1
0
mirror of https://github.com/php/web-php.git synced 2026-03-23 23:02:13 +01:00

PHP 5.4.4 and PHP 5.3.14

This commit is contained in:
David Soria Parra
2012-06-14 14:00:56 +02:00
parent d4ea71fd5f
commit 746da45178
5 changed files with 325 additions and 10 deletions

View File

@@ -11,6 +11,221 @@ function peclbugl($number) { echo "<a href=\"http://pecl.php.net/bugs/bug.php?
<h1>PHP 5 ChangeLog</h1>
<a name="5.4.4"></a><!-- {{{ 5.4.4 -->
<h3>Version 5.4.4</h3>
<b>06-June-2012</b>
<ul>
<li>CLI SAPI</li>
<ul>
<li>Implemented FR <?php bugl(61977); ?> (Need CLI web-server support for files with .htm &amp; svg extensions)</li>
<li>Improved performance while sending error page, this also fixed bug <?php bugfix(61785); ?>
(Memory leak when access a non-exists file without router)</li>
<li><?php bugfix(61546); ?> (functions related to current script failed when chdir() in cli sapi)</li>
</ul>
</ul>
<ul>
<li>Core</li>
<ul>
<li>Fixed missing bound check in iptcparse()</li>
<li>Fixed CVE-2012-2143</li>
<li><?php bugfix(62097); ?> (fix for for bug #54547)</li>
<li><?php bugfix(62005); ?> (unexpected behavior when incrementally assigning to a member of a null object)</li>
<li><?php bugfix(61978); ?> (Object recursion not detected for classes that implement JsonSerializable)</li>
<li><?php bugfix(61991); ?> (long overflow in realpath_cache_get())</li>
<li><?php bugfix(61922); ?> (ZTS build doesn't accept zend.script_encoding config)</li>
<li><?php bugfix(61827); ?> (incorrect \e processing on Windows)</li>
<li><?php bugfix(61782); ?> (__clone/__destruct do not match other methods when checking access controls)</li>
<li><?php bugfix(61761); ?> ('Overriding' a private static method with a different signature causes crash)</li>
<li><?php bugfix(61730); ?> (Segfault from array_walk modifying an array passed by reference)</li>
<li><?php bugfix(61728); ?> (PHP crash when calling ob_start in request_shutdown phase)</li>
<li><?php bugfix(61660); ?> (bin2hex(hex2bin($data)) != $data)</li>
<li><?php bugfix(61650); ?> (ini parser crashes when using ${xxxx} ini variables (without apache2))</li>
<li><?php bugfix(61605); ?> (header_remove() does not remove all headers)</li>
<li><?php bugfix(54547); ?> (wrong equality of string numbers)</li>
<li><?php bugfix(54197); ?> ([PATH=] sections incompatibility with user_ini.filename set to null)</li>
<li>Changed php://fd to be available only for CLI</li>
</ul>
</ul>
<ul>
<li>CURL</li>
<ul>
<li><?php bugfix(61948); ?> (CURLOPT_COOKIEFILE '' raises open_basedir restriction)</li>
</ul>
</ul>
<ul>
<li>COM</li>
<ul>
<li><?php bugfix(62146); ?> com_dotnet cannot be built shared</li>
</ul>
</ul>
<ul>
<li>Fileinfo</li>
<ul>
<li><?php bugfix(61812); ?> (Uninitialised value used in libmagic)</li>
</ul>
</ul>
<ul>
<li>FPM</li>
<ul>
<li><?php bugfix(61812); ?> (Uninitialised value used in libmagic)</li>
<li><?php bugfix(61565); ?> where php_stream_open_wrapper_ex tries to open a directory descriptor under windows</li>
<li><?php bugfix(61566); ?> failure caused by the posix lseek and read versions under windows in cdf_read()</li>
</ul>
</ul>
<ul>
<li>Iconv</li>
<ul>
<li>Fixed a bug that iconv extension fails to link to the correct library when another extension makes use of a library that links to the iconv library. See <a href="https://bugs.gentoo.org/show_bug.cgi?id=364139">https://bugs.gentoo.org/show_bug.cgi?id=364139</a> for detail</li>
</ul>
