cvs: phpweb / ChangeLog-5.php /archive archive.xml /archive/entries 2009-02-26-1.xml /include version.inc /releases 5_2_9.php

iliaa Thu Feb 26 23:31:01 2009 UTC Added files: /phpweb/archive/entries 2009-02-26-1.xml /phpweb/releases 5_2_9.php Modified files: /phpweb ChangeLog-5.php /phpweb/archive archive.xml /phpweb/include version.inc Log: 5.2.9

http://cvs.php.net/viewvc.cgi/phpweb/ChangeLog-5.php?r1=1.53&r2=1.54&diff_format=u Index: phpweb/ChangeLog-5.php diff -u phpweb/ChangeLog-5.php:1.53 phpweb/ChangeLog-5.php:1.54 --- phpweb/ChangeLog-5.php:1.53 Mon Dec 8 21:21:03 2008 +++ phpweb/ChangeLog-5.php Thu Feb 26 23:31:01 2009 @@ -1,5 +1,5 @@ <?php -// $Id: ChangeLog-5.php,v 1.53 2008/12/08 21:21:03 iliaa Exp $ +// $Id: ChangeLog-5.php,v 1.54 2009/02/26 23:31:01 iliaa Exp $ $_SERVER['BASE_PAGE'] = 'ChangeLog-5.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 5 ChangeLog"); @@ -11,6 +11,78 @@ <hr /> +<a name="5.2.9"></a> +<h3>Version 5.2.9</h3> +<b>26-February-2009</b> +<ul> + <li>Security Fixes + <ul> + <li>Fixed security issue in imagerotate(), background colour isn't validated correctly with a non truecolour image. Reported by Hamid Ebadi, APA Laboratory (Fixes CVE-2008-5498). (Scott)</li> + <li>Fixed a crash on extract in zip when files or directories entry names contain a relative path. (Pierre)</li> + <li>Fixed explode() behavior with empty string to respect negative limit. (Shire)</li> + <li>Fixed a segfault when malformed string is passed to json_decode(). (Scott)</li> + <li>Fixed bug in xml_error_string() which resulted in messages being off by one. (Scott)</li> + </ul> + </li> + + <li>Changed __call() to be invoked on private/protected method access, similar to properties and __get(). (Andrei)</li> + <li>Added optional sorting type flag parameter to array_unique(). Default is SORT_REGULAR. (Andrei)</li> + <li>Fixed zip filename property read. (Pierre)</li> + <li>Fixed error conditions handling in stream_filter_append(). (Arnaud)</li> + + <li><?php bugfix(47422); ?> (modulus operator returns incorrect results on 64 bit linux). (Matt)</li> + <li><?php bugfix(47399); ?> (mb_check_encoding() returns true for some illegal SJIS characters). (for-bugs at hnw dot jp, Moriyoshi)</li> + <li><?php bugfix(47353); ?> (crash when creating a lot of objects in object destructor). (Tony)</li> + <li><?php bugfix(47322); ?> (sscanf %d doesn't work). (Felipe)</li> + <li><?php bugfix(47282); ?> (FILTER_VALIDATE_EMAIL is marking valid email addresses as invalid). (Ilia)</li> + <li><?php bugfix(47220); ?> (segfault in dom_document_parser in recovery mode). (Rob)</li> + <li><?php bugfix(47217); ?> (content-type is not set properly for file uploads). (Ilia)</li> + <li><?php bugfix(47174); ?> (base64_decode() interprets pad char in mid string as terminator). (Ilia)</li> + <li><?php bugfix(47165); ?> (Possible memory corruption when passing return value by reference). (Dmitry)</li> + <li><?php bugfix(47152); ?> (gzseek/fseek using SEEK_END produces strange results). (Felipe)</li> + <li><?php bugfix(47131); ?> (SOAP Extension ignores &quot;user_agent&quot; ini setting). (Ilia)</li> + <li><?php bugfix(47109); ?> (Memory leak on $a-&gt;{&quot;a&quot;.&quot;b&quot;} when $a is not an object). (Etienne, Dmitry)</li> + <li><?php bugfix(47104); ?> (Linking shared extensions fails with icc). (Jani)</li> + <li><?php bugfix(47049); ?