Longhorn PHP 2019 Schedule

News Archive - 2013

Here are the most important news items we have published in 2013 on PHP.net.


PHP 5.4.23 Released

12-Dec-2013

The PHP development team announces the immediate availability of PHP 5.4.23. About 10 bugs were fixed, including a security issue in OpenSSL module (CVE-2013-6420). All PHP 5.4 users are encouraged to upgrade to this version.

For source downloads of PHP 5.4.23 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 5.3.28 Released

12-Dec-2013

The PHP development team announces the immediate availability of PHP 5.3.28. This release fixes two security issues in OpenSSL module in PHP 5.3 - CVE-2013-4073 and CVE-2013-6420. All PHP 5.3 users are encouraged to upgrade to PHP 5.3.28 or latest versions of PHP 5.4 or PHP 5.5.

For source downloads of PHP 5.3.28 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 5.5.7

12-Dec-2013

The PHP development team announces the immediate availability of PHP 5.5.7. This release fixes some bugs against PHP 5.5.6 and it also includes a fix for CVE-2013-6420 in OpenSSL extension. All users are strongly encouraged to upgrade.

For source downloads of PHP 5.5.7 please visit our downloads page, Windows binaries are located on windows.php.net/download/. The list of changes can be found in the ChangeLog.

Our modern web theme goes live!

20-Nov-2013

The PHP web team are delighted to announce the launch of the new web theme that has been in beta for many months. Lots of hard work has gone into this release and we will be continually improving things over time now that we have migrated away from the legacy theme.

From an aesthetics point of view the general color scheme of the website has been lightened from the older dark purple. Lots of borders and links use a similar purple color to attain consistency. Fonts are smoother, and colors, contrast and highlighting have significantly improved; especially on function reference pages. Code examples should now be much more readable.

The theme is marked up using HTML5 and is generally much more modern. We are using Google Fonts and Bootstrap for our theme base.

To provide valuable feedback, you can use the 'Feedback' widget on the side of the page (not visible on smartphones) and to report bugs, you can make use of the bugs.php.net tracker. Despite our extensive multi-device/multi-browser testing, we may have missed something. So, if you spot any issues please do get in touch.

Special thanks to the guys who helped make this happen, you know who you are!

PHP 5.4.22 Released

14-Nov-2013

The PHP development team announces the immediate availability of PHP 5.4.22. About 10 bugs were fixed. All PHP 5.4 users are encouraged to upgrade to this version.

For source downloads of PHP 5.4.22 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 5.5.6 is now available

14-Nov-2013

The PHP development team announces the immediate availability of PHP 5.5.6. This release fixes some bugs against PHP 5.5.5, and adds some performance improvements.

For source downloads of PHP 5.5.6 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

A further update on php.net

24-Oct-2013

We are continuing to work through the repercussions of the php.net malware issue described in a news post earlier today. As part of this, the php.net systems team have audited every server operated by php.net, and have found that two servers were compromised: the server which hosted the www.php.net, static.php.net and git.php.net domains, and was previously suspected based on the JavaScript malware, and the server hosting bugs.php.net. The method by which these servers were compromised is unknown at this time.

All affected services have been migrated off those servers. We have verified that our Git repository was not compromised, and it remains in read only mode as services are brought back up in full.

As it's possible that the attackers may have accessed the private key of the php.net SSL certificate, we have revoked it immediately. We are in the process of getting a new certificate, and expect to restore access to php.net sites that require SSL (including bugs.php.net and wiki.php.net) in the next few hours.

To summarise, the situation right now is that:

  • JavaScript malware was served to a small percentage of php.net users from the 22nd to the 24th of October 2013.
  • Neither the source tarball downloads nor the Git repository were modified or compromised.
  • Two php.net servers were compromised, and have been removed from service. All services have been migrated to new, secure servers.
  • SSL access to php.net Web sites is temporarily unavailable until a new SSL certificate is issued and installed on the servers that need it.

Over the next few days, we will be taking further action:

  • php.net users will have their passwords reset. Note that users of PHP are unaffected by this: this is solely for people committing code to projects hosted on svn.php.net or git.php.net.

We will provide a full post mortem in due course, most likely next week. You can also get updates from the official php.net Twitter: @official_php.

