mirror of
https://github.com/php/web-php.git
synced 2026-03-23 23:02:13 +01:00
4.3.9 release
This commit is contained in:
Ilia Alshanetsky
@@ -11,6 +11,66 @@ function bugl($number) { echo "<a href=\"http://bugs.php.net/$number\">#$numbe
|
||||
|
||||
<hr />
|
||||
|
||||
<a name="4.3.9"></a>
|
||||
<h3>Version 4.3.9</h3>
|
||||
<b>22-Sep-2004</b>
|
||||
<ul>
|
||||
<li>GPC input processing fixes.</li>
|
||||
<li>Implemented periodic PCRE compiled regexp cache cleanup, to avoid memory exhaustion.</li>
|
||||
<li>Fixed bug with raw_post_data not getting set.</li>
|
||||
<li>Fixed a file-descriptor leak with phpinfo() and other 'special' URLs.</li>
|
||||
<li>Rewritten UNIX and Windows install help files.</li>
|
||||
<li>Updated PCRE to provide better error handling in certain cases.</li>
|
||||
<li>NSAPI: added "bucket" parameter to list of non-php.ini-keys of php4_execute for doing performance stats without warnings in server-log.</li>
|
||||
<li>Fixed leap year checking with idate().</li>
|
||||
<li>Fixed strip_tags() to correctly handle '\0' characters.</li>
|
||||
<li>Fixed funny forking effect in FastCGI when PHP_FCGI_CHILDREN was not set.</li>
|
||||
<li><?php bugfix(30050); ?> (Possible crash inside php_shutdown_config()).</li>
|
||||
<li><?php bugfix(29882); ?> (isset crashes on arrays).</li>
|
||||
<li><?php bugfix(29753); ?> (mcal_fetch_event() allows 2nd argument to be optional).</li>
|
||||
<li><?php bugfix(29727); ?> (Added missing CURL authentication directives).</li>
|
||||
<li><?php bugfix(29719); ?> (fgetcsv() has problem parsing strings ending with escaped enclosures).</li>
|
||||
<li><?php bugfix(29607); ?> (highlighting code with HEREDOC produces invalid output).</li>
|
||||
<li><?php bugfix(29599); ?> (domxml_error segfaults another apache module).</li>
|
||||
<li><?php bugfix(29594); ?> (Use PHP's own tmpfile() implementation).</li>
|
||||
<li><?php bugfix(29581); ?> (Typo inside php.ini comments for mysql.trace_mode).</li>
|
||||
<li><?php bugfix(29493); ?> (extract(array, EXTR_REFS) misbehaves with elements referred twice or more times).</li>
|
||||
<li><?php bugfix(29443); ?> (Sanity check for wbmp detection).</li>
|
||||
<li><?php bugfix(29369); ?> (Uploaded files with ' or " in their names get their names truncated at those characters).</li>
|
||||
<li><?php bugfix(29349); ?> (imagecreatefromstring() crashes with external GD library).</li>
|
||||
<li><?php bugfix(29333); ?> (output_buffering+trans_sess_id can corrupt output).</li>
|
||||
<li><?php bugfix(29226); ?> (ctype_* functions missing validation of numeric string representations).</li>
|
||||
<li><?php bugfix(29209); ?> (imap_fetchbody() doesn't check message index).</li>
|
||||
<li><?php bugfix(29116); ?> (Zend constant warning uses memory after free).</li>
|
||||
<li><?php bugfix(29114); ?> (Potential double free in php_stat).</li>
|
||||
<li><?php bugfix(29075); ?> (strnatcmp() incorrectly handles whitespace).</li>
|
||||
<li><?php bugfix(29049); ?> (array sorting via user function/method does not validate it).</li>
|
||||
<li><?php bugfix(29038); ?> (extract() with EXTR_PREFIX_SAME prefixes empty strings).</li>
|
||||
<li><?php bugfix(29034); ?> (wordwrap() returns a boolean when passed empty string).</li>
|
||||
<li><?php bugfix(28974); ?> (overflow in array_slice(), array_splice(), substr, substr_replace(), strspn(), strcspn()).</li>
|
||||
<li><?php bugfix(28897); ?> (ibase: -1 returned as -0.000 for 64-bit scaled int).</li>
|
