See the ChangeLog for a complete list of changes,
- or the release notes for more information on
+ or the release notes for more information on
this particular release. Daily snapshots are also available from
snaps.php.net (not intended for production use!).
@@ -96,19 +96,19 @@ site_header("Downloads");
- - 22 Sep 2004
+ - 15 Dec 2004
(CGI binary plus server API versions for Apache, Apache2 (experimental),
ISAPI, NSAPI, Servlet and Pi3Web. MySQL support built-in, many extensions
included, packaged as zip)
- md5: c4a4c349e729b339a27c72abe833c58d
+ md5: 0bb30525512ea686abf22c8fe61e1bb6
- - 22 Sep 2004
+ - 15 Dec 2004
(CGI only, MySQL support built-in, packaged as Windows installer to install
and configure PHP, and automatically configure IIS, PWS and Xitami, with
manual configuration for other servers. N.B. no external extensions
included)
- md5: 4a2af567ba607e40e4ca4e58adba5cc0
+ md5: 6d60129d738e16ea0b69f3fd6646bf3a
diff --git a/index.php b/index.php
index c2c662d14..c4924990a 100644
--- a/index.php
+++ b/index.php
@@ -145,6 +145,26 @@ commonHeader("Hypertext Preprocessor");
// DO NOT REMOVE THIS COMMENT (the RSS parser is dependant on it)
?>
+
+
PHP 4.3.10 released!
+
+ [15-Dec-2004]
+ PHP Development Team would like to announce the immediate release of
+ PHP 4.3.10. This is a maintenance release
+ that in addition to over 30 non-critical bug fixes addresses several very
+ serious security issues. All Users of PHP are strongly encouraged to upgrade
+ to this release as soon as possible.
+
+
+
+ For changes since PHP 4.3.9, please consult the
+ ChangeLog.
+
- [08-Dec-2004]
- PHP 4.3.10RC2 has been released for testing.
- This is the second release candidate and should be very near production quality.
- Nevertheless, please download and test it as much as possible on real-life
- applications to uncover any remaining issues.
-
-
-
-
PHP West Conferences: Web Services - Vancouver, BC
+PHP Development Team would like to announce the immediate release of PHP 4.3.10. This is a
+maintenance release that in addition to over 30 non-critical bug fixes addresses several very
+serious security issues.
+
+
+These include the following:
+
+CAN-2004-1018 - shmop_write() out of bounds memory write access.
+CAN-2004-1018 - integer overflow/underflow in pack() and unpack() functions.
+CAN-2004-1019 - possible information disclosure, double free and negative reference index array underflow in deserialization code.
+CAN-2004-1020 - addslashes not escaping \0 correctly.
+CAN-2004-1063 - safe_mode execution directory bypass.
+CAN-2004-1064 - arbitrary file access through path truncation.
+CAN-2004-1065 - exif_read_data() overflow on long sectionname.
+magic_quotes_gpc could lead to one level directory traversal with file uploads.
+
+All Users of PHP are strongly encouraged to upgrade to this release as soon as possible.
+
+
Bugfix release
+
+
+ Aside from the above mentioned issues this release includes the following important fixes:
+
+
+
+
Possible crash inside ftp_get().
+
get_current_user() crashes on Windows.
+
Possible crash in ctype_digit on large numbers.
+
Crash when parsing ?getvariable[][.
+
Possible crash in the curl_getinfo() function.
+
Double free when openssl_csr_new fails.
+
Crash when using unknown/unsupported session.save_handler and/or session.serialize_handler.
+
Prevent infinite recursion in url redirection.
+
Ensure that temporary files created by GD are removed.
+
Crash in fgetcsv() with negative length.
+
Improved performance of the foreach() construct.
+
Improved number handling on non-English locales.
+
+
+
+ For a full list of changes in PHP 4.3.10, see the
+ ChangeLog.
+