in the <a href= - "http://php.net/releases/5_2_10.php">release - announcement</a>, and the full list of - changes are available in the <a href= - "http://php.net/ChangeLog-5.php#5.2.10">ChangeLog</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.9-2 - (Windows) released</h3> - <?php news_date('07-Apr-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP Development Team would like to - announce the availability of a new Windows - build for PHP - PHP 5.2.9-2</p> - - <p>This release focuses on fixing security - flaws in the included OpenSSL library - (CVE-2009-0590, CVE-2009-0591 and - CVE-2009-0789). The security advisory is - available <a href= - "http://openssl.org/news/secadv_20090325.txt"> - here</a>.</p> - - <p>The OpenSSL library has been updated to - 0.9.8k, which includes fixes for these - flaws.</p> - - <p>Note: Only the Windows binaries are - affected. There are no changes to the PHP - sources, therefore no source releases are - necessary.</p> - - <p>Binaries are available in our <a href= - "/download/">downloads page</a></p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.9-1 - (Windows) released</h3> - <?php news_date('10-Mar-2009s') ?> - - <div class="newsImage"></div> - - <div> - <p>The PHP Development Team would like to - announce the availability of a new Windows - build of PHP - PHP 5.2.9-1</p> - - <p>This release focuses on fixing a security - flaw introduced by the cURL library - (CVE-2009-0037). Please see the following for - a full description: <a href= - "http://curl.haxx.se/docs/adv_20090303.html">http://curl.haxx.se/docs/adv_20090303.html</a></p> - - <p>Please note that the cURL related function - is disabled when open_basedir or safe_mode - enabled.</p> - - <p>Note: Only the Windows packages are - affected.</p> - - <p>Binaries are available in our <a href= - "/download/">downloads page</a></p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.9 - released</h3> - <?php news_date('26-Feb-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>PHP 5.2.9 is now available. Get it - <a href="/download/">here</a>.</p> - - <p>The OpenSSL library has been updated to - its latest version, 0.9.8j</p> - - <p>This release has been the occasion to - greatly improve the installer, it should now - work smoothly on every supported - platform.</p> - - <p>For the full list of changes, see the - <a href= - "http://www.php.net/releases/5_2_9.php">announcement</a> - .</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">PHP 5.2.9RC3 - released</h3> - <?php news_date('19-Feb-2009') ?> - - <div class="newsImage"></div> - - <div> - <p>PHP 5.2.9RC3 is now available for testing. - Get it <a href="/qa/">here</a>.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">Installer and - non thread safe builds available for the - snapshots</h3> - <?php news_date('23-Oct-2008') ?> - - <div class="newsImage"></div> - - <div> - <p>The NTS builds and the installers are now - available for all php branches and - builds.</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">Snapshots are - now online</h3> - <?php news_date('08-Oct-2008') ?> - - <div class="newsImage"></div> - - <div> - <p>The snapshots are back online, with more - choices and quality builds. The new Visual - c++ 2008 builds are now available for PHP 5.3 - and 6.0!</p> - - <p>x64 experimental snapshots should be - available in the next days</p> - </div> - </div><!-- .info --> - - <div class="info entry"> - <!-- .info --> - - <h3 class="summary entry-title">New website for - PHP Windows</h3> - <?php news_date('01-Sep-2008') ?> - - <div class="newsImage"></div> - - <div> - <p><br> - The PHP Windows Development team would like - to announce this new website. Here you will - find information specifically related to - Windows, such as downloads, snapshots and - documentation.<br> - <br> - Only the downloads are available for now.</p> - </div> - </div><!-- .info --> - </div><!-- .block --> - + <?php include NEWS_DIR . '2019-06-04-1.php'; ?> + <?php include NEWS_DIR . '2018-12-26-1.php'; ?> + <?php include NEWS_DIR . '2018-03-12-1.php'; ?> + <?php include NEWS_DIR . '2018-03-08-1.php'; ?> + <?php include NEWS_DIR . '2015-03-20-1.php'; ?> + <?php include NEWS_DIR . '2014-04-10-1.php'; ?> + <?php include NEWS_DIR . '2013-06-20-1.php'; ?> + <?php include NEWS_DIR . '2012-03-01-1.php'; ?> + <?php include NEWS_DIR . '2011-03-17-1.php'; ?> + <?php include NEWS_DIR . '2010-03-04-1.php'; ?> + <?php include NEWS_DIR . '2010-02-25-1.php'; ?> + <?php include NEWS_DIR . '2009-11-19-1.php'; ?> + <?php include NEWS_DIR . '2009-09-17-1.php'; ?> + <?php include NEWS_DIR . '2009-06-30-1.php'; ?