PHP 5.2.12 Released!
The PHP development team would like to announce the immediate
availability of PHP 5.2.12. This release focuses on improving the
stability of the PHP 5.2.x branch with over 60 bug fixes, some of which
are security related. All users of PHP 5.2 are encouraged to upgrade to
this release.
Security Enhancements and Fixes in PHP 5.2.12:
- Fixed a safe_mode bypass in tempnam() identified by Grzegorz
Stachowiak. (CVE-2009-3557, Rasmus)
- Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz
Stachowiak. (CVE-2009-3558, Rasmus)
- Added "max_file_uploads" INI directive, whic
|
12/17/2009 3:15:39 PM
|
0
|
i...@ilia.ws (Ilia Alshanetsky)
|
5.3.1 Release announcement
The PHP development team would like to announce the immediate
availability of PHP 5.3.1. This release focuses on improving the
stability of the PHP 5.3.x branch with over 100 bug fixes, some of
which are security related. All users are encouraged to upgrade to
this release.
Security Enhancements and Fixes in PHP 5.3.1:
- Added "max_file_uploads" INI directive, which can be set to limit the
number of file uploads per-request to 20 by default, to prevent
possible DOS via temporary file exhaustion. (Ilia)
- Added missing sanity checks around exif processing. (CVE-2009-32
|
11/19/2009 11:41:55 PM
|
0
|
johan...@php.net (Johannes =?ISO-8859-1?Q?Schl=FCter?=)
|
PHP 5.2.11 Released!
The PHP development team would like to announce the immediate
availability of PHP 5.2.11. This release focuses on improving the
stability of the PHP 5.2.x branch with over 75 bug fixes, some of
which are security related. All users of PHP 5.2 are encouraged to
upgrade to this release.
Security Enhancements and Fixes in PHP 5.2.11:
Fixed certificate validation inside
php_openssl_apply_verification_policy. (Ryan Sleevi, Ilia)
Fixed sanity check for the color index in imagecolortransparent().
(Pierre)
Added missing sanity checks around exif processing. (Ilia)
Fixed bu
|
9/18/2009 2:25:48 AM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5.3.0 Released!
Hello!
The PHP Development Team would like to announce the immediate release
of PHP 5.3.0. This release is a major improvement in the 5.X series,
which includes a large number of new features and bug fixes.
Release Announcement: http://www.php.net/release/5_3_0.php
Downloads: http://php.net/downloads.php#v5.3.0
Changelog: http://www.php.net/ChangeLog-5.php#5.3.0
regards,
Johannes and Lukas
|
6/30/2009 1:05:38 PM
|
0
|
lsm...@php.net (Lukas Kahwe Smith)
|
PHP 5.2.10 Released!
The PHP development team would like to announce the immediate
availability of PHP 5.2.10. This release focuses on improving the
stability of
the PHP 5.2.x branch with over 100 bug fixes, one of which is security
related. All users of PHP are encouraged to upgrade to this release.
Security Enhancements and Fixes in PHP 5.2.10:
Fixed bug #48378 (exif_read_data() segfaults on certain
corrupted .jpeg files).
Key enhancements in PHP 5.2.10 include:
Added "ignore_errors" option to http fopen wrapper.
Fixed memory corruptions while reading properties of zip files.
Fixed
|
6/19/2009 12:28:29 AM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5.2.8 Released
The PHP development team would like to announce the immediate
availability of PHP 5.2.8. This release addresses a regression
introduced by 5.2.7 in regard to the magic_quotes functionality, that
was broken by an incorrect fix to the filter extension. All users who
have upgraded to 5.2.7 are encouraged to upgrade to this release,
alternatively you can apply a work-around for the bug by changing
"filter.default_flags=0" in php.ini.
For users upgrading from PHP 5.0 and PHP 5.1, an upgrade guide is
available here (http://www.php.net/migration52), detailing the changes
be
|
12/8/2008 11:59:41 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5.2.7 Released
The PHP development team would like to announce the immediate
availability of PHP 5.2.7. This release focuses on improving the
stability of the PHP 5.2.x branch with over 170 bug fixes, several of
which are security related. All users of PHP are encouraged to upgrade
to this release.
Security Enhancements and Fixes in PHP 5.2.7:
* Upgraded PCRE to version 7.8 (Fixes CVE-2008-2371)
* Fixed missing initialization of BG(page_uid) and BG(page_gid),
reported by Maksymilian Arciemowicz.
* Fixed a crash inside gd with invalid fonts (Fixes CVE-2008-3658).
* Fixed a possible
|
12/5/2008 4:32:14 AM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5.2.6 Released
The PHP development team would like to announce the immediate
availability of PHP 5.2.6. This release focuses on improving the
stability of the PHP 5.2.x branch with over 120 bug fixes, several of
which are security related. All users of PHP are encouraged to upgrade
to this release.
Security Enhancements and Fixes in PHP 5.2.6:
* Fixed possible stack buffer overflow in the FastCGI SAPI identified
by Andrei Nigmatulin.
* Fixed integer overflow in printf() identified by Maksymilian
Aciemowicz.
* Fixed security issue detailed in CVE-2008-0599 identified by Ryan
Pe
|
5/2/2008 1:43:42 AM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 4.4.8 Released!
Hello!
The PHP development team would like to announce the immediate
availability of PHP 4.4.8. It continues to improve the security and the
stability of the 4.4 branch and all users are strongly encouraged to
upgrade to it as soon as possible. This release wraps up all the
outstanding patches for the PHP 4.4 series, and is therefore the last
normal PHP 4.4 release. If necessary, releases to address security
issues could be made until 2008-08-08.
A separate release announcement is also available. For changes in PHP
4.4.8 since PHP 4.4.7, please consult the PHP 4 ChangeLog.
|
1/3/2008 11:27:36 AM
|
0
|
der...@php.net (Derick Rethans)
|
PHP 5.2.4 Released
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The PHP development team would like to announce the immediate
availability of PHP 5.2.4. This release focuses on improving the
stability of the PHP 5.2.X branch with over 120 various bug fixes in
addition to resolving several low priority security bugs. All users
of PHP are encouraged to upgrade to this release.
