4.4.3RC1 out!
この変更で気がついたのですがRC1がリリースされているようです。MLでの告知は無かったように見えますが。。。
4.4.2から4.4.3RC1までの修正状況は以下の通り。今度はリリースされてからのドタバタは無いようにして欲しいですね。
セキュリティ的な問題(後、メモリ・リーク)もいくつか修正されていますね。
--- NEWS 2006/01/12 17:54:19 1.1247.2.920.2.109 +++ NEWS 2006/05/21 17:24:52 1.1247.2.920.2.132 @@ -1,5 +1,35 @@ PHP 4 NEWS ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| +21 May 2006, Version 4.4.3RC1 +- Added control character checks for cURL extension's open_basedir/safe_mode + checks. (Ilia) +- Fixed a possible buffer overflow inside create_named_pipe() for Win32 systems + in libmysql.c. (Ilia) +- Updated PCRE to version 6.6. (Andrei) +- Added overflow checks to wordwrap() function. (Ilia) +- Added a check for special characters in the session name. (Ilia) +- Fixed bug #37510 session_regenerate_id changes session_id() even on failure). + (Hannes) +- Fixed bug #34360 (bad gif size) (Pierre) +- Fixed bug #37348 (make PEAR install ignore open_basedir). (Ilia) +- Fixed bug #37346 (invalid colormap format) (Pierre) +- Fixed bug #37162 (wddx does not build as a shared extension). + (jdolecek at NetBSD dot org, Ilia) +- Fixed bug #37046 (foreach breaks static scope). (Dmitry) +- Fixed bug #37045 (Fixed check for special chars for http redirects). (Ilia) +- Fixed bug #36857 (Added support for partial content fetching to the HTTP + streams wrapper). (Ilia) +- Fixed bug #36776 (node_list_wrapper_dtor segfault). (Rob) +- Fixed bug #36459 (Incorrect adding PHPSESSID to links, which contains \r\n). + (Ilia) +- Fixed bug #36458 (sleep() accepts negative values). (Ilia) +- Fixed bug #36242 (Possible memory corruption in stream_select()). (Tony) +- Fixed bug #36223 (curl bypasses open_basedir restrictions). (Tony) +- Fixed bug #36205 (Memory leaks on duplicate cookies). (Dmitry) +- Fixed bug #36148 (unpack("H*hex", $data) is adding an extra character to the + end of the string). (Ilia) +- Fixed bug #36017 (fopen() crashes PHP when opening a URL). (Tony) + 13 Jan 2006, Version 4.4.2 - Added missing safe_mode/open_basedir checks into cURL extension. (Ilia) - Backported missing imap_mailcompose() fixes from PHP 5.x. (Ilia)