> (SoapClient::__soapCall causes a segmentation fault). (Dmitry)</li> + <li><?php bugfix(47048); ?> (Segfault with new pg_meta_data). (Felipe)</li> + <li><?php bugfix(47042); ?> (PHP cgi sapi is removing SCRIPT_FILENAME for non apache). (Sriram Natarajan)</li> + <li><?php bugfix(47037); ?> (No error when using fopen with empty string). (Cristian Rodriguez R., Felipe)</li> + <li><?php bugfix(47035); ?> (dns_get_record returns a garbage byte at the end of a TXT record). (Felipe)</li> + <li><?php bugfix(47027); ?> (var_export doesn't show numeric indices on ArrayObject). (Derick)</li> + <li><?php bugfix(46985); ?> (OVERWRITE and binary mode does not work, regression introduced in 5.2.8). (Pierre)</li> + <li><?php bugfix(46973); ?> (IPv6 address filter rejects valid address). (Felipe)</li> + <li><?php bugfix(46964); ?> (Fixed pdo_mysql build with older version of MySQL). (Ilia)</li> + <li><?php bugfix(46959); ?> (Unable to disable PCRE). (Scott)</li> + <li><?php bugfix(46918); ?> (imap_rfc822_parse_adrlist host part not filled in correctly). (Felipe)</li> + <li><?php bugfix(46889); ?> (Memory leak in strtotime()). (Derick)</li> + <li><?php bugfix(46887); ?> (Invalid calls to php_error_docref()). (oeriksson at mandriva dot com, Ilia)</li> + <li><?php bugfix(46873); ?> (extract($foo) crashes if $foo['foo'] exists). (Arnaud)</li> + <li><?php bugfix(46843); ?> (CP936 euro symbol is not converted properly). (ty_c at cybozuy dot co dot jp, Moriyoshi)</li> + <li><?php bugfix(46798); ?> (Crash in mssql extension when retrieving a NULL value inside a binary or image column type). (Ilia)</li> + <li><?php bugfix(46782); ?> (fastcgi.c parse error). (Matt)</li> + <li><?php bugfix(46760); ?> (SoapClient doRequest fails when proxy is used). (Felipe)</li> + <li><?php bugfix(46748); ?> (Segfault when an SSL error has more than one error). (Scott)</li> + <li><?php bugfix(46739); ?> (array returned by curl_getinfo should contain content_type key). (Mikko)</li> + <li><?php bugfix(46699); ?> (xml_parse crash when parser is namespace aware). (Rob)</li> + <li><?php bugfix(46419); ?> (Elements of associative arrays with NULL value are lost). (Dmitry)</li> + <li><?php bugfix(46282); ?> (Corrupt DBF When Using DATE). (arne at bukkie dot nl)</li> + <li><?php bugfix(46026); ?> (bz2.decompress/zlib.inflate filter tries to decompress after end of stream). (Greg)</li> + <li><?php bugfix(46005); ?> (User not consistently logged under Apache2). (admorten at umich dot edu, Stas)</li> + <li><?php bugfix(45996); ?> (libxml2 2.7 causes breakage with character data in xml_parse()). (Rob)</li> + <li><?php bugfix(45940); ?> (MySQLI OO does not populate connect_error property on failed connect). (Johannes)</li> + <li><?php bugfix(45923); ?> (mb_st[r]ripos() offset not handled correctly). (Moriyoshi)</li> + <li><?php bugfix(45327); ?> (memory leak if offsetGet throws exception). (Greg)</li> + <li><?php bugfix(45239); ?> (Encoding detector hangs with mbstring.strict_detection enabled). (Moriyoshi)</li> + <li><?php bugfix(45161); ?> (Reusing a curl handle leaks memory). (Mark Karpeles, Jani)</li> + <li><?php bugfix(44336); ?> (Improve pcre UTF-8 string matching performance). (frode at coretrek dot com, Nuno)</li> + <li><?php bugfix(43841); ?> (mb_strrpos() offset is byte count for negative values). (Moriyoshi)</li> + <li><?php bugfix(37209); ?> (mssql_execute with non fatal errors). (Kalle)</li> + <li><?php bugfix(35975); ?