A quick update on the status of php.net

24-Oct-2013

On 24 Oct 2013 06:15:39 +0000 Google started saying www.php.net was hosting malware. The Google Webmaster Tools were initially quite delayed in showing the reason why and when they did it looked a lot like a false positive because we had some minified/obfuscated javascript being dynamically injected into userprefs.js. This looked suspicious to us as well, but it was actually written to do exactly that so we were quite certain it was a false positive, but we kept digging.

It turned out that by combing through the access logs for static.php.net it was periodically serving up userprefs.js with the wrong content length and then reverting back to the right size after a few minutes. This is due to an rsync cron job. So the file was being modified locally and reverted. Google's crawler caught one of these small windows where the wrong file was being served, but of course, when we looked at it manually it looked fine. So more confusion.

We are still investigating how someone caused that file to be changed, but in the meantime we have migrated www/static to new clean servers. The highest priority is obviously the source code integrity and after a quick:

git fsck --no-reflog --full --strict

on all our repos plus manually checking the md5sums of the PHP distribution files we see no evidence that the PHP code has been compromised. We have a mirror of our git repos on github.com and we will manually check git commits as well and have a full post-mortem on the intrusion when we have a clearer picture of what happened.

PHP 5.4.21 Released

17-Oct-2013

The PHP development team announces the immediate availability of PHP 5.4.21. About 10 bugs were fixed. All PHP 5.4 users are encouraged to upgrade to this version.

For source downloads of PHP 5.4.21 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 5.5.5 has been released

16-Oct-2013

The PHP development team announces the immediate availability of PHP 5.5.5. This release fixes about twenty bugs against PHP 5.5.4, some of them regarding the build system. All PHP users are encouraged to upgrade to this new version.

For source downloads of PHP 5.5.5 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Ski PHP 2014

Ski PHP 2014

10-Oct-2013

Ski PHP 2014 has announced the schedule for their upcoming conference, which will be on January 17-18, 2014 in Salt Lake City, Utah, USA. Our schedule is anchored by keynotes from Jared Smith, Laura Thomson, and Chris Hartjes, and also includes talks from Julien Pauli, Ed Finkler, John Coggeshall, Elizabeth Naramore, and many more.

Our Early Bird registration rate of just $129 is available until October 15th. Hotel group rate information is available at our site.

Madison PHP Conference

Madison PHP Conference

10-Oct-2013

November 16th, 2013 - 8:30am - 3:30pm
Warner Park Community Recreation Center
1625 Northport Dr, Madison, WI 53704
$40 (before October 16th), $60 (after October 16th), $100 at the door

Call for Papers: Now through October 8th, 2013

Join us for a one day, two-track conference that focuses on PHP and related web technologies. This event is organized by Madison PHP and is designed to offer something to attendees at all skill levels. It will be a day of networking, learning, sharing, and great fun!

Two Tracks We've carefully crafted two distinct tracks but you're not locked into just one. Attend any talk from any track.

PHP Foundations Track Learn the basics of PHP development. A carefully selected set of talks for those who have never programmed before or who are new to PHP and would like a refresher of the basics.

PHP Professional Track Explore new technologies and techniques. Gather with other seasoned developers and increase your value with a series of talks that will both energize and get you excited about the future of PHP.

For more information and to register, please visit: http://www.MadisonPHPConference.com

PHP 5.4.20 released

19-Sep-2013

The PHP development team announces the immediate availability of PHP 5.4.20. About 30 bugs were fixed. All PHP 5.4 users are encouraged to upgrade to this version.

For source downloads of PHP 5.4.20 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 5.5.4 released

19-Sep-2013

The PHP development team announces the immediate availability of PHP 5.5.4. This release fixes several bugs against PHP 5.5.3. All PHP users are encouraged to upgrade to this new version.

For source downloads of PHP 5.5.4 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 5.4.19 and PHP 5.5.3 Released!

22-Aug-2013

The PHP development team announces the immediate availability of PHP 5.4.19 and PHP 5.5.3. These releases fix a bug in the patch for CVE-2013-4248 in OpenSSL module and compile failure with ZTS enabled in PHP 5.4. All PHP users are encouraged to upgrade to either PHP 5.5.3 or PHP 5.4.19.

For source downloads of PHP 5.4.19 and PHP 5.5.3 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

CodeConnexx 2013

CodeConnexx 2013

19-Aug-2013

CodeConnexx is a two-day, one track conference that aims to bring together everyone interested in talking about code.

As we know, choosing a career as a coder comes with its own set of life challenges, and we want to talk about those too. In short, this conference is a different kind of conference, as it connects those two pieces of the puzzle together in one event.