> + <?php include NEWS_DIR . '2009-06-18-1.php'; ?> + <?php include NEWS_DIR . '2009-04-07-1.php'; ?> + <?php include NEWS_DIR . '2009-03-10-1.php'; ?> + <?php include NEWS_DIR . '2009-02-26-1.php'; ?> + <?php include NEWS_DIR . '2009-02-19-1.php'; ?> + <?php include NEWS_DIR . '2008-10-23-1.php'; ?> + <?php include NEWS_DIR . '2008-10-08-1.php'; ?> + <?php include NEWS_DIR . '2008-09-01-1.php'; ?> + + </div><!-- .block --> <p class="t-center"><!-- <a href="https://windows.php.net/archive/index.php"><strong>News Archive</strong></a> --></p> diff --git a/include/config.php b/include/config.php index a6bfbc2..5004084 100644 --- a/include/config.php +++ b/include/config.php @@ -5,6 +5,7 @@ define('RELEASES_DIR', APP_PATH . 'docroot/downloads/releases/'); define('QA_DIR', APP_PATH . 'docroot/downloads/qa/'); define('DATA_DIR', APP_PATH . '/data/'); define('LIB_DIR', APP_PATH . '/include/'); +define('NEWS_DIR', APP_PATH . '/news/'); define('TPL_PATH', APP_PATH . '/templates/'); define('DOCROOT', APP_PATH . '/docroot'); define('SNAPS_URL', '/downloads/snaps/'); diff --git a/news/2008-09-01-1.php b/news/2008-09-01-1.php new file mode 100644 index 0000000..7c20f22 --- /dev/null +++ b/news/2008-09-01-1.php @@ -0,0 +1,20 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">New website for + PHP Windows</h3> + <?php news_date('01-Sep-2008') ?> + + <div class="newsImage"></div> + + <div> + <p><br> + The PHP Windows Development team would like + to announce this new website. Here you will + find information specifically related to + Windows, such as downloads, snapshots and + documentation.<br> + <br> + Only the downloads are available for now.</p> + </div> +</div><!-- .info --> diff --git a/news/2008-10-08-1.php b/news/2008-10-08-1.php new file mode 100644 index 0000000..cfe6e20 --- /dev/null +++ b/news/2008-10-08-1.php @@ -0,0 +1,19 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">Snapshots are + now online</h3> + <?php news_date('08-Oct-2008') ?> + + <div class="newsImage"></div> + + <div> + <p>The snapshots are back online, with more + choices and quality builds. The new Visual + c++ 2008 builds are now available for PHP 5.3 + and 6.0!</p> + + <p>x64 experimental snapshots should be + available in the next days</p> + </div> +</div><!-- .info --> diff --git a/news/2008-10-23-1.php b/news/2008-10-23-1.php new file mode 100644 index 0000000..9cf6727 --- /dev/null +++ b/news/2008-10-23-1.php @@ -0,0 +1,16 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">Installer and + non thread safe builds available for the + snapshots</h3> + <?php news_date('23-Oct-2008') ?> + + <div class="newsImage"></div> + + <div> + <p>The NTS builds and the installers are now + available for all php branches and + builds.</p> + </div> +</div><!-- .info --> diff --git a/news/2009-02-19-1.php b/news/2009-02-19-1.php new file mode 100644 index 0000000..9abb077 --- /dev/null +++ b/news/2009-02-19-1.php @@ -0,0 +1,14 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.9RC3 + released</h3> + <?php news_date('19-Feb-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>PHP 5.2.9RC3 is now available for testing. + Get it <a href="/qa/">here</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2009-02-26-1.php b/news/2009-02-26-1.php new file mode 100644 index 0000000..bdc3a14 --- /dev/null +++ b/news/2009-02-26-1.php @@ -0,0 +1,27 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.9 + released</h3> + <?php news_date('26-Feb-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>PHP 5.2.9 is now available. Get it + <a href="/download/">here</a>.</p> + + <p>The OpenSSL library has been updated to + its latest version, 0.9.8j</p> + + <p>This release has been the occasion to + greatly improve the installer, it should now + work smoothly on every supported + platform.</p> + + <p>For the full list of changes, see the + <a href= + "http://www.php.net/releases/5_2_9.php">announcement</a> + .</p> + </div> +</div><!-- .info --> diff --git a/news/2009-03-10-1.php b/news/2009-03-10-1.php new file mode 100644 index 0000000..64761fc --- /dev/null +++ b/news/2009-03-10-1.php @@ -0,0 +1,31 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.9-1 + (Windows) released</h3> + <?php news_date('10-Mar-2009s') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP Development Team would like to + announce the availability of a new Windows + build of PHP - PHP 5.2.9-1</p> + + <p>This release focuses on fixing a security + flaw introduced by the cURL library + (CVE-2009-0037). Please see the following for + a full description: <a href= + "http://curl.haxx.se/docs/adv_20090303.html">http://curl.haxx.se/docs/adv_20090303.html</a></p> + + <p>Please note that the cURL related function + is disabled when open_basedir or safe_mode + enabled.