diff options
| author | Julien Pauli <jpauli@php.net> | 2015-04-15 10:50:17 +0200 |
|---|---|---|
| committer | Julien Pauli <jpauli@php.net> | 2015-04-15 10:50:17 +0200 |
| commit | 39a8cc5d2c38e98c9db550029f97e8dfca0d529c (patch) | |
| tree | f7c68e1e1e28b605257af9b23c7e16b56d03c584 | |
| parent | fc7e056a0b9cb7f4a46abe1affa5a1cf7f9ed0c4 (diff) | |
| download | php-git-39a8cc5d2c38e98c9db550029f97e8dfca0d529c.tar.gz | |
5.5.24
| -rw-r--r-- | NEWS | 25 | ||||
| -rw-r--r-- | configure.in | 2 | ||||
| -rw-r--r-- | main/php_version.h | 4 |
3 files changed, 27 insertions, 4 deletions
@@ -1,6 +1,10 @@ PHP NEWS ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| -02 Apr 2015, PHP 5.5.24RC1 +16 Apr 2015, PHP 5.5.24 + +- Apache2handler: + . Fixed bug #69218 (potential remote code execution with apache 2.4 + apache2handler). (Gerrit Venema) - Core: . Fixed bug #66609 (php crashes with __get() and ++ operator in some cases). @@ -12,13 +16,21 @@ PHP NEWS . Fixed bug #68917 (parse_url fails on some partial urls). (Wei Dai) . Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration options). (Anatol Belski) + . Additional fix for bug #69152 (Type confusion vulnerability in + exception::getTraceAsString). (Stas) . Fixed bug #69212 (Leaking VIA_HANDLER func when exception thrown in __call/... arg passing). (Nikita) . Fixed bug #69221 (Segmentation fault when using a generator in combination with an Iterator). (Nikita) + . Fixed bug #69337 (php_stream_url_wrap_http_ex() type-confusion + vulnerability). (Stas) + . Fixed bug #69353 (Missing null byte checks for paths in various PHP + extensions). (Stas) - Curl: . Implemented FR#69278 (HTTP2 support). (Masaki Kagaya) + . Fixed bug #69316 (Use-after-free in php_curl related to + CURLOPT_FILE/_INFILE/_WRITEHEADER). (Laruence) - Date: . Export date_get_immutable_ce so that it can be used by extensions. (Derick @@ -29,6 +41,10 @@ PHP NEWS . Fixed bug #65406 (Enchant broker plugins are in the wrong place in windows builds). (Anatol) +- Fileinfo: + . Fixed bug #68819 (Fileinfo on specific file causes spurious OOM and/or + segfault). (Anatol Belski) + - Filter: . Fixed bug #69202 (FILTER_FLAG_STRIP_BACKTICK ignored unless other flags are used). (Jeff Welch) @@ -39,6 +55,10 @@ PHP NEWS . Fixed bug #68846 (False detection of CJK Unified Ideographs Extension E). (Masaki Kagaya) +- OPCache + . Fixed bug #68677 (Use After Free). (CVE-2015-1351) (Laruence) + . Fixed bug #69281 (opcache_is_script_cached no longer works). (danack) + - OpenSSL: . Fixed bug #67403 (Add signatureType to openssl_x509_parse). . Add a check for RAND_egd to allow compiling against LibreSSL (Leigh) @@ -50,6 +70,9 @@ PHP NEWS . Fixed bug #65467 (Call to undefined method cli_arg_typ_string). (Mike) . Fixed bug #67761 (Phar::mapPhar fails for Phars inside a path containing ".tar"). (Mike) + . Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar). (Stas) + . Fixed bug #69441 (Buffer Overflow when parsing tar/zip/phar in + phar_set_inode). (Stas) - Postgres: . Fixed bug #68741 (Null pointer dereference). (CVE-2015-1352) (Laruence) diff --git a/configure.in b/configure.in index 3d58d4ccb4..4490774097 100644 --- a/configure.in +++ b/configure.in @@ -120,7 +120,7 @@ int zend_sprintf(char *buffer, const char *format, ...); PHP_MAJOR_VERSION=5 PHP_MINOR_VERSION=5 PHP_RELEASE_VERSION=24 -PHP_EXTRA_VERSION="RC1" +PHP_EXTRA_VERSION="" PHP_VERSION="$PHP_MAJOR_VERSION.$PHP_MINOR_VERSION.$PHP_RELEASE_VERSION$PHP_EXTRA_VERSION" PHP_VERSION_ID=`expr [$]PHP_MAJOR_VERSION \* 10000 + [$]PHP_MINOR_VERSION \* 100 + [$]PHP_RELEASE_VERSION` diff --git a/main/php_version.h b/main/php_version.h index 6a8e89e681..c95189d098 100644 --- a/main/php_version.h +++ b/main/php_version.h @@ -3,6 +3,6 @@ #define PHP_MAJOR_VERSION 5 #define PHP_MINOR_VERSION 5 #define PHP_RELEASE_VERSION 24 -#define PHP_EXTRA_VERSION "RC1" -#define PHP_VERSION "5.5.24RC1" +#define PHP_EXTRA_VERSION "" +#define PHP_VERSION "5.5.24" #define PHP_VERSION_ID 50524 |