Security Enhancements and Fixes in PHP 5.2.4
- ----------------------------------------------------------------
* Fixed a floating point exception inside wordwrap() (Reported by
Mattias Bengtsson)
* Fixed several in
|
8/31/2007 1:42:39 AM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5.2.3 Released
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The PHP development team would like to announce the immediate
availability of PHP 5.2.3. This release continues to improve the
security and the stability of the 5.X branch as well as addressing
two regressions introduced by the previous 5.2 releases. These
regressions relate to the timeout handling over non-blocking SSL
connections and the lack of HTTP_RAW_POST_DATA in certain conditions.
All users are encouraged to upgrade to this release.
Security Enhancements and Fixes in PHP 5.2.3
- ------------------------------------
|
5/31/2007 11:10:51 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5.2.2 and PHP 4.4.7 Released!
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The PHP development team would like to announce the immediate
availability of PHP 5.2.2 and availability of PHP 4.4.7. These
releases are major stability and security enhancements of the 5.x and
4.4.x branches, and all users are strongly encouraged to upgrade to
it as soon as possible. Further details about the PHP 5.2.2 release
can be found in the release announcement for 5.2.2 (http://
www.php.net/releases/5_2_2.php). Details about the PHP 4.4.7 release
can be found in the release announcement for 4.4.7 (http://
www.php.
|
5/4/2007 12:24:12 AM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 4.4.6 Released!
Hello!
The PHP development team would like to announce the immediate
availability of PHP 4.4.6. This release addresses a crash problem with
the session extension when register_globals is turned on that was
introduced in PHP 4.4.6. This release comes also with the new version
7.0 of PCRE and it addresses a number of minor bugs.
A separate release announcement is also available. For changes in PHP
4.4.6 since PHP 4.4.5, please consult the PHP 4 ChangeLog.
Release Announcement: http://www.php.net/release_4_4_6.php
Downloads: http://www.php.net/downloads.php#v4
Ch
|
3/1/2007 10:34:06 AM
|
0
|
der...@php.net (Derick Rethans)
|
PHP 4.4.5 Released
Hello!
The PHP Development Team would like to announce the immediate release of
PHP 4.4.5.
This release is a stability and security enhancement of the 4.4.X
branch, and all users are strongly encouraged to upgrade to it as soon
as possible.
A separate release announcement is also available. For changes in PHP
4.4.5 since PHP 4.4.4, please consult the PHP 4 ChangeLog.
Release Announcement: http://www.php.net/release_4_4_5.php
Downloads: http://www.php.net/downloads.php#v4
Changelog: http://www.php.net/ChangeLog-4.php#4.4.5
regards,
Derick
--
|
2/14/2007 6:03:21 PM
|
0
|
der...@php.net (Derick Rethans)
|
PHP 5.2.1 Released!
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The PHP development team would like to announce the immediate
availability of PHP 5.2.1. This release is a major stability and
security enhancement of the 5.X branch, and all users are strongly
encouraged to upgrade to it as soon as possible.
Security Enhancements and Fixes in PHP 5.2.1:
* Fixed possible safe_mode & open_basedir bypasses inside the session
extension.
* Prevent searchs engine from indexing the phpinfo() page.
* Fixed a number of input processing bugs inside the filter extension.
* Fixed unserialize() abuse o
|
2/9/2007 1:29:28 AM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5.2.0 Released!
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The PHP development team is proud to announce the immediate release
of PHP 5.2.0. This release is a major improvement in the 5.X series,
which includes a large number of new features, bug fixes and security
enhancements.
The key features of PHP 5.2.0 include:
* New memory manager for the Zend Engine with improved performance
and a more accurate memory usage tracking.
* Input filtering extension was added and enabled by default.
* JSON extension was added and enabled by default.
* ZIP extension for creating and editing zip f
|
11/2/2006 6:12:56 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 4.4.4 and 5.1.5 Released!
Hello,
PHP development team would like to announce the immediate availability
of PHP 5.1.5 and PHP 4.4.4. The two releases address a series of
security problems discovered since PHP 5.1.4 and 4.4.3, respectively.
These include the following:
- Added missing safe_mode/open_basedir checks inside the error_log(),
file_exists(), imap_open() and imap_reopen() functions.
- Fixed overflows inside str_repeat() and wordwrap() functions on 64bit
systems.
- Fixed possible open_basedir/safe_mode bypass in cURL extension and on
PHP 5.1.5 with realpath cache.
- Fixed overflow in GD ext
|
8/17/2006 8:05:25 PM
|
0
|
der...@php.net (Derick Rethans)
|
PHP 5.1.3 Released!
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The PHP development team is proud to announce the release of PHP
5.1.3. This release combines a few feature enhancements with a
significant amount of bug fixes and resolves a number of security
issues. All PHP users are encouraged to upgrade to this release as
soon as possible.
The security issues resolved include the following:
Disallow certain characters in session names.
Fixed a buffer overflow inside the wordwrap() function.
Prevent jumps to parent directory via the 2nd parameter of
the te
|
5/1/2006 11:59:04 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 4.4.2 released!
Hello!
The PHP Development Team would like to announce the immediate release of
PHP 4.4.2. This is a maintenance release that addresses a number of
minor security problems and fixes a few regressions that shown up in PHP
4.4.1. All users of PHP 4 are recommended to upgrade to PHP 4.4.2.
A separate release announcement is also available. For changes in PHP
4.4.2 since PHP 4.4.1, please consult the PHP 4 ChangeLog.
Release Announcement: http://www.php.net/release_4_4_2.php
Downloads: http://www.php.net/downloads.php#v4
Changelog: http://www.php.net/Chang
|
1/13/2006 2:34:56 PM
|
0
|
der...@php.net (Derick Rethans)
|
PHP 5.1.2 Released!