</p> + + <p>Note: Only the Windows packages are + affected.</p> + + <p>Binaries are available in our <a href= + "/download/">downloads page</a></p> + </div> +</div><!-- .info --> diff --git a/news/2009-04-07-1.php b/news/2009-04-07-1.php new file mode 100644 index 0000000..5389699 --- /dev/null +++ b/news/2009-04-07-1.php @@ -0,0 +1,35 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.9-2 + (Windows) released</h3> + <?php news_date('07-Apr-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP Development Team would like to + announce the availability of a new Windows + build for PHP - PHP 5.2.9-2</p> + + <p>This release focuses on fixing security + flaws in the included OpenSSL library + (CVE-2009-0590, CVE-2009-0591 and + CVE-2009-0789). The security advisory is + available <a href= + "http://openssl.org/news/secadv_20090325.txt"> + here</a>.</p> + + <p>The OpenSSL library has been updated to + 0.9.8k, which includes fixes for these + flaws.</p> + + <p>Note: Only the Windows binaries are + affected. There are no changes to the PHP + sources, therefore no source releases are + necessary.</p> + + <p>Binaries are available in our <a href= + "/download/">downloads page</a></p> + </div> +</div><!-- .info --> diff --git a/news/2009-06-18-1.php b/news/2009-06-18-1.php new file mode 100644 index 0000000..0369221 --- /dev/null +++ b/news/2009-06-18-1.php @@ -0,0 +1,35 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.10 + released</h3> + <?php news_date('18-Jun-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team would like to + announce the immediate availability of PHP + 5.2.10. This release focuses on improving the + stability of the PHP 5.2.x branch with over + 100 bug fixes, one of which is security + related. All users of PHP are encouraged to + upgrade to this release.</p> + + <p><strong>Security Enhancements and Fixes in + PHP 5.2.10:</strong></p> + + <ul> + <li>Fixed bug #48378 (exif_read_data() + segfaults on certain corrupted .jpeg + files). (Pierre)</li> + </ul> + + <p>Further details about the PHP 5.2.10 + release can be found in the <a href= + "http://php.net/releases/5_2_10.php">release + announcement</a>, and the full list of + changes are available in the <a href= + "http://php.net/ChangeLog-5.php#5.2.10">ChangeLog</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2009-06-30-1.php b/news/2009-06-30-1.php new file mode 100644 index 0000000..255446e --- /dev/null +++ b/news/2009-06-30-1.php @@ -0,0 +1,51 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.3.0 + released</h3> + <?php news_date('30-Jun-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team is proud to + announce the immediate release of PHP + <a href="http://php.net/downloads.php#v5.3.0"> + 5.3.0</a>. This release is a major + improvement in the 5.X series, which includes + a large number of new features and bug + fixes.</p> + + <p>Some of the key new features include: + <a href= + "http://php.net/namespaces">namespaces</a>, + <a href="http://php.net/lsb">late static + binding</a>, <a href= + "http://php.net/closures">closures</a>, + optional <a href= + "http://php.net/gc_enable">garbage + collection</a> for cyclic references, new + extensions (like <a href= + "http://php.net/phar">ext/phar</a>, <a href= + "http://php.net/intl">ext/intl</a> and + <a href= + "http://php.net/fileinfo">ext/fileinfo</a>), + over 140 bug fixes and much more.</p> + + <p>For users upgrading from PHP 5.2 there is + a <a href= + "http://php.net/migration53">migration + guide</a> available here, detailing the + changes between those releases and <a href= + "http://php.net/downloads.php#v5.3.0">PHP + 5.3.0</a>.</p> + + <p>Further details about the <a href= + "http://php.net/downloads.php#v5.3.0">PHP + 5.3.0</a> release can be found in the + <a href="http://php.net/releases/5_3_0.php">release + announcement</a>, and the full list of + changes are available in the <a href= + "http://php.net/ChangeLog-5.php">ChangeLog</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2009-09-17-1.php b/news/2009-09-17-1.php new file mode 100644 index 0000000..4fb7f6b --- /dev/null +++ b/news/2009-09-17-1.php @@ -0,0 +1,86 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.11 + released</h3> + <?php news_date('17-Sept-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team would like to + announce the immediate availability of PHP + 5.2.11. This release focuses on improving the + stability of the PHP 5.2.x branch with over + 75 bug fixes, some of which are security + related. All users of PHP 5.2 are encouraged + to upgrade to this release.