PHP News

The PHP team is once again proud to participate in the Google Summer of Code. Ten students will "flip bits instead of burgers" this summer: Zend LLVM Extension by JoonasGovenius, mentored by NunoLopesPHP Optimizer by SamuelGraham Kelly IV, mentored by DerickRethansPhD (PHP Docbook) Project by RudyNappée, mentored by HannesMagnussonReplace auto* with CMake by Alejandro LeivaRojas, mentored by Pierre A.Joyegsoc:2008 - XDebug by Chung-YangLee, mentored by DavidCoallierRewrite the run-tests.php script by CesarMontedonico, mentored by TravisSwicegoodPHP Bindings for Cairo by AkshatGupta, mentored by AnantNarayananAlgorithm Optimizations by MichalDziemianko, mentored by ScottMacVicarPECL, Website Improvements by BarryCarlyon, mentored by Helgi ÞormarÞorbjörnssonImplement Unicode into PHP 6 by Henrique do NascimentoAngelo, mentored by ScottMacVicarUpdate (May 11th): Unfortunately Nicholas Sloan had to drop out of the program, but he will be replaced by Rudy Nappée working on the same application.

The PHP development team would like to announce the immediateavailability of PHP 5.2.6. This release focuses on improving the stability ofthe PHP 5.2.x branch with over 120 bug fixes, several of which are security related.All users of PHP are encouraged to upgrade to this release. Further details about the PHP 5.2.6 release can be found in the release announcement for 5.2.6, the full list of changes is available in the ChangeLog for PHP 5.Security Enhancements and Fixes in PHP 5.2.6:Fixed possible stack buffer overflow in the FastCGI SAPI identified by Andrei Nigmatulin.Fixed integer overflow in printf() identified by Maksymilian Aciemowicz.Fixed security issue detailed in CVE-2008-0599 identified by Ryan Permeh.Fixed a safe_mode bypass in cURL identified by Maksymilian Arciemowicz.Properly address incomplete multibyte chars inside escapeshellcmd() identified by Stefan Esser.Upgraded bundled PCRE to version 7.6Update (May 6th): The Windows installers were missing the XSL and IMAP extensions.Update (May 3rd): The Windows archives were missing the XSL and IMAP extensions.