The PHP development team is proud to announce the release of PHP 5.1.2.
This release combines small feature enhancements with a fair number of
bug fixes and addresses three security issues. All PHP 5 users are
encouraged to upgrade to this release.
The security issues resolved include the following:
* HTTP Response Splitting has been addressed in ext/session and in the
header() function. Header() can no longer be used to send multiple
response headers in a single call.
* Format string vulnerability in ext/mysqli.
* Possible cross-site scripting problems in certain error conditions
|
1/12/2006 3:42:28 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5.1.1 Released!
The PHP Development Team would like to announce the immediate release of
PHP 5.1.1.
This is a regression correction release aimed at addressing several
issues that may cause issues for some applications. The main fixes
found in this release include the following:
* Native date class is withdrawn to prevent namespace conflict with
PEAR's date package.
* Fixed fatal parse error when the last line of the script is a PHP comment.
* eval() hangs when the code being evaluated ends with a comment.
* Usage of \{$var} in PHP 5.1.0 resulted in the output of {$var} instead
of the $var varia
|
11/28/2005 3:59:47 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
Proposed 5.1 Release Announcement
The PHP development team is proud to announce the release of PHP 5.1.
Some of the key features of PHP 5.1 include:
* A complete rewrite of date handling code, with improved timezone support.
* Significant performance improvements compared to PHP 5.0.X.
* PDO extension is now enabled by default.
* Over 30 new functions in various extensions and built-in functionality.
* Bundled libraries, PCRE and SQLite upgraded to latest versions.
* Over 400 various bug fixes.
* PEAR upgraded to version 1.4.5
The full details of the changes in PHP 5.1.0 can be found here:
http://www.php.net/Chan
|
11/24/2005 9:38:51 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 4.4.1 has been released
Hello!
PHP 4.4.1 is now available for download [1]. This version is a
maintenance release, that contains numerous bug fixes, including a
number of security fixes related to the overwriting of the GLOBALS
array. All users of PHP 4.3 and 4.4 are encouraged to upgrade to this
version.
The full list of changes in PHP 4.4.1 is available in the PHP 4
ChangeLog [2] and a list with the most important changes is available
through the release announcement [3].
[1] http://php.net/downloads.php#v4
[2] http://php.net/ChangeLog-4.php#4.1.1
[3] http://php.net/release_4_4_1.php
regar
|
10/31/2005 1:43:19 PM
|
0
|
der...@php.net (Derick Rethans)
|
PHP 4.4.0 Released!
Hello!
The PHP Development Team would like to announce the immediate release of
PHP 4.4.0. This is a maintenance release that addresses a serious memory
corruption problem within PHP concerning references. If references were
used in a wrong way, PHP would often create memory corruptions which
would not always surface and be visible. The increased middle digit was
required because the fix that corrected the problem with references
changed PHP's internal API. PHP 4.4.0 does not have any new features,
and is solely a bugfix release.
A separate release announcement is also avai
|
7/11/2005 3:09:06 PM
|
0
|
der...@php.net (Derick Rethans)
|
PHP 4.3.11 & 5.0.4 Released!
The PHP Development Team would like to announce the immediate release of
PHP 4.3.11 and 5.0.4. These are maintenance releases that in addition
to fixing over 70 non-critical bugs, address several security issues.
The addressed security issues include fixes to the exif and fbsql
extensions, as well as fixes to unserialize(), swf_definepoly() and
getimagesize().
All users of PHP are strongly encouraged to upgrade to this release.
Aside from the above mentioned issues this release includes the
following important fixes:
* Crash in bzopen() if supplied path to non-existent fi
|
3/31/2005 9:50:22 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 4.3.10 & 5.0.3 Released!
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
PHP Development Team would like to announce the immediate release of PHP
4.3.10 and 5.0.3. These are maintenance releases that in addition to
non-critical bug fixes address several very serious security issues.
These include the following:
CAN-2004-1018 - shmop_write() out of bounds memory write access.
CAN-2004-1018 - integer overflow/underflow in pack() and unpack() functions.
CAN-2004-1019 - possible information disclosure, double free and
negative reference index array underflow in deserialization code.
CAN-2004-1020 - addslashe
|
12/15/2004 9:00:42 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5.0.2 Released
The PHP Development Team is proud to announce the immediate release of PHP
5.0.2.
This is a maintenance release that in addition to many non-critical bug
fixes, addresses a problem with GPC input processing.
All Users of PHP 5 are encouraged to upgrade to this release as soon as
possible.
For changes since PHP 5.0.1, please consult the Changelog
(http://www.php.net/ChangeLog-5.php#5.0.2)
Enjoy,
PHP Development Team
|
9/24/2004 5:40:47 PM
|
0
|
a...@zend.com (Andi Gutmans)
|
PHP 4.3.9 Released
PHP Development Team is proud to announce the immediate release of PHP
4.3.9.
This is a maintenance release that in addition to over 50 non-critical
bug fixes, addresses a problem
with GPC input processing. This release also re-introduces ability to write
GIF images via the bundled GD extension.
All Users of PHP are encouraged to upgrade to this release as soon as
possible.
Aside from the above mentioned issues this release includes the
following important fixes:
* Implemented periodic PCRE compiled regexp cache cleanup, to avoid
memory exhaustion
* Fixed strip_tags() to c
|
9/23/2004 6:25:26 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5.0.1 Released!
The PHP Development Team is glad to announce the release of PHP 5.0.1.
This release is a maintenance release consisting mainly of bug fixes. It
also includes new installation docs which are
now auto-generated directly from the PHP Manual (INSTALL in the UNIX source
package, install.txt in the Windows binary distribution both available at
http://www.php.net/downloads.php)
A full list of changes can be found at http://www.php.net/ChangeLog-5.php#5.0.1
Enjoy,
PHP Development Team
|
8/13/2004 5:40:47 PM
|
0
|
a...@zend.com (Andi Gutmans)
|
PHP 5.0.0 Released!
The PHP development team is proud to announce the official release of PHP 5.