</p> + + <p>Security Enhancements and Fixes in PHP + 5.2.11:</p> + + <ul> + <li>Fixed certificate validation inside + php_openssl_apply_verification_policy. + (Ryan Sleevi, Ilia)</li> + + <li>Fixed sanity check for the color index + in imagecolortransparent(). (Pierre)</li> + + <li>Added missing sanity checks around exif + processing. (Ilia)</li> + + <li>Fixed bug <a href= + "http://bugs.php.net/44683">#44683</a> + (popen crashes when an invalid mode is + passed). (Pierre)</li> + </ul> + + <p>Key enhancements in PHP 5.2.11 + include:</p> + + <ul> + <li>Fixed regression in cURL extension that + prevented flush of data to output defined + as a file handle.</li> + + <li>A number of fixes for the + FILTER_VALIDATE_EMAIL validation rule</li> + + <li>Fixed bug #49361 (wordwrap() wraps + incorrectly on end of line + boundaries).</li> + + <li>Fixed bug #48696 (ldap_read() segfaults + with invalid parameters)</li> + + <li>Fixed bug #48645 (mb_convert_encoding() + doesn't understand hexadecimal + html-entities).</li> + + <li>Fixed bug #48619 (imap_search ALL + segfaults).</li> + + <li>Fixed bug #48400 (imap crashes when + closing stream opened with OP_PROTOTYPE + flag).</li> + + <li>Fixed bug #47351 (Memory leak in + DateTime).</li> + + <li>Over 60 other bug fixes.</li> + </ul> + + <p>On windows, the cURL library has been + updated to its latest version (7.19.6) to fix + the flaws described <a href= + "http://curl.haxx.se/docs/adv_20090812.html">here</a>.</p> + + <p>Further details about the PHP 5.2.11 + release can be found in the <a href= + "http://www.php.net/releases/5_2_11.php">release + announcement</a>, and the full list of + changes are available in the <a href= + "/ChangeLog-5.php#5.2.11">ChangeLog</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2009-11-19-1.php b/news/2009-11-19-1.php new file mode 100644 index 0000000..4a234eb --- /dev/null +++ b/news/2009-11-19-1.php @@ -0,0 +1,54 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.3.1 + released</h3> + <?php news_date('19-Nov-2009') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team would like to + announce the immediate availability of PHP + 5.3.1. This release focuses on improving the + stability of the PHP 5.3.x branch with over + 100 bug fixes, some of which are security + related. All users of PHP are encouraged to + upgrade to this release.</p> + + <p><b>Security Enhancements and Fixes in PHP + 5.3.1:</b></p> + + <ul> + <li>Added "max_file_uploads" INI directive, + which can be set to limit the number of + file uploads per-request to 20 by default, + to prevent possible DOS via temporary file + exhaustion.</li> + + <li>Added missing sanity checks around exif + processing.</li> + + <li>Fixed a safe_mode bypass in + tempnam().</li> + + <li>Fixed a open_basedir bypass in + posix_mkfifo().</li> + + <li>Fixed failing + safe_mode_include_dir.</li> + </ul> + + <p>Further details about the PHP 5.3.1 + release can be found in the <a href= + "http://www.php.net/releases/5_3_1.php">release + announcement</a>, and the full list of + changes are available in the <a href= + "http://www.php.net/ChangeLog-5.php#5.3.1">ChangeLog</a>.</p> + + <p>The OpenSSL library has been updated to + 0.9.8l, which fixes important bugs fixes (see + the OpenSSL <a href="http://openssl.org">website</a> for + details.</p> + </div> +</div><!-- .info --> diff --git a/news/2010-02-25-1.php b/news/2010-02-25-1.php new file mode 100644 index 0000000..2568b54 --- /dev/null +++ b/news/2010-02-25-1.php @@ -0,0 +1,50 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.2.13 + released</h3> + <?php news_date('25-Feb-2010') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team would like to + announce the immediate availability of PHP + 5.2.13. This release focuses on improving the + stability of the PHP 5.2.x branch with over + 40 bug fixes, some of which are security + related. All users of PHP 5.2 are encouraged + to upgrade to this release.</p> + + <p><b>Security Enhancements and Fixes in PHP + 5.2.13:</b></p> + + <ul> + <li>Fixed safe_mode validation inside + tempnam() when the directory path does not + end with a /). (Martin Jansen)</li> + + <li>Fixed a possible open_basedir/safe_mode + bypass in session extension identified by + Grzegorz Stachowiak. (Ilia)</li> + + <li>Improved LCG entropy. (Rasmus, Samy + Kamkar)</li> + </ul> + + <p>Further details about the PHP 5.2.13 + release can be found in the <a href= + "http://www.php.net/releases/5_2_13.php">release + announcement</a>, and the full list of + changes are available in the <a href= + "http://www.php.net/ChangeLog-5.php#5.2.13">ChangeLog</a>.