On the PHP Security Blog today, Stefan Esser has this new post with comments about the latest PHP 5.x release and the HTTP response splitting it fixes.

For all those that have not yet learned about my two new advisories through the usual channels. PHP 5.1.2 was released today, fixing among other things a serious HTTP Response Splitting vulnerability in the PHP5 session extension. The fix was implemented in a way similar to the SAPI hook in our Hardening-Patch and is the first move to get some of the Hardening-Patch features into the plain PHP. It is also merged into the PHP4 code tree.

So, basically, once the latest version of the PHP 4.x series has been released, HTTP reponse splitting issues will be a thing of the past. Great work on both sides of the version fence for taking care of this issue...

On the PHP Security Blog today, Stefan Esser has this new post with comments about the latest PHP 5.x release and the HTTP response splitting it fixes.

For all those that have not yet learned about my two new advisories through the usual channels. PHP 5.1.2 was released today, fixing among other things a serious HTTP Response Splitting vulnerability in the PHP5 session extension. The fix was implemented in a way similar to the SAPI hook in our Hardening-Patch and is the first move to get some of the Hardening-Patch features into the plain PHP. It is also merged into the PHP4 code tree.

So, basically, once the latest version of the PHP 4.x series has been released, HTTP reponse splitting issues will be a thing of the past. Great work on both sides of the version fence for taking care of this issue...

Ilia Alshanetsky has his post today about the release of PHP 5.1.2, the latest in the PHP 5 distributions.

This morning I've released PHP 5.1.2 , which is a culmination of about 3 months work by PHP developer community. Big thanks to all the developers who have spent the time to make this release possible. This release combines some new features, a fair number of bug fixes and even addresses a few security bugs. If you are using PHP 5, this release is definitely worth upgrading to. The major changes can be found in the release announcement, while if you want to read the entire changelog, you can find it here.

He also notes that the process behind this one was followed to the letter (when it comes to the release schedule and all). Greeat work everyone!

Ilia Alshanetsky has his post today about the release of PHP 5.1.2, the latest in the PHP 5 distributions.

This morning I've released PHP 5.1.2 , which is a culmination of about 3 months work by PHP developer community. Big thanks to all the developers who have spent the time to make this release possible. This release combines some new features, a fair number of bug fixes and even addresses a few security bugs. If you are using PHP 5, this release is definitely worth upgrading to. The major changes can be found in the release announcement, while if you want to read the entire changelog, you can find it here.

He also notes that the process behind this one was followed to the letter (when it comes to the release schedule and all). Greeat work everyone!

There's a note over on the main PHP site, that the release of the latest version in the PHP 5.1.x series has been posted - PHP 5.1.2.

The PHP development team is proud to announce the release of PHP 5.1.2. This release combines small feature enhancements with a fair number of bug fixes and addresses three security issues. All PHP 5 users are encouraged to upgrade to this release.

Further details about this release can be found in the release announcement and the full list of changes is available in the PHP 5 ChangeLog.

Some of the larger changes in this new version include: "HTTP Response Splitting has been addressed in ext/session and in the header() function", "Upgraded OCI8 extension", and "Over 85 various bug fixes".

So, what are you waiting for? Get over and upgrade now!

There's a note over on the main PHP site, that the release of the latest version in the PHP 5.1.x series has been posted - PHP 5.1.2.

The PHP development team is proud to announce the release of PHP 5.1.2. This release combines small feature enhancements with a fair number of bug fixes and addresses three security issues. All PHP 5 users are encouraged to upgrade to this release.

Further details about this release can be found in the release announcement and the full list of changes is available in the PHP 5 ChangeLog.

Some of the larger changes in this new version include: "HTTP Response Splitting has been addressed in ext/session and in the header() function", "Upgraded OCI8 extension", and "Over 85 various bug fixes".

So, what are you waiting for? Get over and upgrade now!

From Pierre today, there's this quick post concerning the inclusion of XMLWriter in PHP 5.1.2.

XMLWriter is finally bundled in php5. It will available and enabled by default in the next PHP release (5.1.2).

With XMLReader, XMLWriter is a really nice addition to the xml extensions.

The XMLWriter extension provides fast, non-cached, forward-only means of generating streams or files containing XML data.

From Pierre today, there's this quick post concerning the inclusion of XMLWriter in PHP 5.1.2.

XMLWriter is finally bundled in php5. It will available and enabled by default in the next PHP release (5.1.2).

With XMLReader, XMLWriter is a really nice addition to the xml extensions.

The XMLWriter extension provides fast, non-cached, forward-only means of generating streams or files containing XML data.