Some of the key features of PHP 5 include:
- The Zend Engine II with a new object model and dozens of new features.
- XML support has been completely redone in PHP 5, all extensions are now
focused around the excellent libxml2 library (http://www.xmlsoft.org/).
- A new SimpleXML extension for easily accessing and manipulating XML as
PHP objects. It can also interface with the DOM extension and vice-versa.
- A brand new built-in SOAP extension for interoperability with Web Services.
- A new MySQL extension
|
7/13/2004 11:22:05 PM
|
0
|
a...@zend.com (Andi Gutmans)
|
PHP 4.3.8 Released
=2D----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
PHP Development Team is would like to announce the immediate availability o=
f=20
PHP 4.3.8. This release is made in response to several security issues that=
=20
have been discovered since the 4.3.7 release. All users of PHP are strongly=
=20
encouraged to upgrade to PHP 4.3.8 as soon as possible.
PHP 5.0 is not affected by these security issues.
PHP Development Team.
=2D----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
iD8DBQFA9GOeLKekh381/CERAhLXAKCMNvmY4sMDZmG0ZydKRMq0TNNxrwCgncWS
0jUmaBrYXP6PKDlI2T9lGLo=3D
|
7/13/2004 10:35:03 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 4.3.7 Released
=2D----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
PHP Development Team is proud to announce the release of PHP 4.3.7.
This is a maintenance release that in addition to several non-critical bug=
=20
fixes, addresses an input validation vulnerability in escapeshellcmd() and=
=20
escapeshellarg() functions on the Windows platform. Users of PHP on Windows=
=20
are encouraged to upgrade to this release as soon as possible.
Aside from the above mentioned issues this release includes the following=20
important fixes:
Synchronized bundled GD library with GD 2.0.23.
=46ixed a bug that
|
6/3/2004 12:47:03 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 4.3.6 Released
PHP Development Team is proud to announce the release of PHP 4.3.6. This is
is a bug fix release whose primary goal is to address two bugs which may
result in crashes in PHP builds with thread-safety enabled. All users of PHP
in a threaded environment (Windows) are strongly encouraged to upgrade to
this release.
Aside from the above mentioned issues this release includes the following
important fixes:
- Updated bundled PDFLib library to version 5.0.3p1 in Windows distribution.
- Synchronized bundled GD library with GD 2.0.22.
- Fixed bugs that prevented building of GD extensio
|
4/15/2004 9:28:10 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 4.3.5 Released
PHP Development Team is proud to announce the release of PHP 4.3.5. This is
primarily a bug fix release, without any new features or additions.PHP 4.3.5
is by far the most stable release of PHP to date and it is recommended that
all users upgrade to this release whenever possible.
The major fixes include:
- Fixed INI leak between Apache virtual hosts.
- Fixed crashes inside fgetcsv() and make the function binary safe.
- Fixed compilation with early versions of GCC 3.0.
- Fixed a bug that prevented feof() from working correctly with sockets.
- Improved the matching algorithm inside t
|
3/26/2004 1:55:52 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5 Release Candidate 1
The PHP development team is proud to announce the release of PHP 5 Release
Candidate 1.
Some of the key features of PHP 5 include:
- The Zend Engine II with a new object model and dozens of new features.
- XML support has been completely redone in PHP 5, all extensions are now
focused around the excellent libxml2 library (http://www.xmlsoft.org/).
- A new MySQL extension named MySQLi for developers using MySQL 4.1 and
later. Additionally to a functional interface this new extension also
includes an object-oriented interfaced and support for many of MySQL's new
features such as
|
3/18/2004 5:24:49 PM
|
0
|
a...@zend.com (Andi Gutmans)
|
PHP 5 Beta 3 Released!
Dear PHP users,
PHP 5.0.0 Beta 3 has been released. Many bugs have been fixed since Beta 2,
some of which aren't mentioned in the NEWS file (which you can find at the
end of this email).
The PHP 5.0 source tree will now enter a feature freeze and we are moving
into bug fixing mode, therefore, we will hopefully have a Release Candidate
as the next version.
Enjoy and Happy Holidays,
PHP Development Team.
NEWS file:
21 Dec 2003, PHP 5 Beta 3
- Bundled new tidy extension (John, Wez)
- Upgraded PCRE library to version 4.5. (Andrei)
- Dropped Windows 95 support. (Andi)
-
|
12/22/2003 10:48:05 AM
|
0
|
a...@zend.com (Andi Gutmans)
|
PHP 4.3.4 Released
PHP 4.3.4 has been released. The focus of this release was the resolution of
bugs and at the time of release some 70 bugs were resolved. All users are
encouraged to upgrade to 4.3.4.
PHP 4.3.4 contains, among others, following important fixes:
* Fixed disk_total_space() and disk_free_space() under FreeBSD.
* Fixed FastCGI being unable to bind to a specific IP.
* Fixed several bugs in mail() implementation on win32.
* Fixed crashes in a number of functions.
* Fixed compile failure on MacOSX 10.3 Panther.
Enjoy,
PHP Development Team.
|
11/4/2003 1:25:47 AM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5.0.0 Beta 2 released!
Dear PHP users,
PHP 5.0.0 Beta 2 has been released. This is the first feature complete=20
version of PHP 5 except for work on extensions, and we recommend for PHP=20
users to try it. PHP 5 is still not ready for production use!
Some of the more major changes include:
- PHP 5 features the Zend Engine 2.
- XML support has been completely redone in PHP 5, all extensions are now=20
focused around the excellent libxml2 library (http://www.xmlsoft.org/).
- SQLite has been bundled with PHP. For more information on SQLite, please=
=20
visit their =B7 website.
- A new SimpleXML ex
|
10/30/2003 8:57:22 PM
|
0
|
a...@zend.com (Andi Gutmans)
|
PHP 4.3.3 released
=2D----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
After a lengthy QA process, PHP 4.3.3 is finally out! This maintenance
release solves a fair number of bugs found in prior PHP versions and
addresses several security issues. All users are *strongly* advised to
upgrade to 4.3.3 as soon as possible.