> (Session cookie expires date format isn't the most compatible. Now matches that of setcookie()). (Scott)</li> + +</ul> + +<hr /> + <a name="5.2.8"></a> <h3>Version 5.2.8</h3> <b>08-December-2008</b> http://cvs.php.net/viewvc.cgi/phpweb/archive/archive.xml?r1=1.3&r2=1.4&diff_format=u Index: phpweb/archive/archive.xml diff -u phpweb/archive/archive.xml:1.3 phpweb/archive/archive.xml:1.4 --- phpweb/archive/archive.xml:1.3 Fri Feb 20 18:07:44 2009 +++ phpweb/archive/archive.xml Thu Feb 26 23:31:01 2009 @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2009-02-26-1.xml"/> <xi:include href="entries/2009-02-20-1.xml"/> <xi:include href="entries/2009-02-18-1.xml"/> <xi:include href="entries/2008-12-10-1.xml"/> http://cvs.php.net/viewvc.cgi/phpweb/include/version.inc?r1=1.63&r2=1.64&diff_format=u Index: phpweb/include/version.inc diff -u phpweb/include/version.inc:1.63 phpweb/include/version.inc:1.64 --- phpweb/include/version.inc:1.63 Thu Feb 19 18:51:08 2009 +++ phpweb/include/version.inc Thu Feb 26 23:31:01 2009 @@ -17,21 +17,21 @@ */ /* PHP 5 Release */ -$PHP_5_VERSION = "5.2.8"; -$PHP_5_DATE = "08 December 2008"; +$PHP_5_VERSION = "5.2.9"; +$PHP_5_DATE = "26 February 2009"; $PHP_5_MD5 = array( - "tar.bz2" => "8760a833cf10433d3e72271ab0d0eccf", - "tar.gz" => "e748cace3cfecb66fb6de9a945f98e2a", - "zip" => "71511834881753ea0906f2bca91632b9", - "installer" => "159def484800411060a9eacccafd2253", - "nts.zip" => "207abb02054c5ce996bc350352224acc", - "nts.installer" => "d4490964818542c416644b3d67f5b350", - "nts.debugpack" => "240566ce66761ab076ae9901547b7ce2", - "debugpack" => "fabc6e79c1c66dc80320165336b5ed54" + "tar.bz2" => "280d6cda7f72a4fc6de42fda21ac2db7", + "tar.gz" => "98b647561dc664adefe296106056cf11", + "zip" => "02d9531ed7d3ed4822563de84c3a3bf4", + "installer" => "3a9b407f90c523454d2828661f8f0aec", + "nts.zip" => "32a118119d0ebfcccb08b5ba837bdecf", + "nts.installer" => "102d112e3f96e1c317a8334eaed13fd4", + "nts.debugpack" => "14e488e9759bb780031f104f298c0452", + "debugpack" => "63e1dda5456f63910268da03c8278f25" ); -$PHP_5_RC = '5.2.9RC3'; -$PHP_5_RC_DATE = "19 February 2009"; +$PHP_5_RC = '5.3.0beta1'; +$PHP_5_RC_DATE = "29 January 2009"; $PHP_5_WINDOWS_NOTE_MSI = ""; $PHP_5_WINDOWS_NOTE_ZIP = "The PECL package will <em>not</em> be released for http://cvs.php.net/viewvc.cgi/phpweb/archive/entries/2009-02-26-1.xml?view=markup&rev=1.1 Index: phpweb/archive/entries/2009-02-26-1.xml +++ phpweb/archive/entries/2009-02-26-1.xml <?xml version="1.0" encoding="utf-8"?> <entry xmlns="http://www.w3.org/2005/Atom"> <title>PHP 5.2.9 Released!</title> <id>http://www.php.net/archive/2009.php#id2009-02-26-1</id> <published>2009-02-26T18:24:50-05:00</published> <updated>2009-02-26T18:24:50-05:00</updated> <category term="frontpage" label="PHP.net frontpage news"/> <link href="http://www.php.net/index.php#id2009-02-26-1" rel="alternate" type="text/html"/> <link href="http://www.php.net/archive/2009.php#id2009-02-26-1" rel="via" type="text/html"/> <content type="xhtml"> <div xmlns="http://www.w3.org/1999/xhtml"> <p>The PHP development team would like to announce the immediateavailability of PHP 5.2.9. This release focuses on improving the stability ofthe PHP 5.2.x branch with over 50 bug fixes, several of which are security related.All users of PHP are encouraged to upgrade to this release.