PHP5.2.12 released to fix more than 60 bugs

PHP5.2.12 released and fixed more than 60 bugs-Linux Enterprise Application-Linux server application information. The following is a detailed description. PHP is a new type of CGI programming language. It is easy to learn and use, and runs fast. It can easily and quickly compile and write powerful functions and runs fast, it can also run Web Background programs on Windows, Unix, and Linux platforms. It has built-in functions such as file upload, password authentication, Cookies operation, email sending and receiving, and dynamic GIF generation, PHP directly provides original connections to many databases, including Oracle, Sybase, S, Mysql, Informix, Dbase, Solid, and Access. It fully supports ODBC interfaces, you do not need to change the PHP code.

Http://cn.php.net/distributions/php-5.2.12.tar.bz2 (source code)
Http://cn.php.net/distributions/php-5.2.12-Win32.zip (win Binary Package)

View ChangeLog: http://www.php.net/ChangeLog-5.php#5.2.12

Security Enhancements and Fixes in PHP 5.2.12:

Fixed a safe_mode bypass in tempnam () identified by Grzegorz stachowiak. (CVE-2009-3557, Rasmus)
Fixed a open_basedir bypass in posix_mkfifo () identified by Grzegorz Stachowiak. (CVE-2009-3558, Rasmus)
Added "max_file_uploads" INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion, identified by Bogdan Calin. (CVE-2009-4017, Ilia)
Added protection for $ _ SESSION from interrupt resume uption and improved "session. save_path" check, identified by Stefan Esser. (CVE-2009-4143, Stas)
Fixed bug #49785 (insufficient input string validation of htmlspecialchars (). (CVE-2009-4142, Moriyoshi, hello at iwamot dot com)

Source: cnbeta