com web/php: 5.5.23 release: ChangeLog-5.php archive/archive.xml archive/entries/2015-03-20-1.xml include/releases.inc include/version.inc releases/5_5_23.php

[email protected] (JulienPauli)
Newsgroups php.webmaster
Message-ID <[email protected]>
Commit:    b3aa2149904a117fb32ff56f70a8fef6bcdb0a33
Author:    Julien Pauli <[email protected]>         Fri, 20 Mar 2015 10:35:51 +0100
Parents:   f7ab4ea95f2656a4e445b29562cfd28f93863e9b
Branches:  master

Link:       http://git.php.net/?p=web/php.git;a=commitdiff;h=b3aa2149904a117fb32ff56f70a8fef6bcdb0a33

Log:
5.5.23 release

Changed paths:
  M  ChangeLog-5.php
  M  archive/archive.xml
  A  archive/entries/2015-03-20-1.xml
  M  include/releases.inc
  M  include/version.inc
  A  releases/5_5_23.php
diff_b3aa2149904a117fb32ff56f70a8fef6bcdb0a33.txt (text/plain, 8.6 KB)
diff --git a/ChangeLog-5.php b/ChangeLog-5.php
index 7206cba..ea7745e 100644
--- a/ChangeLog-5.php
+++ b/ChangeLog-5.php
@@ -8,6 +8,82 @@ site_header("PHP 5 ChangeLog", array("current" => "docs", "css" => array("change
 
