Select your language

16 Sep 2024

PHP 8.3.11 & 8.2.23

PHP 8.3.11 - https://www.php.net/ChangeLog-8.php#PHP_8_3

PHP 8.2.23 - https://www.php.net/ChangeLog-8.php#PHP_8_2

KNOWN ISSUE: While running PHP 8.2.23, Memcached shows not started on localhost. This is a known issue but does affect performance.


14 Sep 2024

Composer 2.7.9

Changelog

  • Fixed Docker detection breaking on constrained environments (#12095)
  • Fixed upstream issue in bash completion script, it is recommended to update it using the completion command (#12015)
13 Sep 2024

Bruno 1.28.0 released

Announcing Bruno IDE

This is a brand new module featuring Bruno IDE which is a postman replacement.

This requires the upcoming release of bearsampp to function

06 Sep 2024

Mailpit 1.20.4

Chore

  • Update Go modules
  • Update node modules
  • Upgrade vue-css-donut-chart & related charts

Fix

  • Relax URL detection in link check tool (#357)
06 Sep 2024

Mailpit 1.20.3

Chore

  • Update caniemail database
  • Update node dependencies
  • Update Go dependencies
  • Do not re-center selected messages in sidebar after every new message

Fix

  • Disable automatic HTML/Text character detection when charset is provided (#348)
29 Aug 2024

August Bearsampp Release

  • 🔄 added exec task to 'build.xml' to update product version using rced… by @N6REJ in #381
  • restores corrupted bearsampp.conf by @N6REJ in #382
  • Create quickpick-releases.json by @N6REJ in #387
    Bearsampp.ini rebuild function
    using clear temp files menu item now also clears logs.
    xlight as filezilla replacement
    Mailpit as Mailhog replacement
    Quickpick installation service
    Docblocks completed program wide.
    7z, bootstrap, & fontawesome updated to latest

See Upgrade Notes for upgrade instructions.

09 Aug 2024

GIt 2.46.0

Windows 8 EOL

Changes since Git for Windows v2.45.2 (June 3rd 2024)

Git for Windows for Windows v2.46 is the last version to support for Windows 7 and for Windows 8, see MSYS2's corresponding deprecation announcement (Git for Windows relies on MSYS2 for components such as Bash and Perl).

Please also note that the 32-bit variant of Git for Windows is deprecated; Its last official release is planned for 2025.

New Features

Bug Fixes

  • Git Bash's ls command can now be used in OneDrive-managed folders without having to hydrate all the files.
  • Git LFS v3.5.x and newer no longer support Windows 7. Instead of a helpful error message, it now simply crashes on that Windows version, leaving the user with the error message "panic before malloc heap initialized". This has been addressed: In addition to the unhelpful error message, Git is now saying what is going on and how to get out of the situation.
  • As of v2.45.0, the manual pages of git clone and git init were broken, which has been fixed.
07 Aug 2024

Mysql 8.4.2 & 9.0.1

Introduces B/C changes to MySql. Especially my.ini

This document contains release notes for the changes in MySQL 9.0. For information about changes in a different version of MySQL, see the release notes for that version.

For additional MySQL 9.0 documentation, see the MySQL 9.0 Reference Manual, which includes an overview of features added in MySQL 9.0 (What Is New in MySQL 9.0), and discussion of upgrade issues that you may encounter while upgrading.

MySQL platform support evolves over time; please refer to https://www.mysql.com/support/supportedplatforms/database.html for the latest updates.

Updates to these notes occur as new product features are added, so that everybody can follow the development process. If a recent version is listed here that you cannot find on the download page (https://dev.mysql.com/downloads/), the version has not yet been released.

The documentation included in source and binary distributions may not be fully up to date with respect to release note entries because integration of the documentation occurs at release build time. For the most up-to-date release notes, please refer to the online documentation instead.

For legal information, see the Legal Notices.

For help with using MySQL, please visit the MySQL Forums, where you can discuss your issues with other MySQL users.

Document generated on: 2024-08-06 (revision: 28819)

23 Jul 2024

Apache 2.4.62

Security release!

important: Apache HTTP Server: source code disclosure with handlers configured via AddType (CVE-2024-40725)

A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted.

Users are recommended to upgrade to version 2.4.62, which fixes this issue.

Reported to security team 2024-07-09
Update 2.4.62 released 2024-07-17
Affects 2.4.60 through 2.4.61

important: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (CVE-2024-40898)

SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests.

Users are recommended to upgrade to version 2.4.62 which fixes this issue.

Acknowledgements:

  • finder: Smi1e (DBAPPSecurity Ltd.)
  • finder: xiaojunjie (DBAPPSecurity Ltd.)
Reported to security team 2024-07-12
Update 2.4.62 released 2024-07-17
Affects 2.4.0 through 2.4.61

SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (cve.mitre.org) SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue. Credits: Smi1e (DBAPPSecurity Ltd.)

SECURITY: CVE-2024-40725: Apache HTTP Server: source code disclosure with handlers configured via AddType (cve.mitre.org) A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.62, which fixes this issue.

mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO, SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also allowing for "unix:" sockets with BalancerMember(s). PR 69168. [Yann Ylavic]

mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs. PR 69160 [Yann Ylavic]

mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2. [Joe Orton]

mod_ssl: Add support for loading certs/keys from pkcs11: URIs via OpenSSL 3.x providers. [Ingo Franzki ifranzki linux.ibm.com]

mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL >= 3.0. [Ruediger Pluem, Yann Ylavic]

mpm_worker: Fix possible warning (AH00045) about children processes not terminating timely. [Yann Ylavic]

Our Supporters

Sorry, this website uses features that your browser doesn't support. Upgrade to a newer version of Firefox, Chrome, Safari, or Edge and you'll be all set.