Parallels H-Sphere 2.5-3.0 PHP 4 Package Changelog

Copyright (c) 2009 by Parallels

Please report all bugs and issues through the following feedback form: http://www.parallels.com/en/psoft/feedback.

Parallels H-Sphere documentation is available at http://www.parallels.com/en/products/hsphere/docs.

Changelog

Parallels H-Sphere version: 2.5 and 3.0.

Improvements and Fixes:

• Fixed an issue with different mysql client library used on CentOS 4 as compared to CentOS 5.
• Libraries included into PHP are statically updated to their most recent versions.

Note: check PHP4 update for H-Sphere 3.1+

Updated:

• PHP 4.4.9

Note: check PHP4 update for H-Sphere 3.1+

Released with System Packages Update

Fixes and improvements:

• Added missing zend_extensions.h file

Released with System Packages Update

Fixes and improvements:

• PHP4 updated to 4.4.8

Released with System Packages Update

Fixes and improvements:

• Build imap API with SSL support
• Build SQLLite API with Unicode support
• Other minor fixes

Released with System Packages Update

Fixes and improvements:

• PHP4 updated to 4.4.7
• Fixed several vulnerabilities and weaknesses

Released with System Packages Update

Fixes and improvements:

• PHP4 updated to 4.4.6

Released with System Packages Update

Fixes and improvements:

• PHP4 updated to 4.4.5
• Fixed Multiple PHP Vulnerabilities
• Added mysqli plugin

Note: A major bug was found in Zend engine for PHP 4.4.5. For this reason we have taken a stable snapshot from PHP 4.4.6-dev recommended for PHP developers.

Released with System Packages Update

Fixes and improvements:

• Added gd php extension missing
• Misconfiguration in xslt php extension for RHES4 platform
• Fixed post installation section
• Added script, which provides check of the php build enviroment

Released with H-Sphere 2.5 Patch 5

Fixes and improvements:

• PHP4 updated to version 4.4.4 that fixes multiple PHP vulnerabilities
• Several php-addons moved to php core

Released with H-Sphere System Packages Update

Fixes:

• An offset/length parameter validation error exists in the "substr_compare()" function.
• An unspecified error exists in the handling of certain characters in session names.
• An error in the "zend_hash_del_key_or_index()" function when deleting elements can e.g. be exploited to cause the "unset()" function to not unset variables properly.

Improvements and Fixes:

• Increased FD_SETSIZE system parameter
• Added /hsphere/shared/share/curl/curl-ca-bundle.crt file to provide correct work of php curl SSL extension
• Updated 3rd party software where security holes were detected:
  - libpng 1.2.8
  - curl 7.15.3

Improvements and Fixes:

• php 4 updated to the latest stable 4.4.2 version

New package build includes minor fixes of the build environment bugs.

Improvements and Fixes:

• php 4 updated to the latest stable 4.4.1 version

Contact Information

Parallels Holdings
660 SW 39th Street
Suite 205
Renton, Washington 98057
USA

Phone: +1 (425) 282 6400
Fax: +1 (425) 282 6444

Web: http://www.parallels.com/

E-mail:
For billing information, email accounting@parallels.com
For purchasing or partnering information, email sales@parallels.com
To report problems with Parallels software, email bugreport@parallels.com
For information on career opportunities with Parallels, email careers@parallels.com
For press contact information, email press@parallels.com
For information about becoming a Partner, email partners@parallels.com
For information on translating into your language, email i18n@parallels.com
For general product information, email info@parallels.com

© Copyright 2009 Parallels. All rights reserved.