- - 04 May 2006
- md5: 66a806161d4a2d3b5153ebe4cd0f2e1c
+ - 17 Aug 2006
+ md5: fb4edd5ed9c536a04a241b52ea62a6c1
- - 04 May 2006
- md5: 7c846aa09ec1fe0f54a57c8ba030d9f8
+ - 17 Aug 2006
+ md5: 643f41b0caae908927c0c3705ac006d3
Windows Binaries
- - 04 May 2006
- md5: bf208201a671fd20a13490dc6f38b344
+ - 17 Aug 2006
+ md5: 0330f932dab53176623abf7afba007ce
- - 04 May 2006
- md5: ff5ac6c4db975bc3ff2f3a89b7881c3f
+ - 17 Aug 2006
+ md5: dc2fbbed8487f58e9ff6163e2ae00c96
- - 04 May 2006
+ - 17 Aug 2006
(CGI only, packaged as Windows installer to install
and configure PHP, and automatically configure IIS, PWS and Xitami, with
manual configuration for other servers. No external extensions
included, get them from the zip and PECL downloads above, and install manually)
- md5: 86d83c9f42e281c60a40cf7c6d66db8d
+ md5: cf9a99abb9ab0a6dbfcb001ab0b05fa9
@@ -112,23 +112,23 @@ site_header("Downloads");
-
PHP 4.4.3
+
PHP 4.4.4
Complete Source Code
- - 03 Aug 2006
- md5: 9542117551c0e79f5bf21f46493094e7
+ - 17 Aug 2006
+ md5: bc6fa8908e2ac36e93bab9f7d42cda3a
- - 03 Aug 2006
- md5: f991b9a18ae167c436783bd0976ad749
+ - 17 Aug 2006
+ md5: e884b9b7c2e936310553c946bc2f67c2
See the ChangeLog for a complete list of
- changes, or the release notes for more
+ changes, or the release notes for more
information on this particular release. Daily snapshots are also available
from snaps.php.net (not intended for
production use!).
@@ -149,19 +149,19 @@ site_header("Downloads");
-->
- - 03 Aug 2006
+ - 17 Aug 2006
(CGI binary plus server API versions for Apache, Apache2 (experimental),
ISAPI, NSAPI, Servlet and Pi3Web. MySQL support built-in, many extensions
included, packaged as zip)
- md5: 9355a754c56857d921b3a945a91d729f
+ md5: 3ff3f58a2f573c80f34f2b670d7ac873
- - 03 Aug 2006
+ - 17 Aug 2006
(CGI only, MySQL support built-in, packaged as Windows installer to install
and configure PHP, and automatically configure IIS, PWS and Xitami, with
manual configuration for other servers. N.B. no external extensions
included)
- md5: b5b7e1953c62393cff7d7d065fb74e99
+ md5: e5db53efb3e0fed5407fc7c71cf0b436
diff --git a/index.php b/index.php
index 9c0649d71..8373375ac 100644
--- a/index.php
+++ b/index.php
@@ -148,6 +148,37 @@ commonHeader("Hypertext Preprocessor");
// DO NOT REMOVE THIS COMMENT (the RSS parser is dependant on it)
?>
+
PHP 4.4.4 and PHP 5.1.5 Released
+
+ [17-Aug-2006]
+ PHP development team would like to announce the immediate availability of
+ PHP 5.1.5 and 4.4.4. The two releases address a series of
+ security problems discovered since PHP 5.1.4 and 4.4.3, respectively. These
+ include the following:
+
+
+
Added missing safe_mode/open_basedir checks inside the error_log(),
+ file_exists(), imap_open() and imap_reopen() functions.
+
Fixed overflows inside str_repeat() and wordwrap() functions on 64bit
+ systems.
+
Fixed possible open_basedir/safe_mode bypass in cURL extension and on PHP
+ 5.1.5 with realpath cache.
+
Fixed overflow in GD extension on invalid GIF images.
+
Fixed a buffer overflow inside sscanf() function.
+
Fixed an out of bounds read inside stripos() function.
+
Fixed memory_limit restriction on 64 bit system.
+
+
+Further details about this release can be found in the release announcements
+(5.1.5 and
+4.4.4) and the full list of changes is
+available in the ChangeLogs (PHP 4,
+PHP 5).
+
+This release address a series of locally exploitable security problems
+discovered since PHP 4.4.3. All PHP users are encouraged to upgrade to this
+release as soon as possible.
+
+
+
+This release provides the following security fixes:
+
+
Added missing safe_mode/open_basedir checks inside the error_log(), file_exists(), imap_open() and imap_reopen() functions.
+
Fixed overflows inside str_repeat() and wordwrap() functions on 64bit systems.
+
Fixed possible open_basedir/safe_mode bypass in cURL extension.
+
Fixed overflow in GD extension on invalid GIF images.
+
Fixed a buffer overflow inside sscanf() function.
+
Fixed memory_limit restriction on 64 bit system.
+
+
+
+
+In addition to the security fixes, both releases include a small number of non-security related bug fixes.
+
+
+
+ For a full list of changes in PHP 4.4.4, see the
+ ChangeLog.
+