Every technical talk will be followed by a talk about life skills and work/life balance. There will also be plenty of social opportunities to get to know the other attendees. Not only do we want to help you bridge the gap between work and life, we want to help you connect with each other as well.

CodeConnexx, hosted by PHPWomen, will take place in Maastricht, Netherlands on November 8th & 9th 2013. We sincerely hope you are able to join us!

ZendCon

ZendCon 2013

19-Aug-2013

The 9th Annual ZendCon will bring together developers, IT managers and PHP experts from around the world. With a focus on PHP, mobile and cloud development, attendees at this highly acclaimed conference will expand their skills and explore new technologies.

ZendCon provides unique opportunities to learn from a wide variety of technical sessions, hear keynote presentations from thought leaders, and engage with prominent PHP speakers and vendors. You’ll learn about the latest innovations and network with peers to solve PHP challenges

The conference is scheduled from October 7-10, 2013. For more information, visit http://www.zendcon.com/.

PHP 5.5.2 Released!

16-Aug-2013

The PHP development team announces the immediate availability of PHP 5.5.2. About 20 bugs were fixed, including security issue in OpenSSL module (CVE-2013-4248) and session fixation problem (CVE-2011-4718). All users of PHP are encouraged to upgrade to this release.

For source downloads of PHP 5.5.2 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 5.4.18 Released!

15-Aug-2013

The PHP development team announces the immediate availability of PHP 5.4.18. About 30 bugs were fixed, including security issues CVE-2013-4113 and CVE-2013-4248. All users of PHP are encouraged to upgrade to this release.

For source downloads of PHP 5.4.18 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

WPC 2013

Web & PHP Conference

08-Aug-2013

Web & PHP Magazine invites you to its first ever conference. This 3 day conference, taking place in San Jose, CA this September, will immerse you in a world of continuously evolving web technologies.

Sticking with our ethos of open knowledge sharing and community support, all conference sessions, keynote presentations, hacks and Expo on September 17 & 18 are FREE to attend!

Whether your interests lay in core PHP, security, testing,architecture, frameworks, cloud, HTML5, CSS3, responsive design, UX, mobile web or web-based mobile apps, our final program of sessions, workshops and keynote presentations will have something for you....

There will also be a pre-conference day with hands-on workshops and deep-dive tutorials, allowing you to work with and learn from some of the leading experts in their field. With this special discount code: WPC13PN you can access the Workshops Day for the special price of $159 instead of $199.

IPC 2013

International PHP Conference 2013

07-Aug-2013

Once again, the International PHP Conference will explore key topics and core technologies for PHP developers, webworkers, IT managers and everyone interested in web technology in more than 75 sessions, workshops and keynotes.

We'll show you how to scale your applications, explain the details of Continuous Integration or evaluate different approaches to NoSQL. Attendees will have the opportunity to meet with speakers, core developers and consultants, and there are often opportunities to evaluate your code. Community and enterprise projects profit from our international reputation and impulses given from the developer community..

http://phpconference.com.

Northeast PHP Technical Conference

Northeast PHP Technical Conference

19-Jul-2013

2nd Annual Northeast PHP Technical Conference - August 16 to 18!

This year’s Northeast PHP Conference will once again be held in Boston, MA from August 16 to 18. This year we are adding a day to the front of the weekend for half-day workshops.

We have 2 great Keynote speakers lined up as well:

Eli White

Eli is a strong advocate for PHP and used it in every project he's work on. He is currently a Founding Partner & CTO of Musketeers.me, and the Managing Editor of php|architect magazine. He is also an avid writer (blogs, articles and books), and has spoken at numerous conferences.

and Terry Chay

Terry Chay is administrative overhead (Director of Features Engineering) at the Wikimedia Foundation, maintainers of Wikipedia. And when he isn’t doing that, he’s saying outrageous things on his blog.

For tickets and more information: http://www.nephp.org/

PHP 5.5.1 Released

18-Jul-2013

The PHP development team announces the immediate availability of PHP 5.5.1. About 20 bugs were fixed including a security fix in the XML parser (Bug #65236).

For source downloads of PHP 5.5.1 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 5.3.27 Released - PHP 5.3 Reaching End of Life

11-Jul-2013

The PHP development team announces the immediate availability of PHP 5.3.27. About 10 bugs were fixed, including a security fix in the XML parser (Bug #65236).