</p> <p> <b>Security Enhancements and Fixes in PHP 5.2.9:</b> </p> <ul> <li>Fixed security issue in imagerotate(), background colour isn't validated correctly with a non truecolour image. Reported by Hamid Ebadi, APA Laboratory (Fixes CVE-2008-5498). (Scott)</li> <li>Fixed a crash on extract in zip when files or directories entry names contain a relative path. (Pierre)</li> <li>Fixed explode() behavior with empty string to respect negative limit. (Shire)</li> <li>Fixed a segfault when malformed string is passed to json_decode(). (Scott)</li></ul> <p>Further details about the PHP 5.2.9 can be found in the release announcement for <a href="http://www.php.net/releases/5_2_9.php">5.2.9</a> the full list of changes is available in the <a href="http://www.php.net/ChangeLog-5.php#5.2.9">ChangeLog for PHP 5</a>.</p> </div> </content> </entry> http://cvs.php.net/viewvc.cgi/phpweb/releases/5_2_9.php?view=markup&rev=1.1 Index: phpweb/releases/5_2_9.php +++ phpweb/releases/5_2_9.php <?php // $Id: 5_2_9.php,v 1.1 2009/02/26 23:31:01 iliaa Exp $ $_SERVER['BASE_PAGE'] = 'releases/5_2_7.php'; include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; site_header("PHP 5.2.9 Release Announcement"); ?> <h1>PHP 5.2.9 Release Announcement</h1> <p> The PHP development team would like to announce the immediate availability of PHP 5.2.9. This release focuses on improving the stability of the PHP 5.2.x branch with over 50 bug fixes, several of which are security related. All users of PHP are encouraged to upgrade to this release. </p> <p> <b>Security Enhancements and Fixes in PHP 5.2.9:</b> </p> <ul> <li>Fixed security issue in imagerotate(), background colour isn't validated correctly with a non truecolour image. Reported by Hamid Ebadi, APA Laboratory (Fixes CVE-2008-5498). (Scott)</li> <li>Fixed a crash on extract in zip when files or directories entry names contain a relative path. (Pierre)</li> <li>Fixed explode() behavior with empty string to respect negative limit. (Shire)</li> <li>Fixed a segfault when malformed string is passed to json_decode(). (Scott)</li> </ul> <p> <b>Key enhancements in PHP 5.2.9 include:</b> </p> <ul> <li>Added optional sorting type flag parameter to array_unique(). Default is SORT_REGULAR. (Andrei)</li> <li>Fixed bug #45996 (libxml2 2.7 causes breakage with character data in xml_parse()). (Rob)</li> <li>A number of fixes in the mbstring extension (Moriyoshi)</li> <li>Fixed bug #44336 (Improve pcre UTF-8 string matching performance). (frode at coretrek dot com, Nuno)</li> <li>Fixed bug #46699 (xml_parse crash when parser is namespace aware). (Rob)</li> <li>Fixed bug #46748 (Segfault when an SSL error has more than one error). (Scott)</li> <li>Fixed bug #46889 (Memory leak in strtotime()). (Derick)</li> <li>Fixed bug #47049 (SoapClient::__soapCall causes a segmentation fault). (Dmitry)</li> <li>Fixed bug #47165 (Possible memory corruption when passing return value by reference). (Dmitry)</li> <li>Fixed bug #47282 (FILTER_VALIDATE_EMAIL is marking valid email addresses as invalid). (Ilia)</li> <li>Fixed bug #47422 (modulus operator returns incorrect results on 64 bit linux). (Matt)</li> <li>Over 50 bug fixes.</li></li> </ul> <p> For users upgrading from PHP 5.0 and PHP 5.1, an upgrade guide is available <a href="/UPDATE_5_2.txt">here</a>, detailing the changes between those releases and PHP 5.2.9. </p> <p> For a full list of changes in PHP 5.2.9, see the <a href="/ChangeLog-5.php#5.2.9">ChangeLog</a>. </p> <?php site_footer(); ?>