</p> + + <p>The libcURL library has been updated to + 7.20.0, which fixes important bugs fixes as + well as a security flaw, see the advisory + <a href= + "http://curl.haxx.se/docs/adv_20100209.html">here</a> + and the full changelog <a href= + "http://curl.haxx.se/changes.html">here</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2010-03-04-1.php b/news/2010-03-04-1.php new file mode 100644 index 0000000..fb0fc28 --- /dev/null +++ b/news/2010-03-04-1.php @@ -0,0 +1,94 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.3.2 + released</h3> + <?php news_date('04-Mar-2010') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team is proud to + announce the immediate release of PHP 5.3.2. + This is a maintenance release in the 5.3 + series, which includes a large number of bug + fixes.</p> + + <p><b>Security Enhancements and Fixes in PHP + 5.3.2:</b></p> + + <ul> + <li>Improved LCG entropy. (Rasmus, Samy + Kamkar)</li> + + <li>Fixed safe_mode validation inside + tempnam() when the directory path does not + end with a /). (Martin Jansen)</li> + + <li>Fixed a possible open_basedir/safe_mode + bypass in the session extension identified + by Grzegorz Stachowiak. (Ilia)</li> + </ul> + + <p><b>Key Bug Fixes in PHP 5.3.2 + include:</b></p> + + <ul> + <li>Added support for SHA-256 and SHA-512 + to php's crypt.</li> + + <li>Added protection for $_SESSION from + interrupt corruption and improved + "session.save_path" check.</li> + + <li>Fixed bug #51059 (crypt crashes when + invalid salt are given).</li> + + <li>Fixed bug #50940 Custom content-length + set incorrectly in Apache sapis.</li> + + <li>Fixed bug #50847 (strip_tags() removes + all tags greater then 1023 bytes + long).</li> + + <li>Fixed bug #50723 (Bug in garbage + collector causes crash).</li> + + <li>Fixed bug #50661 (DOMDocument::loadXML + does not allow UTF-16).</li> + + <li>Fixed bug #50632 (filter_input() does + not return default value if the variable + does not exist).</li> + + <li>Fixed bug #50540 (Crash while running + ldap_next_reference test cases).</li> + + <li>Fixed bug #49851 (http wrapper breaks + on 1024 char long headers).</li> + + <li>Over 60 other bug fixes.</li> + </ul> + + <p>The SNMP extension is now available in VC9 + versions. The cURL and MPIR libraries have + been updated.</p> + + <p>For users upgrading from PHP 5.2 there is + a migration guide available <a href= + "http://php.net/migration53">here</a>, + detailing the changes between those releases + and PHP 5.3.</p> + + <p><b>Further information and + downloads:</b></p> + + <p>For a full list of changes in PHP 5.3.2, + see the <a href= + "/ChangeLog-5.php#5.3.2">ChangeLog</a>. For + source downloads please visit our <a href= + "/downloads.php">downloads page</a>, Windows + binaries can be found on <a href= + "https://windows.php.net/download/">windows.php.net/download/</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2011-03-17-1.php b/news/2011-03-17-1.php new file mode 100644 index 0000000..0cfcc91 --- /dev/null +++ b/news/2011-03-17-1.php @@ -0,0 +1,108 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.3.6 + Released!</h3> + <?php news_date('17-Mar-2011') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team would like to + announce the immediate availability of PHP + 5.3.6. This release focuses on improving the + stability of the PHP 5.3.x branch with over 60 + bug fixes, some of which are security + related.</p> + + <p><b>Security Enhancements and Fixes in PHP + 5.3.6:</b></p> + + <ul> + <li>Enforce security in the fastcgi protocol + parsing with fpm SAPI.</li> + + <li>Fixed bug #54247 (format-string + vulnerability on Phar). (CVE-2011-1153)</li> + + <li>Fixed bug #54193 (Integer overflow in + shmop_read()). (CVE-2011-1092)</li> + + <li>Fixed bug #54055 (buffer overrun with + high values for precision ini setting).</li> + + <li>Fixed bug #54002 (crash on crafted tag in + exif). (CVE-2011-0708)</li> + + <li>Fixed bug #53885 (ZipArchive segfault + with FL_UNCHANGED on empty archive). + (CVE-2011-0421)</li> + </ul> + + <p><b>Key enhancements in PHP 5.3.6 + include:</b></p> + + <ul> + <li>Upgraded bundled Sqlite3 to version + 3.7.4.</li> + + <li>Upgraded bundled PCRE to version + 8.11.</li> + + <li>Added ability to connect to HTTPS sites + through proxy with basic authentication using + stream_context/http/header/Proxy-Authorization.</li> + + <li>Added options to debug backtrace + functions.</li> + + <li>Changed default value of ini directive + serialize_precision from 100 to 17.