com web/php: 5.5.21 release: ChangeLog-5.php archive/archive.xml archive/entries/2015-01-22-1.xml include/releases.inc include/version.inc
releases/5_5_21.php

Commit: 11cdc7901eae8effc9920b3a1e3a8f84bdde302f Author: Julien Pauli <jpauli@php.net> Thu, 22 Jan 2015 17:37:08 +0100 Parents: 284b4803427314a8e6c0633601239642832b1879 Branches: master Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=11cdc7901eae8effc9920b3a1e3a8f84bdde302f Log: 5.5.21 release Changed paths: M ChangeLog-5.php M archive/archive.xml A archive/entries/2015-01-22-1.xml M include/releases.inc M include/version.inc A releases/5_5_21.php

diff --git a/ChangeLog-5.php b/ChangeLog-5.php index 39422b2..e9f52f5 100644 --- a/ChangeLog-5.php +++ b/ChangeLog-5.php @@ -8,6 +8,107 @@ site_header("PHP 5 ChangeLog", array("current" => "docs", "css" => array("change <h1>PHP 5 ChangeLog</h1> +<section class="version" id="5.5.21"><!-- {{{ 5.5.21 --> +<h3>Version 5.5.21</h3> +<?php release_date('22-Jan-2015'); ?> +<ul><li>Core: +<ul> + <li>Upgraded crypt_blowfish to version 1.3</li> + <li><?php bugfix(60704); ?> (unlink() bug with some files path).</li> + <li><?php bugfix(65419); ?> (Inside trait, self::class != __CLASS__).</li> + <li><?php bugfix(65576); ?> (Constructor from trait conflicts with inherited constructor).</li> + <li><?php bugfix(55541); ?> (errors spawn MessageBox, which blocks test automation).</li> + <li><?php bugfix(68297); ?> (Application Popup provides too few information).</li> + <li><?php bugfix(65769); ?> (localeconv() broken in TS builds).</li> + <li><?php bugfix(65230); ?> (setting locale randomly broken).</li> + <li><?php bugfix(66764); ?> (configure doesn't define EXPANDED_DATADIR / PHP_DATADIR correctly).</li> + <li><?php bugfix(68583); ?> (Crash in timeout thread).</li> + <li><?php bugfix(68676); ?> (Explicit Double Free).</li> + <li><?php bugfix(68710); ?> (Use After Free Vulnerability in PHP's unserialize()).(CVE-2015-0231).</li> +</ul></li> +<li>CGI: +<ul> + <li><?php bugfix(68618); ?> (out of bounds read crashes php-cgi).(CVE-2014-9427).</li> +</ul></li> +<li>CLI server: +<ul> + <li><?php bugfix(68745); ?> (Invalid HTTP requests make web server segfault).</li> +</ul></li> +<li>cURL: +<ul> + <li><?php bugfix(67643); ?> (curl_multi_getcontent returns '' when CURLOPT_RETURNTRANSFER isn't set).</li> +</ul></li> +<li>EXIF: +<ul> + <li><?php bugfix(68799); ?> (Free called on unitialized pointer). (CVE-2015-0232)</li> +</ul></li> +<li>Fileinfo: +<ul> + <li><?php bugfix(68671); ?> (incorrect expression in libmagic).</li> + <li><?php bugfix(68735); ?> (fileinfo out-of-bounds memory access).</li> + <li>Removed readelf.c and related code from libmagic sources</li> +</ul></li> +<li>FPM: +<ul> + <li><?php bugfix(68751); ?> (listen.allowed_clients is broken).</li> +</ul></li> +<li>GD: +<ul> + <li><?php bugfix(68601); ?> (buffer read overflow in gd_gif_in.c).</li> +</ul></li> +<li>Mbstring: +<ul> + <li><?php bugfix(68504); ?> (--with-libmbfl configure option not present on Windows).</li> +</ul></li> +<li>Mcrypt: +<ul> + <li>Fixed possible read after end of buffer and use after free.</li> +</ul></li> +<li>Opcache: +<ul> + <li><?php bugfix(67111); ?> (Memory leak when using "continue 2" inside two foreach loops).</li> +</ul></li> +<li>Pcntl: +<ul> + <li><?php bugfix(60509); ?> (pcntl_signal doesn't decrease ref-count of old handler + when setting SIG_DFL).</li> +</ul></li> +<li>PCRE: +<ul> + <li><?php bugfix(66679); ?> (Alignment Bug in PCRE 8.34 upstream).</li> +</ul></li> +<li>pgsql: +<ul> + <li><?php bugfix(68697); ?> (lo_export return -1 on failure).</li> +</ul></li> +<li>PDO: +<ul> + <li><?php bugfix(68371); ?> (PDO#getAttribute() cannot be called with platform-specific + attribute names).</li> +</ul></li> +<li>PDO_mysql: +<ul> + <li><?php bugfix(68424); ?> (Add new PDO mysql connection attr to control multi + statements option).