||||
<li><?php bugfix(28879); ?> (Implicit/Explicit array creation inconsistency when using Resources, Arrays, or Objects as indices).</li>
|
||||
<li><?php bugfix(28878); ?> (Setting of inikey's in obj.conf fails).</li>
|
||||
<li><?php bugfix(28868); ?> (Internal wrapper registry not thread safe).</li>
|
||||
<li><?php bugfix(28818); ?> (Apache 2 sapis do not export st_dev).</li>
|
||||
<li><?php bugfix(28800); ?> (strings beginning with "inf" improperly converted).</li>
|
||||
<li><?php bugfix(28723); ?> (Fixed mbstring config.m4 to work on OSes where test command does not support -e parameter).</li>
|
||||
<li><?php bugfix(28692); ?> (\0 in Authenticate header passed via safe_mode).</li>
|
||||
<li><?php bugfix(28670); ?> (WWW-Authentication header mangling with PCRE in safe_mode adds extra spaces).</li>
|
||||
<li><?php bugfix(28668); ?> (glob() does not work with relative paths on Windows).</li>
|
||||
<li><?php bugfix(28649); ?> (Proper glob() return value on Linux when there are no matches).</li>
|
||||
<li><?php bugfix(28633); ?> (sprintf incorrectly adding padding to floats).</li>
|
||||
<li><?php bugfix(28627); ?> (When multiple MySQL links are used default link is leaked).</li>
|
||||
<li><?php bugfix(28525); ?> (gmp_powm() does not work with hexadecimal string modulo represented as a string).</li>
|
||||
<li><?php bugfix(28512); ?> (Allocate enough space to store MSSQL data).</li>
|
||||
<li><?php bugfix(28466); ?> (mbstring_convert_variables() array separation problem).</li>
|
||||
<li><?php bugfix(28175); ?> (Allow bundled GD to compile against freetype 2.1.2).</li>
|
||||
|
||||
</ul>
|
||||
There is a <a href="release_4_3_9.php">separate announcement</a> available for this release.<br />
|
||||
|
||||
<hr />
|
||||
|
||||
<a name="4.3.8"></a>
|
||||
<h3>Version 4.3.8</h3>
|
||||
<b>13-Jul-2004</b>
|
||||
@@ -21,10 +81,9 @@ function bugl($number) { echo "<a href=\"http://bugs.php.net/$number\">#$numbe
|
||||
<li>Added missing safe_mode checks inside ftok and itpc. (Ilia)</li>
|
||||
<li><?php bugfix(28963); ?> Fixed address allocation routine in IMAP extension. (Ilia)</li>
|
||||
<li><?php bugfix(28632); ?> Prevent open_basedir bypass via MySQL's LOAD DATA LOCAL. (Ilia)</li>
|
||||
|
||||
</ul>
|
||||
There is a <a href="release_4_3_8.php">separate announcement</a> available for this release.<br />
|
||||
|
||||
There is a <a href="release_4_3_8.php">separate announcement</a> available for this release.<br />
|
||||
<hr />
|
||||
|
||||
<a name="4.3.7"></a>
|
||||
|
||||
@@ -66,6 +66,53 @@ $SIDEBAR_DATA = '
|
||||
site_header("Downloads");
|
||||
?>
|
||||
|
||||
<a name="v4"></a>
|
||||
<h1>PHP 4.3.9</h1>
|
||||
|
||||
<h2>Complete Source Code</h2>
|
||||
<ul>
|
||||
<li>
|
||||
<?php download_link('php-4.3.9.tar.bz2','PHP 4.3.9 (tar.bz2)'); ?> - 22 Sep 2004<br />
|
||||
<span class="md5sum">md5: b799bbb330da60324d972641baab693c</span>
|
||||
</li>
|
||||
<li>
|
||||
<?php download_link('php-4.3.9.tar.gz', 'PHP 4.3.9 (tar.gz)'); ?> - 22 Sep 2004<br />
|
||||
<span class="md5sum">md5: c685cb76bff996a4dff87097c43e6987</span>
|
||||
</li>
|
||||
</ul>
|
||||
|
||||
<p>
|
||||
See the <a href="/ChangeLog-4.php">ChangeLog</a> for a complete list of changes,
|
||||
or the <a href="/release_4_3_8.php">release notes</a> for more information on
|
||||
this particular release. Daily snapshots are also available from
|
||||
<a href="http://snaps.php.net/">snaps.php.net</a> (not intended for production use!).