</li> + + <li>Fixed Bug #53971 (isset() and empty() + produce apparently spurious runtime + error).</li> + + <li>Fixed Bug #53958 (Closures can't 'use' + shared variables by value and by + reference).</li> + + <li>Fixed bug #53577 (Regression introduced + in 5.3.4 in open_basedir with a trailing + forward slash).</li> + + <li>Over 60 other bug fixes.</li> + </ul> + + <p>Windows users: please mind that we do no + longer provide builds created with Visual + Studio C++ 6. It is impossible to maintain a + high quality and safe build of PHP for Windows + using this unmaintained compiler.</p> + + <p>For Apache SAPIs (php5_apache2_2.dll), be + sure that you use a Visual Studio C++ 9 version + of Apache. We recommend the Apache builds as + provided by <a href= + "http://www.apachelounge.com/">ApacheLounge</a>. + For any other SAPI (CLI, FastCGI via mod_fcgi, + FastCGI with IIS or other FastCGI capable + server), everything works as before. Third + party extension providers must rebuild their + extensions to make them compatible and loadable + with the Visual Studio C++9 builds that we now + provide.</p> + + <p>All PHP users should note that the PHP 5.2 + series is NOT supported anymore. All users are + strongly encouraged to upgrade to PHP + 5.3.6.</p> + + <p>For a full list of changes in PHP 5.3.6, see + the <a href= + "http://www.php.net/ChangeLog-5.php#5.3.6">ChangeLog</a>. + For source and binaries downloads please visit + our <a href="/download/">downloads + page</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2012-03-01-1.php b/news/2012-03-01-1.php new file mode 100644 index 0000000..9343724 --- /dev/null +++ b/news/2012-03-01-1.php @@ -0,0 +1,99 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.4.0 Release + Announcement</h3> + <?php news_date('1-Mar-2012') ?> + + <div class="newsImage"></div> + + <div> + <p>The PHP development team is proud to announce the + immediate availability of PHP <a href= + "http://php.net/downloads.php#v5.4.0">5.4.0</a>. This + release is a major leap forward in the 5.x series, + which includes a large number of new features and bug + fixes.</p> + + <p><b>The key features of PHP 5.4.0 include:</b></p> + + <ul> + <li>New language syntax including <a href= + "http://php.net/traits">Traits</a>, <a href= + "http://docs.php.net/manual/en/language.types.array.php"> + shortened array syntax</a> and <a href= + "http://docs.php.net/manual/en/migration54.new-features.php"> + more</a></li> + + <li>Improved performance and reduced memory + consumption</li> + + <li>Support for multibyte languages now available + in all builds of PHP at the flip of a runtime + switch</li> + + <li><a href= + "http://php.net/manual/en/features.commandline.webserver.php"> + Built-in webserver</a> in CLI mode to simplify + development workflows and testing</li> + + <li>Cleaner code base thanks to the removal of + multiple deprecated language features</li> + + <li>Many more improvements and fixes</li> + </ul> + + <p><b>Changes that affect compatibility:</b></p> + + <ul> + <li><a href= + "http://www.php.net/manual/en/security.globals.php"> + Register globals</a>, <a href= + "http://www.php.net/manual/en/security.magicquotes.php"> + magic quotes</a> and <a href= + "http://www.php.net/manual/en/features.safe-mode.php"> + safe mode</a> were removed</li> + + <li>The <a href= + "http://php.net/manual/en/control-structures.break.php"> + break</a>/<a href= + "http://php.net/manual/en/control-structures.continue.php">continue</a> + $var syntax was removed</li> + + <li>The ini option <a href= + "http://php.net/allow_call_time_pass_reference">allow_call_time_pass_reference</a> was + removed</li> + + <li>The PHP <a href= + "http://www.php.net/manual/en/ini.core.php#ini.default-charset"> + default_charset</a> is now "UTF-8"</li> + </ul> + + <p><b>Extensions moved to <a href= + "http://pecl.php.net">PECL</a>:</b></p> + + <ul> + <li><a href= + "http://www.php.net/manual/en/ref.sqlite.php">ext/sqlite</a> + (<a href= + "http://www.php.net/manual/en/book.sqlite3.php">ext/sqlite3</a> + and <a href= + "http://www.php.net/manual/en/ref.pdo-sqlite.php">ext/pdo_sqlite</a> + are not affected)</li> + </ul> + + <p><b>PHP 5.4 series will be the last versions to + support Windows XP and Windows 2003.</b> We will not + provide binary packages for these Windows versions + anymore after PHP 5.4.</p> + + <p>For users upgrading from PHP 5.3 there is a + migration guide available <a href= + "http://php.net/migration54">here</a>, detailing the + changes between those releases and PHP 5.4.0.</p> + + <p>For a full list of changes in PHP 5.4.0, see the + <a href= + "http://php.net/ChangeLog-5.php#5.4.0">ChangeLog</a>.