com web/php: PHP 5.5.13 release: ChangeLog-5.php archive/archive.xml archive/entries/2014-05-29-4.xml include/releases.inc include/version.inc
releases/5_5_13.php

Commit: ba8fe364f4bfe4e2978458aa1d3e51b6d9bc1247 Author: Julien Pauli <jpauli@php.net> Thu, 29 May 2014 11:30:06 +0200 Parents: 448d8853ec4a9c22dab346b2e2e8d56a1064bce3 Branches: master Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=ba8fe364f4bfe4e2978458aa1d3e51b6d9bc1247 Log: PHP 5.5.13 release Changed paths: M ChangeLog-5.php M archive/archive.xml A archive/entries/2014-05-29-4.xml M include/releases.inc M include/version.inc A releases/5_5_13.php Diff: diff --git a/ChangeLog-5.php b/ChangeLog-5.php index 70cc0cb..10455e9 100644 --- a/ChangeLog-5.php +++ b/ChangeLog-5.php @@ -16,6 +16,71 @@ function release_date($in) { ?> <h1>PHP 5 ChangeLog</h1> +<section class="version" id="5.5.13"><!-- {{{ 5.5.13 --> +<h3>Version 5.5.13</h3> +<?php release_date('29-May-2014'); ?> +<ul><li>CLI server: +<ul> + <li><?php bugfix(67079); ?> (Missing MIME types for XML/XSL files).</li> +</ul></li> +<ul><li>COM: +<ul> + <li><?php bugfix(66431); ?> (Special Character via COM Interface (CP_UTF8)).</li> +</ul></li> +<ul><li>Core: +<ul> + <li><?php bugfix(65701); ?> (copy() doesn't work when destination filename is created + by tempnam()).</li> + <li><?php bugfix(67072); ?> (Echoing unserialized "SplFileObject" crash).</li> + <li><?php bugfix(67245); ?> (usage of memcpy() with overlapping src and dst in + zend_exceptions.c).</li> + <li><?php bugfix(67247); ?> (spl_fixedarray_resize integer overflow).</li> + <li><?php bugfix(67249); ?> (printf out-of-bounds read).</li> + <li><?php bugfix(67250); ?> (iptcparse out-of-bounds read).</li> +</ul></li> +<li>cURL: +<ul> + <li><?php bugfix(64247); ?> (CURLOPT_INFILE doesn't allow reset).</li> +</ul></li> +<li>Date: +<ul> + <li><?php bugfix(67118); ?> (DateTime constructor crash with invalid data).</li> + <li><?php bugfix(67251); ?> (date_parse_from_format out-of-bounds read).</li> + <li><?php bugfix(67253); ?> (timelib_meridian_with_check out-of-bounds read).</li> +</ul></li> +<li>DOM: +<ul> + <li><?php bugfix(67081); ?> (DOMDocumentType->internalSubset returns entire DOCTYPE tag, + not only the subset).</li> +</ul></li> +<li>Fileinfo: +<ul> + <li><?php bugfix(66307); ?> (Fileinfo crashes with powerpoint files).</li> + <li><?php bugfix(67327); ?> (CDF infinite loop in nelements DoS) (CVE-2014-0238).</li> + <li><?php bugfix(67328); ?> (numerous file_printf calls resulting in + performance degradation) (CVE-2014-0237).</li> +</ul></li> +<li>FPM: +<ul> + <li><?php bugfix(66908); ?> (php-fpm reload leaks epoll_create() file descriptor).</li> +</ul></li> +<li>GD: +<ul> + <li><?php bugfix(67248); ?> (imageaffinematrixget missing check of parameters).</li> +</ul></li> +<li>PCRE: +<ul> + <li><?php bugfix(67248); ?> Ungreedy and min/max quantifier bug, applied patch + from the upstream.</li> +</ul></li> +<li>Phar: +<ul> + <li><?php bugfix(64498); ?> ($phar->buildFromDirectory can't compress file with an accent + in its name).</li> +</ul></li> +</ul> +<!-- }}} --></section> + <section class="version" id="5.5.12"><!-- {{{ 5.5.12 --> <h3>Version 5.5.12</h3> <?php release_date('1-May-2014'); ?