</ul>
<ul>
<li>Intl</li>
<ul>
<li><?php bugfix(62082); ?> (Memory corruption in internal function get_icu_disp_value_src_php()</li>
</ul>
</ul>
<ul>
<li>JSON</li>
<ul>
<li><?php bugfix(61537); ?> (json_encode() incorrectly truncates/discards information)</li>
</ul>
</ul>
<ul>
<li>LibXML</li>
<ul>
<li><?php bugfix(61617); ?> (Libxml tests failed(ht is already destroyed))</li>
</ul>
</ul>
<ul>
<li>PDO</li>
<ul>
<li><?php bugfix(61755); ?> (A parsing bug in the prepared statements can lead to access violations)</li>
</ul>
</ul>
<ul>
<li>Phar</li>
<ul>
<li><?php bugfix(61065); ?> (Secunia SA44335)</li>
</ul>
</ul>
<ul>
<li>Streams</li>
<ul>
<li><?php bugfix(61961); ?> (file_get_contents leaks when access empty file with maxlen set)</li>
</ul>
</ul>
<ul>
<li>zlib</li>
<ul>
<li><?php bugfix(61820); ?> (using ob_gzhandler will complain about headers already sent when no compression)</li>
<li><?php bugfix(61443); ?> (can't change zlib.output_compression on the fly)</li>
<li><?php bugfix(60761); ?> (zlib.output_compression fails on refresh)</li>
</ul>
</ul>
<!-- }}} -->
<a name="5.3.14"></a><!-- {{{ 5.3.14 -->
<h3>Version 5.3.14</h3>
<b>06-June-2012</b>
<ul>
<li>CLI SAPI</li>
<ul>
<li><?php bugfix(61546); ?> (functions related to current script failed when chdir() in cli sapi)</li>
</ul>
</ul>
<ul>
<li>Core</li>
<ul>
<li>Fixed CVE-2012-2143</li>
<li><?php bugfix(62005); ?> (unexpected behavior when incrementally assigning to a member of a null object)</li>
<li><?php bugfix(61730); ?> (Segfault from array_walk modifying an array passed by reference)</li>
<li>Fixed missing bound check in iptcparse()</li>
<li><?php bugfix(61764); ?> ('I' unpacks n as signed if n &gt; 2^31-1 on LP64)</li>
<li><?php bugfix(54197); ?> ([PATH=] sections incompatibility with user_ini.filename set to null)</li>
<li><?php bugfix(61713); ?> (Logic error in charset detection for htmlentities)</li>
<li><?php bugfix(61991); ?> (long overflow in realpath_cache_get())</li>
<li>Changed php://fd to be available only for CLI.</li>
</ul>
</ul>
<ul>
<li>CURL</li>
<ul>
<li><?php bugfix(61948); ?> (CURLOPT_COOKIEFILE '' raises open_basedir restriction)</li>
</ul>
</ul>
<ul>
<li>COM</li>
<ul>
<li><?php bugfix(62146); ?> com_dotnet cannot be built shared</li>
</ul>
</ul>
<ul>
<li>Fileinfo</li>
<ul>
<li><?php bugfix(61812); ?> (Uninitialised value used in libmagic)</li>
</ul>
</ul>
<ul>
<li>Iconv</li>
<ul>
<li>Fixed a bug that iconv extension fails to link to the correct library when another extension makes use of a library that links to the iconv library. See <a href="https://bugs.gentoo.org/show_bug.cgi?id=364139">https://bugs.gentoo.org/show_bug.cgi?id=364139</a> for detail</li>
</ul>
</ul>
<ul>
<li>Intl</li>
<ul>
<li><?php bugfix(62082); ?> (Memory corruption in internal function get_icu_disp_value_src_php()</li>
</ul>
</ul>
<ul>
<li>JSON</li>
<ul>
<li><?php bugfix(61537); ?> (json_encode() incorrectly truncates/discards information)</li>
</ul>
</ul>
<ul>
<li>PDO</li>
<ul>
<li><?php bugfix(61755); ?> (A parsing bug in the prepared statements can lead to access violations)</li>
</ul>
</ul>
<ul>
<li>Phar</li>
<ul>
<li><?php bugfix(61065); ?> (Secunia SA44335)</li>
</ul>
</ul>
<ul>
<li>Streams</li>
<ul>
<li><?php bugfix(61961); ?> (file_get_contents leaks when access empty file with maxlen set)</li>
</ul>
</ul>
<!-- }}} -->
<a name="5.4.3"></a><!-- {{{ 5.4.3 -->
<h3>Version 5.4.3</h3>
<b>08-May-2012</b>