Please Note: This will be the last regular release of the PHP 5.3 series. All users of PHP are encouraged to upgrade to PHP 5.4 or PHP 5.5. The PHP 5.3 series will receive only security fixes for the next year.

For source downloads of PHP 5.3.27 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 5.4.17 released!

04-Jul-2013

The PHP development team announces the immediate availability of PHP 5.4.17. About 20 bugs were fixed. All users of PHP are encouraged to upgrade to this release.

For source downloads of PHP 5.4.17 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 5.5.0 released.

20-Jun-2013

The PHP development team is proud to announce the immediate availability of PHP 5.5.0. This release includes a large number of new features and bug fixes.

The key features of PHP 5.5.0 include:

Changes that affect compatibility:

  • PHP logo GUIDs have been removed.
  • Windows XP and 2003 support dropped.
  • Case insensitivity is no longer locale specific. All case insensitive matching for function, class and constant names is now performed in a locale independent manner according to ASCII rules.

For users upgrading from PHP 5.4, a migration guide is available detailing the changes between 5.4 and 5.5.0.

For a full list of changes in PHP 5.5.0, see the ChangeLog.

PHP 5.4.16 and PHP 5.3.26 released!

06-Jun-2013

The PHP development team announces the immediate availability of PHP 5.4.16 and PHP 5.3.26. These releases fix about 15 bugs, including CVE-2013-2110. All users of PHP are encouraged to upgrade to PHP 5.4.16.

For source downloads of PHP 5.4.16 and PHP 5.3.26 please visit our downloads page, Windows binaries can be found on windows.php.net/download/.

The list of changes are recorded in the ChangeLog.

PHP 5.5 RC3 is available

06-Jun-2013

The PHP development team announces the availability of PHP 5.5 RC3. This release fixes some bugs against RC2.

THIS IS A DEVELOPMENT PREVIEW - DO NOT USE IT IN PRODUCTION!

You can find an incomplete changelog of PHP 5.5.0RC3 here :

  • Fixed bug causing segfault in gc_zval_possible_root)
  • Fixed bug about a heap based buffer overflow in quoted_printable_encode
  • hash_pbkdf2() truncates data when using default length and hex output

To get the full changelog, please, check the NEWS file attached to the archive. For source downloads of PHP 5.5.0RC3 please visit the download page, Windows binaries can be found on windows.php.net/qa/.

We were pleased if you could test this release candidate against your code base and report any problems that you encounter to the QA mailing list and/or the PHP bug tracker.

Thanks you helping us making PHP better.

Shanghai PHP conference 2013

Shanghai PHP conference 2013

04-Jun-2013

ThinkInLAMP is pleased to announce the first Shanghai PHP conference 2013. This event will be held on Sunday June 30th 2013 in Shanghai, China. A community oriented conference which is organized by an excellent line up and socials.

This event will concentrate on PHP languages and web based technologies used today; extension, latest dynamics and new applications within the increased demand for developers and everyone who is interested in PHP language.

There will be more than 500 developers owned over 3 year’s experiences andsenior technical persons come for learning and networking. Register soon as the Early Bird discount rate expires on May 30.

Go to http://php.thinkinlamp.com/2013 for more information, we are looking forward to seeing you in June!

PHP 5.5.0RC2 is available

23-May-2013

The PHP development team announces the availability of the second release candidate of PHP 5.5. This release fixes some bugs against RC1 and improves overall stability.

THIS IS A DEVELOPMENT PREVIEW - DO NOT USE IT IN PRODUCTION!

You can find an incomplete changelog of PHP 5.5.0RC2 here :

  • Fixed a bug related to segfault on memory exhaustion within function definition.
  • Fixed bug in mbstring PHPTs which would crash on Windows x64.
  • Fixed a bug where Custom Exceptions could crash when internal properties overridden.

To get the full changelog, please, check the NEWS file attached to the archive. For source downloads of PHP 5.5.0RC2 please visit the download page, Windows binaries can be found on windows.php.net/qa/.

Please help us to identify bugs in order to ensure that the release is solid and all things behave as expected. Please test this release candidate against your code base and report any problems that you encounter to the QA mailing list and/or the PHP bug tracker.

Thanks to all people helping on the PHP project.

Seriously: PHP 5.4.15 and PHP 5.3.25 really were released!