|
||||
</p>
|
||||
|
||||
<h2>Windows Binaries</h2>
|
||||
|
||||
<p>
|
||||
All Windows binaries can be used on Windows 98/Me and on Windows NT/2000/XP/2003.
|
||||
</p>
|
||||
|
||||
<ul>
|
||||
<li>
|
||||
<?php download_link('php-4.3.9-Win32.zip', 'PHP 4.3.9 zip package'); ?> - 22 Sep 2004<br />
|
||||
(CGI binary plus server API versions for Apache, Apache2 (experimental),
|
||||
ISAPI, NSAPI, Servlet and Pi3Web. MySQL support built-in, many extensions
|
||||
included, packaged as zip)<br />
|
||||
<span class="md5sum">md5: c4a4c349e729b339a27c72abe833c58d</span>
|
||||
</li>
|
||||
<li>
|
||||
<?php download_link('php-4.3.9-installer.exe', 'PHP 4.3.9 installer'); ?> - 22 Sep 2004<br />
|
||||
(CGI only, MySQL support built-in, packaged as Windows installer to install
|
||||
and configure PHP, and automatically configure IIS, PWS and Xitami, with
|
||||
manual configuration for other servers. N.B. no external extensions
|
||||
included)<br />
|
||||
<span class="md5sum">md5: 4a2af567ba607e40e4ca4e58adba5cc0</span>
|
||||
</li>
|
||||
</ul>
|
||||
|
||||
<hr />
|
||||
|
||||
<a name="v5"></a>
|
||||
<h1>PHP 5.0.1</h1>
|
||||
@@ -113,54 +160,6 @@ site_header("Downloads");
|
||||
|
||||
<hr />
|
||||
|
||||
<a name="v4"></a>
|
||||
<h1>PHP 4.3.8</h1>
|
||||
|
||||
<h2>Complete Source Code</h2>
|
||||
<ul>
|
||||
<li>
|
||||
<?php download_link('php-4.3.8.tar.bz2','PHP 4.3.8 (tar.bz2)'); ?> - 13 July 2004<br />
|
||||
<span class="md5sum">md5: e8ab484fcb94cd2e0d7ecfd0762cfd33</span>
|
||||
</li>
|
||||
<li>
|
||||
<?php download_link('php-4.3.8.tar.gz', 'PHP 4.3.8 (tar.gz)'); ?> - 13 July 2004<br />
|
||||
<span class="md5sum">md5: dd69f8c89281f088eadf4ade3dbd39ee</span>
|
||||
</li>
|
||||
</ul>
|
||||
|
||||
<p>
|
||||
See the <a href="/ChangeLog-4.php">ChangeLog</a> for a complete list of changes,
|
||||
or the <a href="/release_4_3_8.php">release notes</a> for more information on
|
||||
this particular release. Daily snapshots are also available from
|
||||
<a href="http://snaps.php.net/">snaps.php.net</a> (not intended for production use!).
|
||||
</p>
|
||||
|
||||
<h2>Windows Binaries</h2>
|
||||
|
||||
<p>
|
||||
All Windows binaries can be used on Windows 98/Me and on Windows NT/2000/XP/2003.