</p> + </div> +</div><!-- .info --> diff --git a/news/2013-06-20-1.php b/news/2013-06-20-1.php new file mode 100644 index 0000000..bcde7ce --- /dev/null +++ b/news/2013-06-20-1.php @@ -0,0 +1,48 @@ +<div class="info entry"> + <!-- .info --> + + <h3 class="summary entry-title">PHP 5.5.0 Release + Announcement</h3> + <?php news_date('20-Jun-2013') ?> + + <div> + <p> The PHP development team is proud to announce the immediate availability of PHP 5.5.0. + This release includes a large number of new features and bug fixes.</p> + + <p> + <b>The key features of PHP 5.5.0 include:</b> + </p> + <ul> + <li>Added <a href="http://php.net/generators">generators</a> and coroutines.</li> + <li>Added the <a href="http://php.net/exceptions">finally</a> keyword.</li> + <li>Added a <a href="http://php.net/password">simplified password hashing API</a>.</li> + <li>Added <a href="http://php.net/migration55.new-features#migration55.new-features.const-dereferencing">support for constant array/string dereferencing</a>.</li> + <li>Added scalar class name resolution via <a href="http://php.net/oop5.basic#language.oop5.basic.class.class">::class</a>.</li> + <li>Added <a href="http://php.net/migration55.new-features#migration55.new-features.empty">support for using empty() on the result of function calls and other expressions</a>.</li> + <li>Added <a href="http://php.net/migration55.new-features#migration55.new-features.non-scalar-iterator-keys">support for non-scalar Iterator keys in foreach</a>.</li> + <li>Added <a href="http://php.net/foreach#control-structures.foreach.list">support for list() constructs in foreach statements</a>.</li> + <li>Added the <a href="http://php.net/opcache">Zend OPcache</a> extension for opcode caching.</li> + <li>The GD library has been upgraded to version 2.1 adding new functions and improving existing functionality.</li> + <li>A lot more improvements and fixes.</li> + </ul> + <p> + <b>Changes that affect compatibility:</b> + </p> + + <ul> + <li><a href="http://php.net/php_logo_guid">PHP logo GUIDs</a> have been removed.</li> + <li>Windows XP and 2003 support dropped.</li> + <li>Case insensitivity is no longer locale specific. All case insensitive matching for function, class and constant names is now performed in a locale independent manner according to ASCII rules.</li> + </ul> + + <p> + For users upgrading from PHP 5.4, + <a href="http://php.net/migration55">a migration guide is available</a> + detailing the changes between 5.4 and 5.5.0. + </p> + + <p> + For a full list of changes in PHP 5.5.0, see the <a href="http://php.net/ChangeLog-5.php#5.5.0">ChangeLog</a>. + </p> + </div> +</div><!-- .info --> diff --git a/news/2014-04-10-1.php b/news/2014-04-10-1.php new file mode 100644 index 0000000..9849765 --- /dev/null +++ b/news/2014-04-10-1.php @@ -0,0 +1,21 @@ +<div class="info entry"> + <!-- .info --> + <h3 class="summary entry-title">OpenSSL security update</h3> + <?php news_date('10-Apr-2014') ?> + <div> + <p>The <a href="http://www.openssl.org/news/secadv_20140407.txt">OpenSSL Security Advisory [07 Apr 2014]</a> announces the + availability of the OpenSSL 1.0.1g which fixes CVE-2014-0160. In this regard the latest PHP release 5.5.11 was rebuilt with the OpenSSL 1.0.1g. + All PHP users are strongly encouraged to upgrade to PHP 5.5.11. If you already have downloaded this version before 10-Apr-2014, please redownload. + The existing private keys should be regenerated as soon as possible.</p> + + <p>Alternatively, the updated OpenSSL dependency DLLs can be downloaded separately as replacement for the older PHP versions. Though be aware that + this issue affects only OpenSSL 1.0.x and the DLL packages are only applicable to PHP 5.5 and upper.</p> + <ul> + <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1g-vc11-x86.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1g-vc11-x86.zip</a></li> + <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1g-vc11-x64.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1g-vc11-x64.zip</a></li> + </ul> + <p> + PHP 5.4 and lower is not affected by this issue. + </p> + </div> +</div><!-- .info --> diff --git a/news/2015-03-20-1.php b/news/2015-03-20-1.php new file mode 100644 index 0000000..1cf9975 --- /dev/null +++ b/news/2015-03-20-1.php @@ -0,0 +1,18 @@ +<div class="info entry"> + <!-- .info --> + <h3 class="summary entry-title">OpenSSL security update</h3> + <?php news_date('20-Mar-2015') ?