1<?php 2$_SERVER['BASE_PAGE'] = 'releases/5_2_3.php'; 3include_once __DIR__ . '/../include/prepend.inc'; 4site_header("PHP 5.2.3 Release Announcement"); 5?> 6 7<h1>PHP 5.2.3 Release Announcement</h1> 8<p> 9The PHP development team would like to announce the immediate availability 10of PHP 5.2.3. This release continues to improve the security and the 11stability of the 5.X branch as well as addressing two regressions introduced 12by the previous 5.2 releases. These regressions relate to the timeout 13handling over non-blocking SSL connections and the lack of 14HTTP_RAW_POST_DATA in certain conditions. All users are encouraged to 15upgrade to this release. 16</p> 17 18<p> 19<b>Security Enhancements and Fixes in PHP 5.2.3:</b> 20</p> 21<ul> 22 <li>Fixed an integer overflow inside chunk_split() (by Gerhard Wagner, CVE-2007-2872)</li> 23 <li>Fixed possible infinite loop in imagecreatefrompng. (by Xavier Roche, CVE-2007-2756)</li> 24 <li>Fixed ext/filter Email Validation Vulnerability (MOPB-45 by Stefan Esser, CVE-2007-1900)</li> 25 <li>Fixed bug #41492 (open_basedir/safe_mode bypass inside realpath()) (by bugs dot php dot net at chsc dot dk)</li> 26 <li>Improved fix for CVE-2007-1887 to work with non-bundled sqlite2 lib.</li> 27 <li>Added mysql_set_charset() to allow runtime altering of connection encoding.</li> 28</ul> 29 30<p> 31<b>The key improvements of PHP 5.2.3 include:</b> 32</p> 33<ul> 34 <li>Improved compilation of heredocs and interpolated strings.</li> 35 <li>Optimized out a couple of per-request syscalls.</li> 36 <li>Optimized digest generation in md5() and sha1() functions.</li> 37 38 <li>Fixed bug #41236 (Regression in timeout handling of non-blocking SSL connections during reads and writes)</li> 39 <li>Fixed bug #39542 (Behavior of require/include different to < 5.2.0)</li> 40 <li>Fixed bug #41293 (Fixed creation of HTTP_RAW_POST_DATA when there is no default post handler)</li> 41 <li>Fixed bug #41347 (checkdnsrr() segfaults on empty hostname)</li> 42 <li>Fixed bug #41353 (crash in openssl_pkcs12_read() on invalid input)</li> 43 <li>Fixed bug #41403 (json_decode cannot decode floats if localeconv decimal_point is not '.')</li> 44 <li>Fixed bug #41421 (Uncaught exception from a stream wrapper segfaults)</li> 45 <li>Fixed bug #41504 (json_decode() incorrectly decodes JSON arrays with empty string keys).</li> 46 47 <li>Over 40 bug fixes.</li> 48</ul> 49 50<p> 51For users upgrading from PHP 5.0 and PHP 5.1, an upgrade guide is available 52<a href="/UPDATE_5_2.txt">here</a>, detailing the changes between those releases 53and PHP 5.2.3. 54</p> 55 56<p> 57 For a full list of changes in PHP 5.2.3, see the <a href="/ChangeLog-5.php#5.2.3">ChangeLog</a>. 58</p> 59 60 61<?php site_footer(); ?> 62