> diff --git a/archive/archive.xml b/archive/archive.xml index 87c012d..acc8f6d 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2014-05-29-4.xml"/> <xi:include href="entries/2014-05-29-3.xml"/> <xi:include href="entries/2014-05-29-2.xml"/> <xi:include href="entries/2014-05-29-1.xml"/> diff --git a/archive/entries/2014-05-29-4.xml b/archive/entries/2014-05-29-4.xml new file mode 100644 index 0000000..4bafb74 --- /dev/null +++ b/archive/entries/2014-05-29-4.xml @@ -0,0 +1,25 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 5.5.13 is available</title> + <id>http://php.net/archive/2014.php#id2014-05-29-3</id> + <published>2014-05-29T09:18:44+00:00</published> + <updated>2014-05-29T09:18:44+00:00</updated> + <category term="frontpage" label="PHP.net frontpage news"/> + <category term="releases" label="New PHP release"/> + <link href="http://php.net/index.php#id2014-05-29-3" rel="alternate" type="text/html"/> + <link href="http://php.net/archive/2014.php#id2014-05-29-3" rel="via" type="text/html"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP Development Team announces the immediate availability of PHP 5.5.13. + This release fixes several bugs against PHP 5.5.12, and addresses several + CVEs in Fileinfo (CVE-2014-0238 and CVE-2014-0237).</p> + + <p>All PHP users are encouraged to upgrade to this new version.</p> + + <p>For source downloads of PHP 5.5.13, please visit our <a href="http://www.php.net/downloads.php">downloads page</a>. + Windows binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-5.php#5.5.13">ChangeLog</a>. + </p> + </div> + </content> +</entry> diff --git a/include/releases.inc b/include/releases.inc index 48fc17d..1854cd5 100644 --- a/include/releases.inc +++ b/include/releases.inc @@ -2,6 +2,32 @@ $OLDRELEASES = array ( 5 => array ( + '5.5.12' => + array ( + 'announcement' => + array ( + 'English' => '/releases/5_5_12.php', + ), + 'source' => + array ( + 0 => + array ( + 'filename' => 'php-5.5.12.tar.bz2', + 'name' => 'PHP 5.5.12 (tar.bz2)', + 'md5' => '943af92c2e67bba29429bdd9acf9cbd4', + 'date' => '30 Apr 2014', + ), + 1 => + array ( + 'filename' => 'php-5.5.12.tar.gz', + 'name' => 'PHP 5.5.12 (tar.gz)', + 'md5' => 'b6a6e9c72589c265aafb7b3353a34030', + 'date' => '30 Apr 2014', + ), + ), + 'date' => '30 Apr 2014', + 'museum' => false, + ), '5.5.11' => array ( 'announcement' => diff --git a/include/version.inc b/include/version.inc index 67a4aad..81d08ce 100644 --- a/include/version.inc +++ b/include/version.inc @@ -15,15 +15,15 @@ * ), * );6 Dec /* PHP 5.5 Release */ -$PHP_5_5_RC = '5.5.13RC1'; // Current RC version (e.g., '5.6.7RC1') or false +$PHP_5_5_RC = false; // Current RC version (e.g., '5.6.7RC1') or false $PHP_5_5_RC_DATE = '15 May 2014'; -$PHP_5_5_VERSION = "5.5.12"; -$PHP_5_5_DATE = "1 May 2014"; +$PHP_5_5_VERSION = "5.5.13"; +$PHP_5_5_DATE = "29 May 2014"; $PHP_5_5_MD5 = array( - "tar.bz2" => "943af92c2e67bba29429bdd9acf9cbd4", - "tar.gz" => "b6a6e9c72589c265aafb7b3353a34030", - "tar.xz" => "3fb091987063135fd86b3b5ba5010479", + "tar.bz2" => "e26e90af25ee6505dc18855e0180ffe9", + "tar.gz" => "32d0fc26fccdb249a918c0e01ffb7b82", + "tar.xz" => "57d5d9607511a5cb76e9af49dd5874e3", ); /* PHP 5.4 Release */ $PHP_5_4_RC = '5.4.29RC1'; // Current RC version (e.g., '5.6.7RC1') or false diff --git a/releases/5_5_13.php b/releases/5_5_13.php new file mode 100644 index 0000000..e16b02b --- /dev/null +++ b/releases/5_5_13.php @@ -0,0 +1,21 @@ +<?php +// $Id$ +$_SERVER['BASE_PAGE'] = 'releases/5_5_12.php'; +include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; +site_header("PHP 5.5.13 Release Announcement"); +?> + +<h1>PHP 5.5.13 Release Announcement</h1> + +<p>The PHP Development Team announces the immediate availability of PHP 5.5.13. +This release fixes several bugs against PHP 5.5.12, and addresses several +CVEs in Fileinfo (CVE-2014-0238 and CVE-2014-0237).</p> + +<p>All PHP users are encouraged to upgrade to this new version.</p> + +<p>For source downloads of PHP 5.5.13, please visit our <a href="http://www.php.net/downloads.php">downloads page</a>. +Windows binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. +The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-5.php#5.5.13">ChangeLog</a>. +</p> + +<?php site_footer(); ?>