月別アーカイブ: 2015年6月

php[world] 2015 Schedule Announced

The team at php[architect] is excited to announce the schedule for php[world] 2015! As always our conference is designed to bring all the various PHP communities together in one place to learn from each other. We will have separate tracks for PHP, Drupal, WordPress, Magento, Joomla!, Zend Framework, Symfony, Laravel, and CakePHP.

This year we are expanding the conference to 6 concurrent sessions so that we can cover even more material. Join us for this very unique event from November 16th through November 20th.

  • 5 day-long training sessions
  • 12 separate tutorials
  • 5 keynotes
  • 60 conference sessions
  • ... 5 amazing days ...

AFUP ForumPHP 2015

Come and join us at Forum PHP 2015, our annual conference gathering all PHP and Open Source communities, pros and PHP lovers.

This year, the event will be held at Beffroi de Montrouge, on November, 23rd and 24th.

“PHP’s 20th anniversary : 20 years of web, 20 years of global success, 20 years of innovation” In 1995, Rasmus Lerdorf started creating PHP. 20 years later, 80% of websites in the world use the language. Celebrate with us this worldwide success, during 2 days, 3 tracks, and all the best developers involved in PHP7 !

The call for papers is open until August, 15th: http://www.afup.org/pages/forumphp2015/appel-a-conferenciers-en.php

PHP 7.0.0 Alpha 2 Released

The PHP development team announces the immediate availability of PHP 7.0.0 Alpha 2. This is the second pre-release of the new PHP 7 major series. All users of PHP are encouraged to test this version carefully, and report any bugs and incompatibilities in the bug tracking system.

THIS IS A DEVELOPMENT PREVIEW - DO NOT USE IT IN PRODUCTION!

Alpha 2 introduces the new Throwable interface and changes to the Exception hierarchy and about 25 bug fixes reported since the first alpha.

PHP 7.0.0 comes with new version of the Zend Engine with features such as (incomplete list):

  • Improved performance: PHP 7 is up to twice as fast as PHP 5.6
  • Consistent 64-bit support
  • Many fatal errors are now Exceptions
  • Removal of old and unsupported SAPIs and extensions
  • The null coalescing operator (??)
  • Combined comparison Operator (<=>)
  • Return Type Declarations
  • Scalar Type Declarations
  • Anonymous Classes

For more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.

For source downloads of PHP 7.0.0 Alpha 2 please visit the download page, Windows source and binaries can be found on windows.php.net/qa/.

The next release will be Beta 1, which is to be released on the 9th of July. You can also read the full list of planned releases on our wiki.

Thank you for helping us make PHP better.

Madison PHP Conference 2015

Join us on Saturday, November 14th, 2015 for a one day, three track conference in Madison, Wisconsin, USA that focuses on PHP and related web technologies. This event is organized by Madison PHP and is designed to offer something to attendees at all skill levels. It will be a day of networking, learning, sharing, and great fun!

Our Call for Papers is open until August 4th, 2015:
http://cfp.madisonphpconference.com/

ZendCon 2015

Announcing ZendCon 2015, the global PHP conference, happening at the exciting Hard Rock Hotel & Casino in Las Vegas, Nevada. It will start with a full day of tutorials on October 19th and then continue with inspirational keynotes and breakout sessions through the 22nd.

The conference will feature many of the top developers and speakers in the PHP space to deliver dedicated tracks centered around Zend Framework, Symfony, Laravel, WordPress, Joomla!, Drupal, and Magento. We will also host additional tracks for PHP best practices, PHP architecture, IBM i, and PHP 7.

We look forward to seeing you in Las Vegas in October. http://www.zendcon.com/

JVN: Retrospect Backup Client が弱いパスワードハッシュを使用する問題

Retrospect Backup Client はネットワーク経由でバックアップを行うためのソフトウェアです。このソフトウェアは、パスワードをハッシュ化された形式で保存しますが、ハッシュの衝突が起こりやすい弱い形式を使用しています。そのため攻撃者は、ハッシュ値の衝突を悪用し、攻撃対象であるクライアントのバックアップファイルにアクセスすることが可能です。続きを読む

PHP 5.4.42 Released

The PHP development team announces the immediate availability of PHP 5.4.42. Six security-related issues in PHP were fixed in this release, as well as several security issues in bundled sqlite library (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416). All PHP 5.4 users are encouraged to upgrade to this version.

For source downloads of PHP 5.4.42 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 7.0.0 Alpha 1 Released

The PHP development team announces the immediate availability of PHP 7.0.0 Alpha 1. This release marks the beginning of the PHP 7 major series. All users of PHP are encouraged to test this version carefully, and report any bugs and incompatibilities in the bug tracking system.

THIS IS A DEVELOPMENT PREVIEW - DO NOT USE IT IN PRODUCTION!

PHP 7.0.0 Alpha 1 comes with new version of the Zend Engine with features such as (incomplete list):

  • Improved performance: PHP 7 is up to twice as fast as PHP 5.6
  • Consistent 64-bit support
  • Many fatal errors are now Exceptions
  • Removal of old and unsupported SAPIs and extensions
  • The null coalescing operator (??)
  • Combined comparison Operator (<=>)
  • Return Type Declarations
  • Scalar Type Declarations
  • Anonymous Classes

For more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.

For source downloads of PHP 7.0.0 Alpha 1 please visit the download page, Windows sources and binaries can be found on windows.php.net/qa/.

The second alpha will be released on the 25th of June. You can also read the full list of planned releases on our wiki.

Thank you for helping us make PHP better.

PHP 5.6.10 is available

The PHP development team announces the immediate availability of PHP 5.6.10. Several bugs have been fixed as well as several security issues into some bundled libraries (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326). All PHP 5.6 users are encouraged to upgrade to this version.

For source downloads of PHP 5.6.10 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 5.5.26 is available

The PHP development team announces the immediate availability of PHP 5.5.26. Several bugs have been fixed as well as several security issues into some bundled libraries (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-2325 and CVE-2015-2326). All PHP 5.5 users are encouraged to upgrade to this version.

For source downloads of PHP 5.5.26 please visit our downloads page, Windows binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Weekly Report: 「Interop Tokyo 2015」展示会場内セミナー開催

2015年4月30日号のひとくちメモで Interop Tokyo 2015 カンファレンスをご紹介しました。カンファレンスの翌日からは幕張メッセにおいて展示会が開催されます。この展示会においてもセミナーが企画されています。6月11日(木) には、JPCERT/CC も講演します。こちらもお楽しみください。続きを読む

PHP Barcelona Conference 2015

The PHP Barcelona User Group is proud to announce that the PHP Barcelona Conference is back! This year we are preparing a bigger event in the heart of a glamorous city. 2 days, 30th - 31st October, one track with amazing and stunning talks.

We opened the call for papers that will end on the 30th September 2015 — 2015.phpconference.es/call-for-papers. So what are you waiting for, go, submit your paper! We offer attractive packages to speakers who want to enroll! Come and join us! :)

JVN: SSL/TLS の実装が輸出グレードの RSA 鍵を受け入れる問題 (FREAK 攻撃)

SSL/TLS の実装の中には、意図して設定しなくても輸出グレード (512 ビット以下) の RSA 鍵を受け入れるものが存在します。このようなソフトウエアに対して中間者攻撃 (man-in-the-middle attack) が行われると、暗号化に使われている鍵を解読され、SSL/TLS トラフィックの内容を復号される可能性があります。これは「FREAK 攻撃」とも呼ばれています。続きを読む