The PHP development team would like to announce the immediate  
availability of PHP 5.2.4. This release focuses on improving the  
stability of the PHP 5.2.X branch with over 120 various bug fixes in  
addition to resolving several low priority security bugs. All users  
of PHP are encouraged to upgrade to this release.

Security Enhancements and Fixes in PHP 5.2.4
- ----------------------------------------------------------------
* Fixed a floating point exception inside wordwrap() (Reported by  
Mattias Bengtsson)
* Fixed several integer overflows inside the GD extension (Reported  
by Mattias Bengtsson)
* Fixed size calculation in chunk_split() (Reported by Gerhard Wagner)
* Fixed integer overflow in str[c]spn(). (Reported by Stanislav  
Malyshev)
* Fixed money_format() not to accept multiple %i or %n tokens.  
(Reported by Stanislav Malyshev)
* Fixed zend_alter_ini_entry() memory_limit interruption  
vulnerability. (Reported by Stefan Esser)
* Fixed INFILE LOCAL option handling with MySQL extensions not to be  
allowed when open_basedir or safe_mode is active. (Reported by  
Stanislav Malyshev)
* Fixed session.save_path and error_log values to be checked against  
open_basedir and safe_mode (CVE-2007-3378) (Reported by Maksymilian  
Arciemowicz)
* Fixed a possible invalid read in glob() win32 implementation  
(CVE-2007-3806) (Reported by shinnai)
* Fixed a possible buffer overflow in php_openssl_make_REQ (Reported  
by zatanzlatan at hotbrev dot com)
* Fixed an open_basedir bypass inside glob() function (Reported by dr  
at peytz dot dk)
* Fixed a possible open_basedir bypass inside session extension when  
the session file is a symlink (Reported by c dot i dot morris at  
durham dot ac dot uk)
* Improved fix for MOPB-03-2007.
* Corrected fix for CVE-2007-2872.


The Key Improvements of PHP 5.2.4 Include
- ------------------------------------------------------------

* Upgraded PCRE to version 7.2
* Added persistent connection status checker to pdo_pgsql.
* Fixed oci8 and PDO_OCI extensions to allow configuring with Oracle  
11g client libraries.
* Fixed bug #41831 (pdo_sqlite prepared statements convert resources  
to strings).
* Fixed bug #41770 (SSL: fatal protocol error due to buffer issues)
* Fixed bug #41713 (Persistent memory consumption on win32 since 5.2)

For users upgrading from PHP 5.0 and PHP 5.1, an upgrade guide is
available here (http://www.php.net/migration52), detailing the
changes between those releases and PHP 5.2.4.

For a full list of changes in PHP 5.2.4, see the ChangeLog (http://
www.php.net/ChangeLog-5.php#5.2.4).

The Apache Tuscany team are pleased to announce the 1.3.2 release of the Java SCA project.

Apache Tuscany provides a runtime environment based on the Service Component Architecture (SCA). SCA is a set of specifications aimed at simplifying SOA application development. These specifications are being standardized by OASIS as part of the Open Composite Services Architecture (Open CSA).

This 1.3.2 release is a maintenance release over the 1.3 release, see the RELEASE_NOTES and CHANGES file for details, and to download the distributions please go to:

http://tuscany.apache.org/sca-java-releases.html

To find out more about OASIS Open CSA go to:

http://www.oasis-opencsa.org

Apache Tuscany welcomes your help. Any contribution, including code, testing, contributions to the documentation, or bug reporting is always appreciated. For more information on how to get involved in Apache Tuscany visit the website at:

http://tuscany.apache.org

Thank you for your interest in Apache Tuscany

Drupal 6.6 and Drupal 5.12, maintenance releases fixing problems reported using the bug tracking system, as well as critical security vulnerabilities, are now available for download.

Upgrading your existing Drupal 5 and 6 sites is strongly recommended. There are no new features in these releases. For more information about the Drupal 6.x release series, consult the Drupal 6.0 release announcement, more information on the 5.x releases can be found in Drupal 5.0 release announcement.

The Drupal Association today announced that Drupal has won two prestigious Packt Publishing 2008 Open Source CMS Awards this week - the Overall 2008 Open Source CMS Award and the Best PHP Open Source CMS. This marks the second consecutive year that Drupal has won Packt Publishing’s Overall Open Source CMS award. In addition, on Monday, Packt Publishing recognized leading Drupal contributor Earl Miles as a 2008 Open Source CMS Most Valued Person (MVP).