xref: /web-php/releases/5_2_6.php (revision f1cb7e74) 
1<?php
2$_SERVER['BASE_PAGE'] = 'releases/5_2_6.php';
3include_once __DIR__ . '/../include/prepend.inc';
4site_header("PHP 5.2.6 Release Announcement");
5?>
6
7<h1>PHP 5.2.6 Release Announcement</h1>
8<p>
9The PHP development team would like to announce the immediate
10availability of PHP 5.2.6. This release focuses on improving the stability of
11the PHP 5.2.x branch with over 120 bug fixes, several of which are security related.
12All users of PHP are encouraged to upgrade to this release.
13</p>
14
15<p>
16<b>Security Enhancements and Fixes in PHP 5.2.6:</b>
17</p>
18<ul>
19	<li>Fixed possible stack buffer overflow in the FastCGI SAPI identified by Andrei Nigmatulin.</li>
20	<li>Fixed integer overflow in printf() identified by Maksymilian Aciemowicz.</li>
21	<li>Fixed security issue detailed in CVE-2008-0599 identified by Ryan Permeh.</li>
22	<li>Fixed a safe_mode bypass in cURL identified by Maksymilian Arciemowicz.</li>
23	<li>Properly address incomplete multibyte chars inside escapeshellcmd() identified by Stefan Esser.</li>
24	<li>Upgraded bundled PCRE to version 7.6</li>
25</ul>
26
27<p>
28<b>Key enhancements in PHP 5.2.6 include:</b>
29</p>
30<ul>
31	<li>Fixed two possible crashes inside the posix extension.</li>
32	<li>Fixed bug #44069 (Huge memory usage with concatenation using . instead of .=)</li>
33	<li>Fixed bug #44141 (private parent constructor callable through static function).</li>
34	<li>Fixed bug #43589 (a possible infinite loop in bz2_filter.c).</li>
35	<li>Fixed bug #43450 (Memory leak on some functions with implicit object __toString() call).</li>
36	<li>Fixed bug #43201 (Crash on using uninitialized vals and __get/__set).</li>
37	<li>Fixed bug #42978 (mismatch between number of bound params and values causes a crash in pdo_pgsql).</li>
38	<li>Fixed bug #42937 (__call() method not invoked when methods are called on parent from child class).</li>
39	<li>Fixed bug #42736 (xmlrpc_server_call_method() crashes).</li>
40	<li>Fixed bug #42369 (Implicit conversion to string leaks memory).</li>
41	<li>Fixed bug #41562 (SimpleXML memory issue).</li>
42	<li>Over 120 bug fixes.</li>
43</ul>
44
45<p>
46For users upgrading from PHP 5.0 and PHP 5.1, an upgrade guide is available
47<a href="/UPDATE_5_2.txt">here</a>, detailing the changes between those releases
48and PHP 5.2.6.
49</p>
50
51<p>
52 For a full list of changes in PHP 5.2.6, see the <a href="/ChangeLog-5.php#5.2.6">ChangeLog</a>.
53</p>
54
55
56<?php site_footer(); ?>
57