09-May-2013

We weren't trying to pull an April Fool's Day joke in May. A temporary glitch caused the latest distributions of PHP to not properly propagate to the mirror servers. This has been fixed at the root level, and it's now being distributed to all of the mirrors. We'll take some bacon to go with the egg on our faces, please!

If you continue to experience issues with downloading these versions after 21:00 UTC on 9 May, 2013, please drop us a line at php-mirrors@lists.php.net, telling us from which mirror you're trying to download, and we'll get it resolved.

We apologize for the delays and confusion this may have caused, and thank you for using PHP.

PHP 5.5.0RC1 is available

09-May-2013

The PHP development team announces the availability of the first release candidate of PHP 5.5. This release fixes some bugs as well as some possible leaks from our last beta.

THIS IS A DEVELOPMENT PREVIEW - DO NOT USE IT IN PRODUCTION!

You can find an incomplete changelog of PHP 5.5.0RC1 here :

  • Ignore QUERY_STRING when sent in SCRIPT_FILENAME in FPM SAPI.
  • Fix build with system libgd >= 2.1 which is now the minimal version required (as build with previous version is broken). No change when bundled libgd is used.
  • Fixed some bugs in SNMP
  • Fixed bug where stream_select() fails with pipes returned by proc_open() on Windows x64).

To get the full changelog, please, check the NEWS file attached to the archive. For source downloads of PHP 5.5.0RC1 please visit the download page, Windows binaries can be found on windows.php.net/qa/.

Note that our release candidate cycle is only meant to bug fixes, no more features will be added to PHP 5.5 from now.

Please help us to identify bugs in order to ensure that the release is solid and all things behave as expected. Please test this release candidate against your code base and report any problems that you encounter to the QA mailing list and/or the PHP bug tracker.

We would like to thank all people helping us making PHP better by testing it and reporting problems, as well as all its contributors for their great work on this 5.5 version of PHP.

PHP 5.4.15 and PHP 5.3.25 released!

09-May-2013

The PHP development team announces the immediate availability of PHP 5.4.15 and PHP 5.3.25. These releases fix about 10 bugs aswell as upgrading the bundled libmagic library. All users of PHP are encouraged to upgrade to PHP 5.4.15.

For source downloads of PHP 5.4.15 and PHP 5.3.25 please visit our downloads page, Windows binaries can be found on windows.php.net/download/.

The list of changes are recorded in the ChangeLog.

DevConf 2013

DevConf 2013

07-May-2013

DevConf 2013 in Moscow, Russia on Jun 14

DevConf is the ultimate meeting place for russian-speaking web-developers, combining several language-specific conferences under one roof.

This year DevConf will include the following sections:

  • DevConf::PHP();
  • DevConf::Ruby();
  • DevConf::Python();
  • DevConf::Javascript();
  • DevConf::Mobi();

Each section will feature several talks from the active contributors/authors of the language. Among the invited speakers are Dmitry Stogov (maintainer of Zend Engine and Zend OpCache and many more), Chiu-Ki Chan (Google), Lennart Regebro, Andrey Aksyonov (author of Sphinx), Alexey Rybak (Badoo), Alexander Makarov (one of the main contributors to Yii), Sergey Petrunya (of MariaDB fame), and many others, see more details on the official website.

PHP Conference Argentina

PHP Conference Argentina

06-May-2013

4-5 OCTOBER 2013, Buenos Aires, ARGENTINA

This year we gathered the best of the programming world. With several talks that cover a wide range of topics related to web development, PHP Conference Argentina is a conference no programmer wishes to miss (whether or not they use PHP.)

PHP 5.5 beta 4 is now available

25-Apr-2013

The PHP development team announces the release of the 4th beta of PHP 5.5.0. This release fixes some bugs against beta 3 and cleans up some features.

THIS IS A DEVELOPMENT PREVIEW - DO NOT USE IT IN PRODUCTION!

PHP 5.5.0beta4 is shipped with some bug fixes. Here is the list:

  • Fixed bug #64677, execution operator `` stealing surrounding arguments.
  • Fixed bug #64342, ZipArchive::addFile() has to check for file existence.
  • Fixed Windows x64 version of stream_socket_pair() and improved error handling.
  • Remove curl stream wrappers

You can read the full list of changes in the NEWS file contained in the release archive.

For source downloads of PHP 5.5.0beta4 please visit the download page, Windows binaries can be found on windows.php.net/qa/.

Next step is Release Candidate. Our 1st RC is expected for May 9th.

Thank you for supporting PHP.