PHP NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
-8 Jan 2014, PHP 5.5.21RC1
+22 Jan 2014, PHP 5.5.21
- Core:
. Upgraded crypt_blowfish to version 1.3. (Leigh)
. Fixed bug #68594 (Use after free vulnerability in unserialize()).
(CVE-2014-8142) (Stefan Esser)
. Fixed bug #68676 (Explicit Double Free). (Kalle)
+ . Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()).
+ (CVE-2015-0231) (Stefan Esser)
- CGI:
- . Fix bug #68618 (out of bounds read crashes php-cgi). (Stas)
+ . Fixed bug #68618 (out of bounds read crashes php-cgi).(CVE-2014-9427)
+ (Stas)
- CLI server:
- . Fix bug #68745 (Invalid HTTP requests make web server segfault). (Adam)
+ . Fixed bug #68745 (Invalid HTTP requests make web server segfault). (Adam)
- cURL:
. Fixed bug #67643 (curl_multi_getcontent returns '' when
CURLOPT_RETURNTRANSFER isn't set). (Jille Timmermans)
+- EXIF:
+ . Fixed bug #68799: Free called on unitialized pointer. (CVE-2015-0232)
+ (Stas)
+
- Fileinfo:
. Fixed bug #68671 (incorrect expression in libmagic).
(Joshua Rogers, Anatol Belski)
PHP_MAJOR_VERSION=5
PHP_MINOR_VERSION=5
PHP_RELEASE_VERSION=21
-PHP_EXTRA_VERSION="RC1"
+PHP_EXTRA_VERSION=""
PHP_VERSION="$PHP_MAJOR_VERSION.$PHP_MINOR_VERSION.$PHP_RELEASE_VERSION$PHP_EXTRA_VERSION"
PHP_VERSION_ID=`expr [$]PHP_MAJOR_VERSION \* 10000 + [$]PHP_MINOR_VERSION \* 100 + [$]PHP_RELEASE_VERSION`
#define PHP_MAJOR_VERSION 5
#define PHP_MINOR_VERSION 5
#define PHP_RELEASE_VERSION 21
-#define PHP_EXTRA_VERSION "RC1"
-#define PHP_VERSION "5.5.21RC1"
+#define PHP_EXTRA_VERSION ""
+#define PHP_VERSION "5.5.21"
#define PHP_VERSION_ID 50521