[Case 45931, Case 45932] PHP 5.3.5 and 5.2.17 Released

[Ivan A]

The PHP development team would like to announce the immediate availability of PHP 5.3.5 and 5.2.17.

This release resolves a critical issue, reported as PHP bug #53632, where conversions from string to double might cause the PHP interpreter to hang on systems using x87 FPU registers.

The problem is known to only affect x86 32-bit PHP processes, regardless of whether the system hosting PHP is 32-bit or 64-bit. You can test whether your system is affected by running this script from command line.

All users of PHP are strongly advised to update to these versions immediately.

PHP: Hypertext Preprocessor

[cPanelKeithS]

This has been patched for all PHP 5.x versions per EasyApache < AllDocumentation/ChangeLog < TWiki - v5291.

The mentioned newer revisions of PHP are still being evaluated internally for feature changes. Simply run EasyApache with your current good build profile and your current 5.x version will be patched.

[ServerKitaWebId]

The PHP development team would like to announce the immediate availability of PHP 5.3.5 and 5.2.17.

This release resolves a critical issue, reported as PHP bug #53632 and CVE-2010-4645, where conversions from string to double might cause the PHP interpreter to hang on systems using x87 FPU registers.

The problem is known to only affect x86 32-bit PHP processes, regardless of whether the system hosting PHP is 32-bit or 64-bit. You can test whether your system is affected by running this script from the command line.

All users of PHP are strongly advised to update to these versions immediately.

[Ivan A]

Duplicate..
http://forums.cpanel.net/f145/php-5-...ed-183882.html

[hermes369]

Perhaps a very stupid question, but, why do I not see PHP 5.3.5 available as a minor version update inside EasyApache?

[cPanelDon]

Perhaps a very stupid question, but, why do I not see PHP 5.3.5 available as a minor version update inside EasyApache?

Each new, stable PHP release is reviewed and tested through Quality Assurance before being distributed via EasyApache. Please see the earlier reply from cPanelKeithS linking to the EasyApache change log.

[cPanelDon]

I have marked this feature request as filed internally and tagged both of the relevant case numbers in the thread title. For reference, you may view the official EasyApache Change Log to determine when both of the requested PHP versions are included.

The following case numbers can be used to identify which EasyApache build includes the desired PHP version per the official Change Logs:

• Case 45931: PHP 5.3.5
• Case 45932: PHP 5.2.17

[hermes369]

Thank you!

[DjiXas]

New changelog system is pretty awful, probably programmer designed it.

[zimbahost]

The PHP development team would like to announce the immediate availability of PHP 5.3.5 and 5.2.17.

This release resolves a critical issue, reported as PHP bug #53632 and CVE-2010-4645, where conversions from string to double might cause the PHP interpreter to hang on systems using x87 FPU registers.

The problem is known to only affect x86 32-bit PHP processes, regardless of whether the system hosting PHP is 32-bit or 64-bit. You can test whether your system is affected by running this script from the command line.

All users of PHP are strongly advised to update to these versions immediately.

PHP: News Archive - 2011

Thanks
Maison

[cPanelJared]

This has already been mentioned as a feature request:

http://forums.cpanel.net/f145/case-4...ed-183882.html

I have moved this thread to the feature requests section of our forum. To avoid duplication, please place any comments in the older thread mentioned above. Our developers are aware of PHP 5.3.5 and 5.2.17 and additional requests for these versions are not necessary.

[ServerKitaWebId]

hello, is there any update for this thread to implement on easyapache updates? thks!.

[DjiXas]

Come on guys, 5.2.17 is not that hard to add

[sirdopes]

Why does it matter if php is 5.2.17? The only thing that is fixed is CVE-2010-4645 which is already backported by cpanel.

[rlshosting]

It's good for customers since some don't know any better and it's good for PCI compliance.