 <h1>PHP 5 ChangeLog</h1>
 
+<section class="version" id="5.5.23"><!-- {{{ 5.5.23 -->
+<h3>Version 5.5.23</h3>
+<b>19-Mar-2015</b>
+<ul><li>Core:
+<ul>
+  <li><?php bugfix(69174); ?> (leaks when unused inner class use traits precedence).</li>
+  <li><?php bugfix(69139); ?> (Crash in gc_zval_possible_root on unserialize).</li>
+  <li><?php bugfix(69121); ?> (Segfault in get_current_user when script owner is not in passwd with ZTS build).</li>
+  <li><?php bugfix(65593); ?> (Segfault when calling ob_start from output buffering callback).</li>
+  <li><?php bugfix(69017); ?> (Fail to push to the empty array with the constant value defined in class scope).</li>
+  <li><?php bugfix(68986); ?> (pointer returned by php_stream_fopen_temporary_file not validated in memory.c).</li>
+  <li><?php bugfix(68166); ?> (Exception with invalid character causes segv).</li>
+  <li><?php bugfix(69141); ?> (Missing arguments in reflection info for some builtin functions).</li>
+  <li><?php bugfix(68976); ?> (Use After Free Vulnerability in unserialize()). (CVE-2015-0231)</li>
+  <li><?php bugfix(69134); ?> (Per Directory Values overrides PHP_INI_SYSTEM configuration options).</li>
+  <li><?php bugfix(69207); ?> (move_uploaded_file allows nulls in path).</li>
+</ul></li>
+<li>CGI:
+<ul>
+  <li><?php bugfix(69015); ?> (php-cgi's getopt does not see $argv).</li>
+</ul></li>
+<li>CLI:
+<ul>
+  <li><?php bugfix(67741); ?> (auto_prepend_file messes up __LINE__).</li>
+</ul></li>
+<li>cURL:
+<ul>
+  <li><?php bugfix(69088); ?> (PHP_MINIT_FUNCTION does not fully initialize cURL on Win32).</li>
+  <li>Add CURLPROXY_SOCKS4A and CURLPROXY_SOCKS5_HOSTNAME constants if supported by libcurl.</li>
+</ul></li>
+<li>Ereg:
+<ul>
+  <li><?php bugfix(69248); ?> (heap overflow vulnerability in regcomp.c). (CVE-2015-2305).</li>
+</ul></li>
+<li>FPM:
+<ul>
+  <li><?php bugfix(68822); ?> (request time is reset too early).</li>
+</ul></li>
+<li>ODBC:
+<ul>
+  <li><?php bugfix(68964); ?> (Allowed memory size exhausted with odbc_exec).</li>
+</ul></li>
+<li>Opcache:
+<ul>
+  <li><?php bugfix(69125); ?> (Array numeric string as key).</li>
+  <li><?php bugfix(69038); ?> (switch(SOMECONSTANT) misbehaves).</li>
+</ul></li>
+<li>OpenSSL:
+<ul>
+  <li>Fixed bugs #61285, #68329, #68046, #41631 (encrypted streams don't observe socket timeouts).</li>
+</ul></li>
+<li>pgsql:
+<ul>
+  <li><?php bugfix(68638); ?> (pg_update() fails to store infinite values).</li>
+</ul></li>
+<li>Readline:
+<ul>
+  <li><?php bugfix(69054); ?> (Null dereference in readline_(read|write)_history() without parameters).</li>
+</ul></li>
+<li>SOAP:
+<ul>
+  <li><?php bugfix(69085); ?> (SoapClient's __call() type confusion through unserialize()).</li>
+</ul></li>
+<li>SPL:
+<ul>
+  <li><?php bugfix(69108); ?> ("Segmentation fault" when (de)serializing SplObjectStorage).</li>
+  <li><?php bugfix(68557); ?> (RecursiveDirectoryIterator::seek(0) broken after calling getChildren()).</li>
+</ul></li>
+<li>ZIP:
+<ul>
+  <li><?php bugfix(69253); ?> (ZIP Integer Overflow leads to writing past heap boundary). (CVE-2015-2331).</li>
+</ul></li>
+</ul>
+<!-- }}} --></section>
+
+
 <section class="version" id="5.4.39"><!-- {{{ 5.4.39 -->
 <h3>Version 5.4.39</h3>
 <b>19-Mar-2015</b>
diff --git a/archive/archive.xml b/archive/archive.xml
index 7360b6b..f1d0450 100644
--- a/archive/archive.xml
+++ b/archive/archive.xml
@@ -9,6 +9,7 @@
     <uri>http://php.net/contact</uri>
     <email>[email protected]</email>
   </author>
+  <xi:include href="entries/2015-03-20-1.xml"/>
   <xi:include href="entries/2015-03-19-2.xml"/>
   <xi:include href="entries/2015-03-19-1.xml"/>
   <xi:include href="entries/2015-03-18-1.xml"/>
diff --git a/archive/entries/2015-03-20-1.xml b/archive/entries/2015-03-20-1.xml
new file mode 100644
index 0000000..1afb275
--- /dev/null
+++ b/archive/entries/2015-03-20-1.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="utf-8"?>
+<entry xmlns="http://www.w3.org/2005/Atom">
+  <title>PHP 5.5.23 is available</title>
+  <id>http://php.net/archive/2015.php#id2015-03-20-1</id>
+  <published>2015-03-20T09:11:37+00:00</published>
+  <updated>2015-03-20T09:11:37+00:00</updated>
+  <category term="frontpage" label="PHP.net frontpage news"/>
+  <category term="releases" label="New PHP release"/>
+  <link href="http://php.net/index.php#id2015-03-20-1" rel="alternate" type="text/html"/>
+  <link href="http://php.net/archive/2015.php#id2015-03-20-1" rel="via" type="text/html"/>
+  <content type="xhtml">
+    <div xmlns="http://www.w3.org/1999/xhtml">
+     <p>The PHP development team announces the immediate availability of PHP
+     5.5.23. Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331.
+     
+     All PHP 5.5 users are encouraged to upgrade to this version.
+     </p>
+     
+     <p>For source downloads of PHP 5.5.23 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>,
+     Windows binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>.
+     The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-5.php#5.5.23">ChangeLog</a>.
+     </p>
+    </div>
+  </content>
+</entry>
diff --git a/include/releases.inc b/include/releases.inc
index d8bd639..dad0925 100644
--- a/include/releases.inc
+++ b/include/releases.inc
@@ -2,6 +2,39 @@
 $OLDRELEASES = array (
   5 => 
   array (
+  '5.5.22' => 
+    array (
+      'announcement' => 
+      array (
+        'English' => '/releases/5_5_22.php',
+      ),
+      'source' => 
+      array (
+        0 => 
+        array (
+          'filename' => 'php-5.5.22.tar.bz2',
+          'name' => 'PHP 5.5.22 (tar.bz2)',
+          'md5' => 'cd5a6321d71897dec26e29e795926669',
+          'date' => '20 Feb 2015',
+        ),
+        1 => 
+        array (
+          'filename' => 'php-5.5.22.tar.gz',
+          'name' => 'PHP 5.5.22 (tar.gz)',
+          'md5' => '89caa2614a7e0e7a41796d61869037ca',
+          'date' => '20 Feb 2015',
+        ),
+        2 => 
+        array (
+          'filename' => 'php-5.5.22.tar.xz',
+          'name' => 'PHP 5.5.22 (tar.xz)',
+          'md5' => 'fb1704131d495f5b3e6ab3b087a8dbe6',
+          'date' => '20 Feb 2015',
+        ),
+      ),
+      'date' => '20 Feb 2015',
+      'museum' => false,
+    ),
     '5.6.5' => 
     array (
       'announcement' => 
diff --git a/include/version.inc b/include/version.inc
index 93eafd3..9eadb8a 100644
--- a/include/version.inc
+++ b/include/version.inc
@@ -27,15 +27,15 @@ $PHP_5_6_MD5     = array(
                        "tar.xz"        => "ed0c9ad2419fffde1d8c03a2d8164179",
 );
 /* PHP 5.5 Release */
-$PHP_5_5_RC = '5.5.23RC1'; // Current RC version (e.g., '5.6.7RC1') or false
+$PHP_5_5_RC =  false; // Current RC version (e.g., '5.6.7RC1') or false
 $PHP_5_5_RC_DATE = '5 Mar 2015';
 