PHP 4.3.3 contains, among others, following important fixes, additions and
improvements:
* Improved the engine to use POSIX/socket IO where feasible.
* Fixed several potentially hazardous integer and buffer overflows.
* Fixed corruption of multibyte character including 0x5c as second by
|
8/25/2003 1:53:24 PM
|
0
|
i...@prohost.org (Ilia Alshanetsky)
|
PHP 5.0.0 Beta 1
The PHP development community is proud to announce the release of
PHP 5 Beta 1. Both source packages and a Win32 build are available, you
can find these packages at http://www.php.net/downloads.php. For a
complete list of changes, please refer to
http://www.php.net/ChangeLog-5.php.
Some of the more major changes include:
- PHP5 features the Zend Engine 2. For a list of Zend Engine 2
changes, please visit http://www.php.net/zend-engine-2.php.
- XML support has been completely redone in PHP5, all extensions
are now focused around the excellent libxml2 library
|
6/29/2003 6:19:28 PM
|
0
|
sterl...@bumblebury.com (Sterling Hughes)
|
PHP 4.3.2 released
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
After a lengthy QA process, PHP 4.3.2 is finally out! This maintenance
release solves a lot of bugs found in earlier PHP versions and is a
*strongly* recommended upgrade for all PHP users.
PHP 4.3.2 contains, among others, following important fixes, additions and
improvements:
* Fixes several potentially hazardous integer and buffer overflows.
* Fixes for several 64-bit problems.
* New Apache 2.0 SAPI module (sapi/apache2handler, enabled with --with-apxs2).
* New session_regenerate_id() function.
(Imp
|
5/29/2003 12:05:24 PM
|
0
|
sni...@php.net (Jani Taskinen)
|
PHP Security Advisory: CGI vulnerability in PHP version 4.3.0
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
PHP Security Advisory: CGI vulnerability in PHP version 4.3.0
Issued on: February 17, 2003
Software: PHP/CGI version 4.3.0
Platforms: All
The PHP Group has learned of a serious security vulnerability in
the CGI SAPI of PHP version 4.3.0.
Description
PHP contains code for preventing direct access to the CGI binary with
configure option "--enable-force-cgi-redirect" and php.ini option
"cgi.force_redirect". In PHP 4.3.0 there is a bug which renders these
options useless.
NOTE: This bug do
|
2/17/2003 6:01:14 PM
|
0
|
sni...@php.net (Jani Taskinen)
|
PHP 4.2.3 released
PHP 4.2.3 has been released. It is a maintenance release and includes a
large number of fixes for the previous 4.2.2 version. 4.2.3 is a
recommended upgrade for all users of PHP, and particularly Windows users.
Full list of changes:
- Enabled strcoll() on win32. (Markus)
- Fixed possible ASCII control char injection in mail(). (Stefan Esser)
- Fixed a potential crash bug in import_request_variables() (Zeev)
- Fixed several problems with directory functions on Windows. (Steph)
- Fixed xbithack bug in Apache module. (Rasmus)
- Fixed a bug that prevented touch() from working on var
|
9/6/2002 5:12:02 PM
|
0
|
z...@zend.com (Zeev Suraski)
|
PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1
PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1
Issued on: July 22, 2002
Software: PHP versions 4.2.0 and 4.2.1
Platforms: All
The PHP Group has learned of a serious security vulnerability in PHP
versions 4.2.0 and 4.2.1. An intruder may be able to execute arbitrary
code with the privileges of the web server. This vulnerability may be
exploited to compromise the web server and, under certain conditions,
to gain privileged access.
Description
PHP contains code for intelligently parsing the headers of HTTP POST
requests. Th
|
7/22/2002 1:49:01 PM
|
0
|
marko...@php.net (Marko Karppinen)
|
PHP 4.2.0 Release Announcement
The PHP Group is happy to announce the immediate
availability of PHP 4.2.0, the latest version of the widely-used,
general-purpose scripting language that is especially well-suited for Web
development.
This latest release contains over one hundred changes, bug fixes and
improvements over the previous release, PHP 4.1.2. Among the highlights
are experimental support for Apache 2, cleanups in variable handling and
overhauls of various PHP components, including the domxml, posix, sockets
and iconv extensions. For more information, see below:
-------------------------------
|
4/22/2002 8:55:14 PM
|
0
|
der...@php.net (Derick Rethans)
|
PHP-GTK version 0.5.0 released
Greetings!
I have released PHP-GTK version 0.5.0, also known as "monday starts on
saturday". The version number was bumped from 0.1.1 to this one to
indicate that PHP-GTK is now a fairly mature and stable extension and
can be used for a variety of applications (just look on Freshmeat).
I would also like to take this opportunity and ask if you some of you
would consider helping out with PHP-GTK documentation. It would be a
great way to learn this exciting extension and also contribute to the
project.
The list of the major changes follows:
Version 0.5.0 "monday starts on saturd
|
1/24/2002 3:53:22 AM
|
0
|
and...@ispi.net (Andrei Zmievski)
|
PHP 4.1.0 released
After a lengthy QA process, PHP 4.1.0 is finally out. Download at
http://www.php.net/downloads.php !
PHP 4.1.0 includes several other key improvements:
- A new input interface for improved security (read below)
- Highly improved performance in general
- Revolutionary performance and stability improvements under Windows. The
multithreaded server modules under Windows (ISAPI, Apache, etc.) perform as
much as 30 times faster under load! We want to thank Brett Brewer and his
team in Microsoft for working with us to improve PHP for Windows.