|
||||
</p>
|
||||
|
||||
<ul>
|
||||
<li>
|
||||
<?php download_link('php-4.3.8-Win32.zip', 'PHP 4.3.8 zip package'); ?> - 13 July 2004<br />
|
||||
(CGI binary plus server API versions for Apache, Apache2 (experimental),
|
||||
ISAPI, NSAPI, Servlet and Pi3Web. MySQL support built-in, many extensions
|
||||
included, packaged as zip)<br />
|
||||
<span class="md5sum">md5: dbf32bfa687e55dbc697d08c4ee09bf2</span>
|
||||
</li>
|
||||
<li>
|
||||
<?php download_link('php-4.3.8-installer.exe', 'PHP 4.3.8 installer'); ?> - 13 July 2004<br />
|
||||
(CGI only, MySQL support built-in, packaged as Windows installer to install
|
||||
and configure PHP, and automatically configure IIS, PWS and Xitami, with
|
||||
manual configuration for other servers. N.B. no external extensions
|
||||
included)<br />
|
||||
<span class="md5sum">md5: feea15b4405844fe44b17bd3973df674</span>
|
||||
</li>
|
||||
</ul>
|
||||
|
||||
<hr />
|
||||
|
||||
<h1>Security fixes and patches</h1>
|
||||
|
||||
<h2>File Uploads Security Fix</h2>
|
||||
|
||||
19
index.php
19
index.php
@@ -147,17 +147,20 @@ commonHeader("Hypertext Preprocessor");
|
||||
?>
|
||||
|
||||
<?php news_image("/downloads.php#v4", "php-version4.gif", "PHP 4"); ?>
|
||||
<h1>PHP 4.3.9RC3 released!</h1>
|
||||
<h1>PHP 4.3.9 released!</h1>
|
||||
<p>
|
||||
<span class="newsdate">[14-Sep-2004]</span>
|
||||
<a href="http://qa.php.net/">PHP 4.3.9RC3</a> has been released for testing.
|
||||
This is the last release candidate before the final release and should have
|
||||
a very low number of problems and/or bugs. Nevertheless, please download and
|
||||
test it as much as possible on real-life applications to uncover any remaining issues.
|
||||
<span class="newsdate">[22-Sep-2004]</span>
|
||||
PHP Development Team is proud to announce the immediate release of PHP <a href="/downloads.php">PHP 4.3.9</a>.
|
||||
This is a maintenance release that in addition to over 50 non-critical bug fixes, addresses a problem
|
||||
with GPC input processing. This release also re-introduces ability to write
|
||||
GIF images via the bundled GD extension.
|
||||
All Users of PHP are encouraged to upgrade to this release as soon as possible.
|
||||
</p>
|
||||
|
||||
<p>List of changes can be found in the
|
||||
<a href="http://viewcvs.php.net/viewcvs.cgi/php-src/NEWS.diff?r1=1.1247.2.724&r2=1.1247.2.726">NEWS</a> file.</p>
|
||||
<p>
|
||||
For changes since PHP 4.3.8, please consult the
|
||||
<a href="/ChangeLog-4.php#4.3.9">ChangeLog</a>.
|
||||
</p>
|
||||
|
||||
<hr />
|
||||
|
||||
|
||||
49
release_4_3_9.php
Normal file
49
release_4_3_9.php
Normal file
@@ -0,0 +1,49 @@
|
||||
<?php
|
||||
// $Id$
|
||||
$_SERVER['BASE_PAGE'] = 'release_4_3_9.php';
|
||||
include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc';
|
||||
site_header("PHP 4.3.9 Release Announcement");
|
||||
?>
|
||||
|
||||
<h1>PHP 4.3.9 Release Announcement</h1>
|
||||
<!--
|
||||
<p>[ <a href="/release_4_3_9_fr.php">Version Française</a> ]</p>
|
||||
-->
|
||||
<p>
|
||||
PHP Development Team is proud to announce the immediate release of PHP <a href="/downloads.php">PHP 4.3.9</a>.