-$PHP_5_5_VERSION         = "5.5.22";
-$PHP_5_5_DATE            = "19 Feb 2015";
+$PHP_5_5_VERSION         = "5.5.23";
+$PHP_5_5_DATE            = "19 Mar 2015";
 $PHP_5_5_MD5     = array(
-                       "tar.bz2"       => "cd5a6321d71897dec26e29e795926669",
-                       "tar.gz"        => "89caa2614a7e0e7a41796d61869037ca",
-                       "tar.xz"        => "fb1704131d495f5b3e6ab3b087a8dbe6",
+                       "tar.bz2"       => "9a8fa2ac24ba40f6a837a7e1b436ce60",
+                       "tar.gz"        => "756ae8355c0b3085d12498fb0412cae5",
+                       "tar.xz"        => "692f9bc5649806f2053eee1e7323b7ea",
 );
 /* PHP 5.4 Release */
 $PHP_5_4_RC = false; // Current RC version (e.g., '5.6.7RC1') or false
diff --git a/releases/5_5_23.php b/releases/5_5_23.php
new file mode 100644
index 0000000..4b0cc74
--- /dev/null
+++ b/releases/5_5_23.php
@@ -0,0 +1,19 @@
+<?php
+// $Id$
+$_SERVER['BASE_PAGE'] = 'releases/5_5_23.php';
+include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc';
+site_header("PHP 5.5.23 Release Announcement");
+?>
+
+ <p>The PHP development team announces the immediate availability of PHP
+     5.5.23. Several bugs have been fixed as well as CVE-2015-0231, CVE-2015-2305 and CVE-2015-2331.
+     
+     All PHP 5.5 users are encouraged to upgrade to this version.
+     </p>
+     
+     <p>For source downloads of PHP 5.5.23 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>,
+     Windows binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>.
+     The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-5.php#5.5.23">ChangeLog</a>.
+     </p>
+
+<?php site_footer(); ?>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.