PHP 5.2.12 Released! - 2009-12-17
The PHP development team would like to announce the immediate availability of PHP 5.2.12. This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to upgrade to this release. Security Enhancements and Fixes in PHP 5.2.12:Fixed a safe_mode bypass in tempnam() identified by Grzegorz Stachowiak. (CVE-2009-3557, Rasmus)Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz Stachowiak. (CVE-2009-3558, Rasmus)Added "max_file_uploads" INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion, identified by Bogdan Calin. (CVE-2009-4017, Ilia)Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check, identified by Stefan Esser. (CVE-2009-4143, Stas)Fixed bug #49785 (insufficient input string validation of htmlspecialchars()). (CVE-2009-4142, Moriyoshi, hello at iwamot dot com) Further details about the PHP 5.2.12 release can be found in the release announcement, and the full list of changes are available in the ChangeLog. |
 | PHP 4.3.6 released!
The PHP Development Team proudly announced the
release of PHP 4.3.6. This is is a bug fix
release whose primary goal is to address
two bugs which may result in crashes in PHP
builds with thread-safety enabled. All users
of PHP in a threaded environment (Windows) are
strongly encouraged to upgrade to this release.
(Submited by: Paul on 15-4-2004) |
| | PHP 4.3.5 released!
The PHP Development Team proudly announced the
release of PHP 4.3.5. This is a bug fix release,
without any new features or additions. It is
by far the most stable release of PHP to date
and it is recommended that all users upgrade
to this release where possible.
(Submited by: Paul on 26-3-2004) |
| | PHP 5 RC1 Released!
The first Release Candidate of PHP 5 is finally
out! The move from Beta stage to RC stage
means that PHP 5 is now feature complete,
and is quite stable - stable enough for
everyone to start playing with. Note that
it is still not recommended for mission-critical
use.
(Submited by: Paul on 18-3-2004) |
| | phpMyAdmin 2.5.6 is released
phpMyAdmin is a tool written in PHP intended
to handle the administration of MySQL over
the Web. Currently it can create and drop
databases, create/drop/alter tables,
delete/edit/add fields, execute any SQL
statement, manage keys on fields.
(Submited by: Paul on 2-3-2004) |
| | Netcraft says PHP is found on 52% of the 14.5
million Apache-based Web sites that it inspected,
compared with 19.4% using Perl, another
open-source language.
PHP is becoming dominant on Web sites,
according to Netcraft.com, the U.K. surveyor
of the Web. And now Sun Microsystems has teamed
up with a PHP toolmaker, Zend Technologies Ltd.
PHP and Perl are used to get disparate parts
of a site to work together. PHP is used
particularly in building dynamic pages that are
produced in response to specific requests from
a visitor, says Shane Caraveo, senior developer
with ActiveState, a maker of tools for
open-source and Microsoft scripts and a
division of anti-spam software firm Sophos plc.
http://www.informationweek.com/story/showArticle.jhtml?articleID=16000533
(Submited by: Paul on 8-11-2003) |
| |
|
