Zend Framework 1.7.5 released - contains important security fix

Zend Framework 1.7.5 has been released, and as always you can download the latest copy of Zend Framework for free from:

http://framework.zend.com/download/latest/

Besides the normal small enhancements and bug fixes that come with an incremental release such as this, there is also a rather important (and somewhat controversial) security fix that was added. This security fix breaks backwards compatibility with the previous version, because it simply must in order to exist. There is however a way to turn the security fix off to keep your current applications working in the case that this change breaks you.

PHP 5.2.7 Released

Security Enhancements and Fixes in PHP 5.2.7:

• Upgraded PCRE to version 7.8 (Fixes CVE-2008-2371)
• Fixed missing initialization of BG(page_uid) and BG(page_gid), reported by Maksymilian Arciemowicz.
• Fixed a crash inside gd with invalid fonts (Fixes CVE-2008-3658).
• Fixed a possible overflow inside memnstr (Fixes CVE-2008-3659).
• Fixed incorrect php_value order for Apache configuration, reported by Maksymilian Arciemowicz.
• Fixed safe_mode related security issues detailed in CVE-2008-2665 and CVE-2008-2666.
• Crash with URI/file..php (filename contains 2 dots) (Fixes CVE-2008-3660)
• IMAP toolkit crash: rfc822.c legacy routine buffer overflow. (Fixes CVE-2008-2829)

Some of the key enhancements in PHP 5.2.7 include:

• Fixed several memory leaks inside the readline and sqlite extensions
• A number of corrections relating to date parsing inside the date extension
• Fixed bugs relating to data retrieval in the PDO extension
• A series of crashes in various areas of code were resolved
• Several corrections were made to the strip_tags() function interms of <>
• A number of bugs were fixed in extract() function when
• EXTR_REFS flag is being used
• Added the ability to log PHP errors to the SAPI (Ex. Apachelog) logging facility
• Over 170 bug fixes.

For users upgrading from PHP 5.0 and PHP 5.1, an upgrade guide is available here http://www.php.net/migration52), detailing the changes between those releases and PHP 5.2.7. For a full list of changes in PHP 5.2.7, see the ChangeLog (http://www.php.net/ChangeLog-5.php#5.2.7).

PHP Web Development - PHP mysql web development services, php solutions, custom development of Internet applications using PHP for high performance and enterprise ready web application.