- Versioning support for extensions. Ri
|
12/10/2001 11:36:44 PM
|
0
|
z...@zend.com (Zeev Suraski)
|
PHP-GTK v0.1.1 released
Gentle people,
PHP-GTK version 0.1.1 "no-holds-barred memento" has been released. It
can be downloaded from http://gtk.php.net/. The changes in this version
include:
- added GtkCList::get_selection_info() method. (Andrei)
- made type checking of parameters passed to PHP-GTK functions more
forgiving. (Andrei)
- added GtkNotebook::query_tab_label_packing(),
GtkBox::query_child_packing(). (Markus)
- added event watcher, dialog, file selection, panes, and notebook
examples to gtk.php. (Markus)
- added Gtk::signal_(add|remove)_emission_hook(),
|
9/25/2001 2:52:47 AM
|
0
|
and...@ispi.net (Andrei Zmievski)
|
PHP-GTK v0.1 released
PHP-GTK version 0.1 "the void which binds" has been released. It can be
downloaded from http://gtk.php.net/. The changes in this version
include:
- added GDK keysyms constants.
- fixed bug with GtkStyle::copy() that was not returning the result
properly.
- implemented support for struct based classes (GdkRectangle,
GtkAllocation, GtkRequisition, etc).
- finished drag-n-drop support.
- ported Scribble example from C.
- modified GdkWindow::get_pointer() to be simpler, without XInput
support.
- changed 'area' event property to be a GdkRectangle.
|
8/2/2001 5:36:21 AM
|
0
|
and...@ispi.net (Andrei Zmievski)
|
Patch for PHP 4.0.6 memory limit problem posted
There is a bug in PHP 4.0.6 which affects PHP users who use the memory
limit option. (i.e. developers who include --enable-memory-limit in their
configure line).
The patch is posted at http://www.php.net/downloads.php. If you don't use
this option there is no need for you to download and apply the patch.
Andi
|
7/1/2001 4:00:54 PM
|
0
|
a...@zend.com (Andi Gutmans)
|
[ANNOUNCE] PHP 4.0.4 released
The PHP Group is pleased to announce the
release of the fourth maintenance release
of PHP 4.0.
The PHP Group has adopted extended
procedures to improve the overall quality
and reliability of the release process and
the resulting software.
This release has undergone strict testing
by our new QA team to ensure that this is
the most stable release ever on all
supported platforms. It includes
improvements for a large number of defects
and numerous enhancements in the PHP core,
the language implementation and
extensions.
The source distribution is immediately
availabl
|
12/20/2000 8:29:18 AM
|
0
|
sas...@schumann.cx (Sascha Schumann)
|
PHP 4.0.3pl1
PHP 4.0.3pl1 is now available. It addresses two issues that were
discovered in PHP 4.0.3:
- The Apache php_value mechanism didn't properly work with .conf files.
- There was a memory leak in the module versions of PHP.
The new source package is available at
http://www.php.net/do_download.php?download_file=php-4.0.3pl1.tar.gz
Windows binaries will be posted later (note that neither of these problems
affect the CGI version of PHP, so unless you're using a module version of
PHP under Windows, there'll be no need to upgrade).
Zeev
--
Zeev Suraski <zeev@zend.com>
http:/
|
10/15/2000 11:42:27 AM
|
0
|
z...@zend.com (Zeev Suraski)
|
PHP 4.0.3 released
PHP 4.0.3 has been released. 4.0.3 is mostly a security-oriented
maintenance release, therefore it's *strongly* recommended for all users of
PHP to upgrade to it.
Source:
http://www.php.net/do_download.php?download_file=php-4.0.3.tar.gz
Win32 binaries:
http://www.php.net/do_download.php?download_file=php-4.0.3-Win32.zip
You'd notice that the 4.0.3 Win32 distribution is beefed up with a lot of
loadable modules. The extensive build is courtesy of Daniel Beulshausen -
thanks!
The full list of changes is enclosed.
Zeev
11 Oct 2000, Version 4.0.3
- Fixed a possible cr
|
10/11/2000 10:42:33 PM
|
0
|
z...@zend.com (Zeev Suraski)
|
PHP Tutorials in San Francisco
I will be doing 2 3-hour PHP tutorials at the Linuxcare offices in San
Francisco next week. 6-9pm on Tuesday Oct.3 and 6-9pm on Thursday
Oct.5. The Linuxcare offices are at 650 Townsend Street (Townsend and
8th). It's the big red build with SEGA/Macromedia plastered all over it.
If you are interested in attending, please email universi@linuxcare.com.
This is actually internal Linuxcare training, but like all other Linuxcare
training it is open to the public if there is interest. Space is somewhat
limited so please email the above address and wait for confirmation.
We'll run a
|
9/29/2000 1:07:59 AM
|
0
|
ras...@linuxcare.com (Rasmus Lerdorf)
|
PHP 4.0.2 Released
PHP 4.0.2 has been released. This is a maintenance version, with no big=20
revolutions. It mostly features many bug fixes, some new functionality,=20
and increased performance under certain circumstances. Users that are=20
happy with PHP 4.0.1pl2 that aren't experiencing any of the problems that=20
were fixed, and don't need the new functionality, don't necessarily have to=
=20
upgrade - even though 4.0.2 is a recommended upgrade.
As for PHP 3.0 users, well, time to sync in :) I'd like to take this=20
opportunity to strongly urge people to upgrade to PHP 4.0. The number of=20
r
|
8/29/2000 7:40:46 PM
|
0
|
z...@zend.com (Zeev Suraski)
|
PHP 4.0.1 released
The PHP group is happy to announce the availability of PHP 4.0.1. PHP=20
4.0.1 is the first maintenance release for PHP 4.0 released last month, and=
=20
includes improved performance, new features and many bug fixes.
All users of previous versions of PHP (both 4.0 and 3.0), are encouraged to=
=20
upgrade to PHP 4.0.1.
Most notable in this maintenance release is the improved stability of the=20
Windows build, both due to an improved thread-safe version, and additional=
=20
non related fixes and improvements. Many fixes and enhancements were made=
=20
to non Windows-specific c
|
6/28/2000 10:24:01 PM
|
0
|
z...@zend.com (Zeev Suraski)
|
PHP 4.0.0 Released
After over one and a half years of development, PHP 4.0.0 has finally been
released. The amount of improvements is so huge that there's no chance
I'll even remember a fragment of them. Suffice to say that it's
definitely worth the upgrade!
http://www.php.net/
Enjoy!