|
||||
This is a maintenance release that in addition to over 50 non-critical bug fixes, addresses a problem
|
||||
with GPC input processing. This release also re-introduces ability to write
|
||||
GIF images via the bundled GD extension.
|
||||
All Users of PHP are encouraged to upgrade to this release as soon as possible.
|
||||
</p>
|
||||
|
||||
<h2>Bugfix release</h2>
|
||||
|
||||
<p>
|
||||
Aside from the above mentioned issues this release includes the following important fixes:
|
||||
</p>
|
||||
|
||||
<ul>
|
||||
<li>Implemented periodic PCRE compiled regexp cache cleanup, to avoid memory exhaustion</li>
|
||||
<li>Fixed strip_tags() to correctly handle '\0' characters.</li>
|
||||
<li>Rewritten UNIX and Windows install help files.</li>
|
||||
<li>Fixed a file-descriptor leak with phpinfo() and other 'special' URLs.</li>
|
||||
<li>Fixed possible crash inside php_shutdown_config().</li>
|
||||
<li>Fixed isset crashes on arrays.</li>
|
||||
<li>Fixed imagecreatefromstring() crashes with external GD library.</li>
|
||||
<li>Fixed fgetcsv() parsing of strings ending with escaped enclosures.</li>
|
||||
<li>Fixed overflow in array_slice(), array_splice(), substr(), substr_replace(), strspn(), strcspn().</li>
|
||||
<li>Fixed '\0' in Authenticate header passed via safe_mode.</li>
|
||||
<li>Allow bundled GD to compile against freetype 2.1.2.</li>
|
||||
|
||||
|
||||
<li>All in all this release fixes over 50 bugs that have been discovered and resolved
|
||||
since the 4.3.8 release.</li>
|
||||
</ul>
|
||||
|
||||
<p>
|
||||
For a full list of changes in PHP 4.3.9, see the
|
||||
<a href="/ChangeLog-4.php#4.3.9">ChangeLog</a>.
|
||||
</p>
|
||||
|
||||
<?php site_footer(); ?>
|
||||
31
releases.php
31
releases.php
@@ -121,6 +121,37 @@ site_header("Releases");
|
||||
</li>
|
||||
</ul>
|
||||
|
||||
<a name="4.3.8"></a>
|
||||
<h2>4.3.8</h2>
|
||||
|
||||
<ul>
|
||||
<li>Released: 13 July 2004</li>
|
||||
<li>Announcement: <a href="/release_4_3_8.php">English</a></li>
|
||||
<li><a href="/ChangeLog-4.php#4.3.8">ChangeLog</a></li>
|
||||
<li>
|
||||
Download:
|
||||
<ul>
|
||||
<li>
|
||||
<?php download_link('php-4.3.8.tar.bz2','Source (tar.bz2)'); ?><br />
|
||||
<span class="md5sum">md5: e8ab484fcb94cd2e0d7ecfd0762cfd33</span>
|
||||
</li>
|
||||
<li>
|
||||
<?php download_link('php-4.3.8.tar.gz','Source (tar.gz)'); ?><br />
|
||||
<span class="md5sum">md5: dd69f8c89281f088eadf4ade3dbd39ee</span>
|
||||
</li>
|
||||
<li>
|
||||
<?php download_link('php-4.3.8-Win32.zip','Windows binary'); ?><br />
|
||||
<span class="md5sum">md5: dbf32bfa687e55dbc697d08c4ee09bf2</span>
|
||||
</li>
|
||||
<li>
|
||||
<?php download_link('php-4.3.8-installer.exe','Windows installer'); ?><br />
|
||||
<span class="md5sum">md5: feea15b4405844fe44b17bd3973df674</span>
|
||||
</li>
|
||||
</ul>
|
||||
</li>
|
||||
</ul>
|
||||
|
||||
|
||||
<a name="4.3.7"></a>
|
||||
<h2>4.3.7</h2>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user