BFN

diff --git a/NEWS b/NEWS
index c6a83b7c208d3449bdfc0ed150fde0739ad9a031..1357fc63df683510e501e0507ea8b8c6ee83c46f 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,10 +1,10 @@
 PHP 4                                                                      NEWS
 |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
-?? ??? 2004, Version 4.3.8
+?? ??? 2004, Version 4.3.9
 - Updated PCRE to provide better error handling in certain cases. (Andrei)
 - NSAPI: added "bucket" parameter to list of non-php.ini-keys of php4_execute
   for doing performance stats without warnings in server-log. (Uwe Schindler)
-- Fixed bub #29116 (Zend constant warning uses memory after free). (Marcus,
+- Fixed bug #29116 (Zend constant warning uses memory after free). (Marcus,
   jdolecek at NetBSD dot org)
 - Fixed bug #29049 (array sorting via user function/method does not validate 
   it). (Ilia)
@@ -31,8 +31,6 @@ PHP 4                                                                      NEWS
   (Ilia)
 - Fixed bug #28649 (Proper glob() return value on Linux when there are no
   matches). (Ilia)
-- Fixed bug #28632 (Prevent open_basedir bypass via MySQL's LOAD DATA LOCAL).
-  (Ilia)
 - Fixed bug #28627 (When multiple MySQL links are used default link is leaked).
   (gavin at ipalsoftware dot com, Ilia)
 - Fixed bug #28525 (gmp_powm() does not work with hexadecimal string modulo
@@ -46,6 +44,15 @@ PHP 4                                                                      NEWS
 - Fixed strip_tags() to correctly handle '\0' characters. (Stefan)
 - Fixed funny forking effect in FastCGI when PHP_FCGI_CHILDREN was not set.
 
+14 Jul 2004, Version 4.3.8
+- Fixed strip_tags() to correctly handle '\0' characters. (Stefan)
+- Fixed memory_limit during request startup. (Stefan)
+- Replace alloca() with emalloc() for better stack protection. (Ilia)
+- Added missing safe_mode checks inside ftok and itpc. (Ilia)
+- Fixed bug #28963 (Missing space for \0 in address allocation in IMAP). (Ilia)
+- Fixed bug #28632 (Prevent open_basedir bypass via MySQL's LOAD DATA LOCAL).
+  (Ilia)
+
 03 Jun 2004, Version 4.3.7
 - Upgraded bundled GD library to 2.0.23. (Ilia)
 - Changed user error handler mechanism to relay to built-in error handler if it