Zeev
--
Zeev Suraski <zeev@zend.com>
http://www.zend.com/
|
5/22/2000 7:57:40 PM
|
0
|
z...@zend.com (Zeev Suraski)
|
[IMPORTANT] PHP Mailing Lists Changes
Hi,
In light of the upcoming release of PHP 4.0, and due to the considerable
mess the PHP mailing lists are in, we've decided to change the structure of
the PHP mailing lists.
- Both of the PHP 3 list (php3@lists.php.net) and the PHP 4 list
(php4beta@lists.php.net) will be discontinued within a two weeks. There'll
no longer be separate mailing lists for PHP 3 and 4.
- In their place, X new, topic-based mailing lists will be opened:
php-install
PHP installation and configuration issues including more general purpose
web server configuration issues such as Apache's httpd
|
5/17/2000 9:39:54 PM
|
0
|
z...@zend.com (Zeev Suraski)
|
PHP 4.0RC2 released
The PHP Group is proud to announce the release of the second
release candidate of the upcoming PHP 4.0. Highlights of this
release include support for new web servers (Zeus, Netscape
Enterprise Server, Apache Win32), improved portability of the
Unix build framework and tons of bug fixes.
We expect this to be the final release candidate before the
release of PHP 4.0.
The source tarball and a Win32 binary build are available
immediately from the PHP homepage.
http://www.php.net/version4/
The NEWS file contains all user-visible
|
5/10/2000 11:05:42 AM
|
0
|
sas...@schumann.cx (Sascha Schumann)
|
PHP 3.0.16 released
PHP 3.0.16 was released. This is mostly a bug fix release
which adds support for gd-1.8, ucd-snmp 4.1, and high-
resolution timers on OS/2. OpenBSD support has been improved
considerably. The source package and Win32 binaries are
available from the PHP homepage. The ChangeLog contains a
full list of changes.
Download
http://www.php.net/download-php.php3
Mirrors
http://www.php.net/mirrors.php3
ChangeLog
http://www.php.net/ChangeLog.php3
|
4/5/2000 12:17:00 AM
|
0
|
sas...@schumann.cx (Sascha Schumann)
|
PHP 3.0.15 released
February 25, 2000. PHP 3.0.15 fixes a couple of issues and addresses some
security concerns. If you are using PHP's safe mode feature, you are urged
to upgrade to the latest release. More information will be posted later.
PHP 3.0.15 is available in source form and binary form (for Win32).
Download URL:
<URL:http://www.php.net/download-php.php3>
Mirrors:
<URL:http://www.php.net/mirrors.php3>
Changes since 3.0.14:
- Fixed crash in preg_match_all(). (Andrei)
- Backported safe_mode_protected_env_vars and s
|
2/25/2000 9:51:11 PM
|
0
|
sas...@schumann.cx (Sascha Schumann)
|
PHP 4.0 Beta 4 released
The PHP Group is pleased to announce the availability of Beta 4 of PHP 4.0.
This development release is intended to be the final beta version; If=20
there are no significant show stoppers, PHP 4.0 will be wrapped up for=20
release in the near future.
PHP 4.0 features a lot of new features, bug fixes and performance=20
enhancements. Some of the highlights are:
* Built-in XML support. The expat library is now bundled with PHP. Thanks=
=20
goes to James Clark's for letting us bundle his package in the distribution!
* Better and more reliable support for Microsoft IIS and PWS, u
|
2/20/2000 11:08:30 PM
|
0
|
z...@zend.com (Zeev Suraski)
|
PHP Template Engine Request For Participation
Hello,
I have set up a mailing list to discuss the design for the built-in PHP
template engine. To read the introduction to the proposed design, point
your browsers to http://va.php.net/~andrei/tpl-engine.txt. If you would
like to participate, join the list by sending email to
php-template-subscribe@lists.php.net. See you there!
-Andrei
"C combines all the power of assembly language with
all the ease of use of assembly language" -- trad
|
2/15/2000 3:41:50 PM
|
0
|
and...@ispi.net (Andrei Zmievski)
|
PHP 3.0.14 released
A minor bugfix release to fix a bit of an obscure safe-mode bug reported
on bugtraq along with an annoying GD-related confiugre script problem. If
you are not using safe-mode and your GD is working fine, there is no need
to upgrade from 3.0.13.
As always, downloadable from: http://www.php.net/download-php.php3
Changes listed at: http://www.php.net/ChangeLog.php3
-Rasmus
|
1/11/2000 8:19:05 PM
|
0
|
ras...@raleigh.ibm.com (Rasmus Lerdorf)
|
MySQL module for the Win32 PHP 4 Beta 3 binaries posted!
Win32 users,
You can download the MySQL module for the Win32 Beta 3 from
http://www.php.net/version4/downloads.php
Andi
---
Andi Gutmans <andi@zend.com>
http://www.zend.com/
|
11/19/1999 6:37:51 PM
|
0
|
a...@zend.com (Andi Gutmans)
|
PHP 4.0b3 Win32 binaries released
By mistake the Beta 3 Win32 binaries were missing some array functions. I
posted updated binaries on the download page 5 minutes ago.
Andi
-----------------
I just posted Win32 CGI & ISAPI binaries for PHP 4 Beta 3.
A MySQL module will follow in the next couple of days.
Andi
At 02:11 PM 11/17/99 +0100, Stig Bakken wrote:
>After three more months of development, PHP 4.0b3 is released. The
>highlights are Java support, new build system (for UNIX), support for
>multi-dimensional get/post/cookie data, object (de)serialization,
>AOLserver support and a new and faster way of pas
|
11/19/1999 2:54:38 PM
|
0
|
a...@zend.com (Andi Gutmans)
|
PHP 4.0b3 released
After three more months of development, PHP 4.0b3 is released. The
highlights are Java support, new build system (for UNIX), support for
multi-dimensional get/post/cookie data, object (de)serialization,
AOLserver support and a new and faster way of passing function parameters
is now used by the bundled extensions. There is of course a ton of other
bux fixes and improvements too.
