From 4734b31953b4ffaba5a5d144a6544cba4b391727 Mon Sep 17 00:00:00 2001 From: Stanislav Malyshev Date: Fri, 16 Aug 2013 11:30:54 -0700 Subject: [PATCH 1/2] merge news for 5.5.2 --- NEWS | 46 +++++++++++++++++++++------------------------- 1 file changed, 21 insertions(+), 25 deletions(-) diff --git a/NEWS b/NEWS index bc71cc645b6..7f295fceeb3 100644 --- a/NEWS +++ b/NEWS @@ -4,31 +4,6 @@ PHP NEWS 15 Aug 2013, PHP 5.5.2 -- Core: - . Fixed bug #62691 (solaris sed has no -i switch). (Chris Jones) - . Fixed bug #61345 (CGI mode - make install don't work). (Michael Heimpold) - . Fixed bug #61268 (--enable-dtrace leads make to clobber - Zend/zend_dtrace.d) (Chris Jones) - -- DOM: - . Added flags option to DOMDocument::schemaValidate() and - DOMDocument::schemaValidateSource(). Added LIBXML_SCHEMA_CREATE flag. - (Chris Wright) - -- Sessions: - . Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions) - which protects against session fixation attacks and session collisions. - (Yasuo Ohgaki) - . Fixed possible buffer overflow under Windows. Note: Not a security fix. - (Yasuo) - . Changed session.auto_start to PHP_INI_PERDIR. (Yasuo) - -- Pgsql: - . Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update() - /pg_delete()/pg_insert()). (Yasuo) - -15 Aug 2013, PHP 5.5.2 - - Core: . Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference fails). (Laruence) @@ -38,6 +13,15 @@ PHP NEWS . Fixed bug #65304 (Use of max int in array_sum). (Laruence) . Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very limited case). (Arpad) + . Fixed bug #62691 (solaris sed has no -i switch). (Chris Jones) + . Fixed bug #61345 (CGI mode - make install don't work). (Michael Heimpold) + . Fixed bug #61268 (--enable-dtrace leads make to clobber + Zend/zend_dtrace.d) (Chris Jones) + +- DOM: + . Added flags option to DOMDocument::schemaValidate() and + DOMDocument::schemaValidateSource(). Added LIBXML_SCHEMA_CREATE flag. + (Chris Wright) - OPcache: . Added opcache.restrict_api configuration directive that may limit @@ -58,6 +42,18 @@ PHP NEWS . Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for some specific contents). (Stas) +- Pgsql: + . Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update() + /pg_delete()/pg_insert()). (Yasuo) + +- Sessions: + . Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions) + which protects against session fixation attacks and session collisions. + (Yasuo Ohgaki) + . Fixed possible buffer overflow under Windows. Note: Not a security fix. + (Yasuo) + . Changed session.auto_start to PHP_INI_PERDIR. (Yasuo) + - SOAP: . Fixed bug #65018 (SoapHeader problems with SoapServer). (Dmitry) From 466584f40bc2443c77bde38b797d5d2864a26a82 Mon Sep 17 00:00:00 2001 From: Stanislav Malyshev Date: Fri, 16 Aug 2013 11:34:16 -0700 Subject: [PATCH 2/2] fix typo --- NEWS | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/NEWS b/NEWS index 7f295fceeb3..fa9b3cf08d2 100644 --- a/NEWS +++ b/NEWS @@ -68,7 +68,7 @@ PHP NEWS . Fixed bug #65268 (select() implementation uses outdated tick API). (Anatol) - Pgsql: - . Fixed bug #65336 (pg_escape_literal/identifier() scilently returns false). + . Fixed bug #65336 (pg_escape_literal/identifier() silently returns false). (Yasuo) 18 Jul 2013, PHP 5.5.1