View File

@@ -2,6 +2,32 @@
$OLDRELEASES = array (
5 =>
array (
'5.4.3' =>
array (
'announcement' =>
array (
'English' => '/releases/5_4_3.php',
),
'source' =>
array (
0 =>
array (
'filename' => 'php-5.4.3.tar.bz2',
'name' => 'PHP 5.4.3 (tar.bz2)',
'md5' => '51f9488bf8682399b802c48656315cac',
'date' => '08 May 2012',
),
1 =>
array (
'filename' => 'php-5.4.3.tar.gz',
'name' => 'PHP 5.4.3 (tar.gz)',
'md5' => 'c9dccc89cc89d39e84f6e6f0cf1c8a65',
'date' => '08 May 2012',
),
),
'date' => '08 May 2012',
'museum' => false,
),
'5.4.2' =>
array (
'announcement' =>
@@ -80,6 +106,32 @@ $OLDRELEASES = array (
'date' => '01 March 2012',
'museum' => false,
),
'5.3.13' =>
array (
'announcement' =>
array (
'English' => '/releases/5_3_13.php',
),
'source' =>
array (
0 =>
array (
'filename' => 'php-5.3.13.tar.bz2',
'name' => 'PHP 5.3.13 (tar.bz2)',
'md5' => '370be99c5cdc2e756c82c44d774933c8',
'date' => '08 May 2012',
),
1 =>
array (
'filename' => 'php-5.3.13.tar.gz',
'name' => 'PHP 5.3.13 (tar.gz)',
'md5' => '179c67ce347680f468edbfc3c425476a',
'date' => '08 May 2012',
),
),
'date' => '08 May 2012',
'museum' => false,
),
'5.3.12' =>
array (
'announcement' =>

View File

@@ -17,27 +17,27 @@
*/
/* PHP 5.4 Release */
$PHP_5_4_RC = '5.4.4RC2'; // set to false when there is no RC
$PHP_5_4_RC = false; // set to false when there is no RC
$PHP_5_4_RC_DATE = "30 May 2012";
$PHP_5_4_VERSION = "5.4.3";
$PHP_5_4_DATE = "08 May 2012";
$PHP_5_4_VERSION = "5.4.4";
$PHP_5_4_DATE = "14 June 2012";
$PHP_5_4_MD5 = array(
"tar.bz2" => "51f9488bf8682399b802c48656315cac",
"tar.gz" => "c9dccc89cc89d39e84f6e6f0cf1c8a65",
"tar.bz2" => "1fd98dc3f6f3805cd67bff12a26ed77f",
"tar.gz" => "8366c3626f2275ab8c7ef5e2d6bc5bd7",
);
/* PHP 5.3 Release */
$PHP_5_3_RC = '5.3.14RC1';
$PHP_5_3_RC = false;
$PHP_5_3_RC_DATE = '17 May 2012';
$PHP_5_3_VERSION = "5.3.13";
$PHP_5_3_DATE = "08 May 2012";
$PHP_5_3_VERSION = "5.3.14";
$PHP_5_3_DATE = "14 June 2012";
$PHP_5_3_MD5 = array(
"tar.bz2" => "370be99c5cdc2e756c82c44d774933c8",
"tar.gz" => "179c67ce347680f468edbfc3c425476a",
"tar.bz2" => "7caac4f71e2f21426c11ac153e538392",
"tar.gz" => "148730865242a031a638ee3bab4a9d4d",
);
$RELEASES = array(

24
releases/5_3_14.php Normal file
View File

@@ -0,0 +1,24 @@
<?php
// $Id$
$_SERVER['BASE_PAGE'] = 'releases/5_3_14.php';
include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc';
site_header("PHP 5.3.14 Release Announcement");
?>
<h1>PHP 5.3.14 Release Announcement</h1>
<p>The PHP development team would like to announce the immediate
availability of PHP 5.3.14. This release fixes two security related
issues. All users of PHP 5.3 are encouraged to upgrade to this release.</p>
<p>PHP 5.3.14 fixes an security issue in the implementation of crypt() and a
heap overflow in the Phar extension. Over 30 bugs were fixed</p>
<p>Please note that php://fd is now only available if the CLI SAPI is used</p>
<p>For source downloads of PHP 5.3.14 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>,
Windows binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>.
The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-5.php#5.3.14">ChangeLog</a>.
</p>
<?php site_footer(); ?>

24
releases/5_4_4.php Normal file
View File

@@ -0,0 +1,24 @@
<?php
// $Id$
$_SERVER['BASE_PAGE'] = 'releases/5_4_4.php';
include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc';
site_header("PHP 5.4.4 Release Announcement");
?>
<h1>PHP 5.4.4 Release Announcement</h1>
<p>The PHP development team would like to announce the immediate
availability of PHP 5.4.4. This release fixes two security related
issues. All users of PHP are encouraged to upgrade to this release.</p>
<p>PHP 5.4.4 fixes an security issue in the implementation of crypt() and a
heap overflow in the Phar extension. Over 30 bugs were fixed</p>
<p>Please note that php://fd is now only available if the CLI SAPI is used</p>
<p>For source downloads of PHP 5.4.4 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>,
Windows binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>.
The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-5.php#5.4.4">ChangeLog</a>.
</p>
<?php site_footer(); ?>