Get it from http://www.php.net/version4/downloads.php
From the NEWS (previously ChangeLog) file:
November 16 1999, Version 4.0 Beta 3
- ucfirst()/ucwords() no longer modify arg1. (Thies)
- Fixed strtr(
|
11/17/1999 1:11:09 PM
|
0
|
...@fast.no (Stig Bakken)
|
Mailing lists now available via news.
You can now read all of the PHP mailing lists hosted at lists.php.net
by pointing your favorite news reader at news://news.php.net/. The
lists are gatewayed bidirectionally, which means you can respond
to the newsgroup and it will be automatically forwarded to the
corresponding mailing list.
If you've been reading the lists via one of the web archives, or
just not reading them because of the amount of traffic, you might
find reading them as newsgroups more to your liking.
Enjoy!
Jim
|
8/29/1999 2:23:51 AM
|
0
|
j...@php.net (Jim Winstead)
|
PHP 4.0 Beta 2 binaries for Win32 released
A little later than announced, I finally took the time to work on the Win32
distribution of Beta 2. A couple of bugs that prevented Beta 1 from
successfully loading dynamic modules have been fixed, and one sample
dynamic module has been packaged (MySQL).
Another new feature is that the package now includes installation
instructions for IIS 4.0.
Get it while it's hot - http://www.php.net/version4/downloads.php
Zeev
P.S.: I did my best to include all the necessary files in the
distribution. However, since my box is a development box and has many
libraries and packages
|
8/13/1999 9:35:56 PM
|
0
|
z...@zend.com (Zeev Suraski)
|
PHP 4.0 Beta 2 released
The PHP development group is pleased to announce the second public Beta of
PHP 4.0. This release features a significant amount of bug fixes, and is a
big step towards making PHP 4.0 a stable development platform. In addition
to bug fixes in the language engine itself, many modules have been checked
and updated to be PHP 4.0 compatible, so the number of scripts that will
successfully execute is significantly larger than that of Beta 1. Finally,
the Apache .conf/.htaccess conversion scripts supplied with Beta 1 have
been fixed and improved, so the transition from PHP 3.x should
|
8/9/1999 8:29:17 PM
|
0
|
z...@zend.com (Zeev Suraski)
|
PHP 3.0.12 Released
Nothing major in this release. Mostly bug fixes. Support for the new
gd-1.6, Internet Time, FreeType2 support, Max OS X build fixes, LDAP error
functions, some new imap functions, socket io bug fixes, RH6 apxs build
fix and support for the upcoming Apache-1.3.7. See the ChangeLog for a
full list of the changes.
-Rasmus
|
7/28/1999 5:31:56 PM
|
0
|
ras...@raleigh.ibm.com (Rasmus Lerdorf)
|
PHP 4.0 Beta 1 Released!
The PHP group is pleased to announce the long awaited PHP 4.0 Beta 1.
For release information, details and downloads please refer to
http://www.php.net/version4/
We would like to remind everyone that this is the first beta version of a
nearly complete rewrite of the language and as such is likely to contain
bugs. Most notably, some of the function modules may have not been tested
under PHP 4.0.
Happy PHPing!
Andi
---
Andi Gutmans <andi@zend.com>
http://www.zend.com/
|
7/19/1999 9:46:22 PM
|
0
|
a...@zend.com (Andi Gutmans)
|
ANN: PHP Knowledge Base and Mailing List
The PHP Knowledge Base and it's associated mailing list are now
operational!
The knowledge base is a growing collection of PHP related information in
a searchable question and answer format. Anyone can contribute, and
everyone is encouraged to do so. Visit the knowledge base at:
http://e-gineer.com/phpkb/
This daily announce style mailing list is aimed at PHP developers who
want to stay in touch but do not like receiving 100+ emails each day.
Each message will consist of 4 parts:
- intro with a focus on interesting developments on the main list
- a summary of new kn
|
6/28/1999 12:02:12 PM
|
0
|
nat...@synop.com (Nathan Wallace)
|
PHP 3.0.11 Released June 27th
Hot on the heels of 3.0.10, along comes another release to fix a
few problems on Windows (older versions of Windows 95) and some
Unix platforms (FreeBSD and some APXS configurations). If 3.0.10
worked for you, there's probably no need to upgrade. The complete
ChangeLog from 3.0.10 is below.
This is probably a good time to remind people about the Beta
Testers list -- you can subscribe by sending a blank email to
php-beta-subscribe@lists.php.net. You'll get a chance to help
us prevent these sorts of minor but show-stopping bugs from
creeping up in future releases.
As always, you ca
|
6/28/1999 6:51:39 AM
|
0
|
j...@php.net (Jim Winstead)
|
PHP 3.0.10 Released June 25th
PHP Version 3.0.10 has been released (both as source and Windows
binaries). Many more bug fixes, including the last of the fsockopen()
and URL fopen() problems, we hope. The dbm database abstraction
layer had the mode flag for dba_open() brought into line with
dbm_open(), which means "w" will not create a non-existent database
(use "c" instead). The documentation has also been moved into its
own repository, and the generated HTML documentation is included
in the tar.gz instead of the SGML source. The complete ChangeLog
from 3.0.9 is below.
A reminder: We've created a new mailing li
|
6/26/1999 4:00:35 AM
|
0
|
j...@php.net (Jim Winstead)
|
Testing the announce list and moderation.
I'm just taking the new php-announce list for a spin. Right
now the only subscriber is core@php.net, and the moderator
is core@php.net. We'll see how that works....
Jim
|
5/31/1999 11:25:47 PM
|
0
|
j...@php.net (Jim Winstead)
|
testing.
Just testing.
Jim
|
5/31/1999 10:46:17 PM
|
0
|
j...@trainedmonkey.com (Jim Winstead)
|