derick Wed Apr 11 06:11:51 2007 UTC Modified files: (Branch: PHP_4_4) /php-src/main php_version.h /php-src configure.in NEWS Log: - 4.4.7RC1. http://cvs.php.net/viewvc.cgi/php-src/main/php_version.h?r1=1.66.2.81.2.38&r2=1.66.2.81.2.39&diff_format=u Index: php-src/main/php_version.h diff -u php-src/main/php_version.h:1.66.2.81.2.38 php-src/main/php_version.h:1.66.2.81.2.39 --- php-src/main/php_version.h:1.66.2.81.2.38 Wed Feb 28 18:26:31 2007 +++ php-src/main/php_version.h Wed Apr 11 06:11:50 2007 @@ -3,5 +3,5 @@ #define PHP_MAJOR_VERSION 4 #define PHP_MINOR_VERSION 4 #define PHP_RELEASE_VERSION 7 -#define PHP_EXTRA_VERSION "-dev" -#define PHP_VERSION "4.4.7-dev" +#define PHP_EXTRA_VERSION "RC1" +#define PHP_VERSION "4.4.7RC1" http://cvs.php.net/viewvc.cgi/php-src/configure.in?r1=1.396.2.164.2.42&r2=1.396.2.164.2.43&diff_format=u Index: php-src/configure.in diff -u php-src/configure.in:1.396.2.164.2.42 php-src/configure.in:1.396.2.164.2.43 --- php-src/configure.in:1.396.2.164.2.42 Wed Feb 28 18:26:31 2007 +++ php-src/configure.in Wed Apr 11 06:11:51 2007 @@ -1,4 +1,4 @@ -dnl ## $Id: configure.in,v 1.396.2.164.2.42 2007/02/28 18:26:31 derick Exp $ -*- sh -*- +dnl ## $Id: configure.in,v 1.396.2.164.2.43 2007/04/11 06:11:51 derick Exp $ -*- sh -*- dnl ## Process this file with autoconf to produce a configure script. divert(1) @@ -38,7 +38,7 @@ MAJOR_VERSION=4 MINOR_VERSION=4 RELEASE_VERSION=7 -EXTRA_VERSION="-dev" +EXTRA_VERSION="RC1" VERSION="$MAJOR_VERSION.$MINOR_VERSION.$RELEASE_VERSION$EXTRA_VERSION" dnl Define where extension directories are located in the configure context http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.1247.2.920.2.219&r2=1.1247.2.920.2.220&diff_format=u Index: php-src/NEWS diff -u php-src/NEWS:1.1247.2.920.2.219 php-src/NEWS:1.1247.2.920.2.220 --- php-src/NEWS:1.1247.2.920.2.219 Wed Apr 4 19:52:25 2007 +++ php-src/NEWS Wed Apr 11 06:11:51 2007 @@ -1,27 +1,27 @@ PHP 4 NEWS ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| -?? ??? 2007, Version 4.4.7 -- Fixed MOPB-33-2007 PHP mail() Message ASCIIZ Byte Truncation. (Ilia) -- Fixed CRLF injection inside ftp_putcmd(). (Ilia) +11 Apr 2007, Version 4.4.7RC1 +- Fixed MOPB-33-2007 (PHP mail() Message ASCIIZ Byte Truncation). (Ilia) - Fixed MOPB-32-2007 (Double free inside session_decode()). (Ilia) -- Fixed MOPB-21-2007 An open_basedir/safe_mode bypass inside the - compress.bzip2 wraper. (Ilia) -- Fixed MOPB-22-2007 PHP session_regenerate_id() Double Free Vulnerability. - (Ilia) -- Fixed MOPB-26-2007 mb_parse_str() can be used to activate - register_globals. (Ilia) -- Fixed CVE-2007-1001, GD wbmp used with invalid image size (Pierre) -- Fixed CVE-2007-0455, Buffer overflow in gdImageStringFTEx (used by imagettf - function) (Kees Cook, Pierre) +- Fixed MOPB-26-2007 (mb_parse_str() can be used to activate + register_globals). (Ilia) +- Fixed MOPB-24-2007 (Fixed unallocated memory access/double free in in + array_user_key_compare()). (Stas) +- Fixed MOPB-22-2007 (PHP session_regenerate_id() Double Free Vulnerability). + (Ilia) +- Fixed MOPB-21-2007 (An open_basedir/safe_mode bypass inside the + compress.bzip2 wraper). (Ilia) +- Fixed MOPB-8-2007 (XSS in phpinfo()). (Joe Orton, Stas) +- Fixed CVE-2007-1001 (GD wbmp used with invalid image size). (Pierre) +- Fixed CVE-2007-0455 (Buffer overflow in gdImageStringFTEx, used by imagettf + function). (Kees Cook, Pierre) - Fixed bug #40998 (long session array keys are truncated). (Tony) - Fixed bug #40915 (addcslashes unexpected behavior with binary input). (Tony) -- Fixed bug #40831 (cURL extension doesn't clean up the buffer of reused +- Fixed bug #40831 (cURL extension doesn't clean up the buffer of reused handle). (Tony) - Fixed bug #40747 (possible crash in session when save_path is out of open_basedir). (Tony) -- Fixed MOPB-8, XSS in phpinfo() (Joe Orton, Stas) -- Fixed unallocated memory access/double free in in array_user_key_compare() - (MOPB-24 by Stefan Esser) (Stas) +- Fixed CRLF injection inside ftp_putcmd(). (Ilia) 28 Feb 2007, Version 4.4.6
-- PHP CVS Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php