> + <div> + <p>The <a href="http://openssl.org/news/secadv_20150319.txt">OpenSSL Security Advisory [19 Mar 2015]</a> announces the + availability of the OpenSSL 0.9.8zf and 1.0.1m which fix twelve security vulnerabilities. + The latest PHP releases 5.4.39, 5.5.23 and 5.6.7 already contain the updated OpenSSL library. + All PHP users are strongly encouraged to upgrade to the corresponding patch versions.</p> + + <p>Alternatively, the updated OpenSSL dependency DLLs can be downloaded separately as replacement for the older PHP and Apache versions.</p> + <ul> + <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc9/x86/openssl-0.9.8zf-vc9-x86.zip">https://windows.php.net/downloads/php-sdk/deps/vc9/x86/openssl-0.9.8zf-vc9-x86.zip</a></li> + <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1m-vc11-x86.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x86/openssl-1.0.1m-vc11-x86.zip</a></li> + <li><a href="https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1m-vc11-x64.zip">https://windows.php.net/downloads/php-sdk/deps/vc11/x64/openssl-1.0.1m-vc11-x64.zip</a></li> + </ul> + </div> +</div><!-- .info --> diff --git a/news/2018-03-08-1.php b/news/2018-03-08-1.php new file mode 100644 index 0000000..bfbda3c --- /dev/null +++ b/news/2018-03-08-1.php @@ -0,0 +1,18 @@ +<div class="info entry"> + <!-- .info --> + <h3 class="summary entry-title">AVX builds</h3> + <?php news_date('08-Mar-2018') ?> + <div> + <p> + In addition to the usual regular snapshots, the current master builds deliver binaries with + <a href="https://en.wikipedia.org/wiki/Advanced_Vector_Extensions">AVX (Advanced Vector Extensions)</a> support. + AVX is an instruction set available in many modern CPUs. The internal PHP implementation uses these + specific CPU instructions to improve performance. + </p> + + <p>Processors, manufactured after 2011, most likely support AVX. The exact information about the + hardware can be retrieved by using the <a href="https://docs.microsoft.com/en-us/sysinternals/downloads/coreinfo">Coreinfo</a> tool.</p> + + <p>Help us to test these new flavours, any feedback appreciated!</p> + </div> +</div><!-- .info --> diff --git a/news/2018-03-12-1.php b/news/2018-03-12-1.php new file mode 100644 index 0000000..13721ae --- /dev/null +++ b/news/2018-03-12-1.php @@ -0,0 +1,12 @@ +<div class="info entry"> + <!-- .info --> + <h3 class="summary entry-title">The windows.php.net site uses SSL by default</h3> + <?php news_date('12-Mar-2018') ?> + <div> + <p>Thanks to "Let's Encrypt", the site now uses SSL by default. All the non + SSL links are transparently redirected to the SSL locations. + </p> + <p>WinXP users might experience connection issues. It is a high time to switch away + from WinXP to some more recent OS version.</p> + </div> +</div><!-- .info --> diff --git a/news/2018-12-26-1.php b/news/2018-12-26-1.php new file mode 100644 index 0000000..9b28d95 --- /dev/null +++ b/news/2018-12-26-1.php @@ -0,0 +1,12 @@ +<div class="info entry"> + <!-- .info --> + <h3 class="summary entry-title">OpenSSL 1.1.1a</h3> + <?php news_date('26-Dec-2018') ?> + <div> + <p> + The recent release candidates 7.2.14RC1 and 7.3.1RC1 use the latest OpenSSL 1.1.1 release branch. + Please help testing these release candidates with the regard to the OpenSSL compatibility and report bugs. + This concerns the OpenSSL extension itself as well as the extensions depending on OpenSSL like cURL. + </p> + </div> +</div><!-- .info --> diff --git a/news/2019-06-04-1.php b/news/2019-06-04-1.php new file mode 100644 index 0000000..1643f53 --- /dev/null +++ b/news/2019-06-04-1.php @@ -0,0 +1,18 @@ +<div class="info entry"> + <!-- .info --> + <h3 class="summary entry-title">Visual Studio 2019 Builds</h3> + <?php news_date('04-Jun-2019') ?> + <div> + <p> + All binary packages we were offering contained "vc#" (for instance, "vc14") in the filename to designate + the Visual Studio version which has been used to build them. This number ("#") has tradionally been + the major number of the respective platform toolset. The preview releases of Visual Studio 2017 shipped + with platform toolset 15.00, so we used "vc15" to mark the files. The first GA release of Visual Studio + 2017, however, shipped with platform toolset 14.10 (to signal the backward compatibility), but the + internal Visual Studio version number stayed 15.00. To avoid confusion with already distributed packages, + we stuck with the "vc15" marker. For our Visual Studio 2019 builds (PHP 7.4 and master) we finally changed + from "vc#" to "vs#" (note the "s"), where the number now designates the major internal Visual Studio + version number. We are planning to stick with this new naming scheme for the foreseeable future. + </p> + </div> +</div><!-- .info -->