</li> +</ul></li> +<li>SPL: +<ul> + <li><?php bugfix(66405); ?> (RecursiveDirectoryIterator::CURRENT_AS_PATHNAME + breaks the RecursiveIterator).</li> + <li><?php bugfix(65213); ?> (cannot cast SplFileInfo to boolean).</li> + <li><?php bugfix(68479); ?> (Added escape parameter to SplFileObject::fputcsv).</li> +</ul></li> +<li>SQLite: +<ul> + <li><?php bugfix(68120); ?> (Update bundled libsqlite to 3.8.7.2).</li> +</ul></li> +<li>Streams: +<ul> + <li><?php bugfix(68532); ?> (convert.base64-encode omits padding bytes).</li> +</ul></li> +</ul> +<!-- }}} --></section> + <section class="version" id="5.6.4"><!-- {{{ 5.6.4 --> <h3>Version 5.6.4</h3> <?php release_date('18-Dec-2014'); ?> diff --git a/archive/archive.xml b/archive/archive.xml index b436d52..104fbe9 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2015-01-22-1.xml"/> <xi:include href="entries/2015-01-16-1.xml"/> <xi:include href="entries/2015-01-10-1.xml"/> <xi:include href="entries/2015-01-06-1.xml"/> diff --git a/archive/entries/2015-01-22-1.xml b/archive/entries/2015-01-22-1.xml new file mode 100644 index 0000000..20dc333 --- /dev/null +++ b/archive/entries/2015-01-22-1.xml @@ -0,0 +1,25 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 5.5.21 is released</title> + <id>http://php.net/archive/2015.php#id2015-01-22-1</id> + <published>2015-01-22T16:04:04+00:00</published> + <updated>2015-01-22T16:04:04+00:00</updated> + <category term="frontpage" label="PHP.net frontpage news"/> + <category term="releases" label="New PHP release"/> + <link href="http://php.net/index.php#id2015-01-22-1" rel="alternate" type="text/html"/> + <link href="http://php.net/archive/2015.php#id2015-01-22-1" rel="via" type="text/html"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP development team announces the immediate availability of PHP + 5.5.21. This release fixes several bugs as well as CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232. + + All PHP 5.5 users are encouraged to upgrade to this version. + </p> + + <p>For source downloads of PHP 5.5.21 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-5.php#5.5.21">ChangeLog</a>. + </p> + </div> + </content> +</entry> diff --git a/include/releases.inc b/include/releases.inc index 6570602..d2665f0 100644 --- a/include/releases.inc +++ b/include/releases.inc @@ -2,6 +2,39 @@ $OLDRELEASES = array ( 5 => array ( + '5.5.20' => + array ( + 'announcement' => + array ( + 'English' => '/releases/5_5_20.php', + ), + 'source' => + array ( + 0 => + array ( + 'filename' => 'php-5.5.20.tar.bz2', + 'name' => 'PHP 5.5.20 (tar.bz2)', + 'md5' => '9dfc1d4d2b44fb7e2b4ee9651d032203', + 'date' => '18 Dec 2014', + ), + 1 => + array ( + 'filename' => 'php-5.5.20.tar.gz', + 'name' => 'PHP 5.5.20 (tar.gz)', + 'md5' => '63185e6efdd4e381c5f2ec1b1e3baf1f', + 'date' => '18 Dec 2014', + ), + 2 => + array ( + 'filename' => 'php-5.5.20.tar.xz', + 'name' => 'PHP 5.5.20 (tar.xz)', + 'md5' => '51377838dfee2d7bb4715674ac715394', + 'date' => '18 Dec 2014', + ), + ), + 'date' => '18 Dec 2014', + 'museum' => false, + ), '5.6.3' => array ( 'announcement' => diff --git a/include/version.inc b/include/version.inc index 76668d2..5c4d71e 100644 --- a/include/version.inc +++ b/include/version.inc @@ -27,15 +27,15 @@ $PHP_5_6_MD5 = array( "tar.xz" => "bf824c5e5c7f49ca5f7350d72cba4881", ); /* PHP 5.5 Release */ -$PHP_5_5_RC = '5.5.21RC1'; // Current RC version (e.g., '5.6.7RC1') or false +$PHP_5_5_RC = false; // Current RC version (e.g., '5.6.7RC1') or false $PHP_5_5_RC_DATE = '8 Jan 2015'; -$PHP_5_5_VERSION = "5.5.20"; -$PHP_5_5_DATE = "18 Dec 2014"; +$PHP_5_5_VERSION = "5.5.21"; +$PHP_5_5_DATE = "22 Jan 2015"; $PHP_5_5_MD5 = array( - "tar.bz2" => "9dfc1d4d2b44fb7e2b4ee9651d032203", - "tar.gz" => "63185e6efdd4e381c5f2ec1b1e3baf1f", - "tar.xz" => "51377838dfee2d7bb4715674ac715394", + "tar.bz2" => "8fe631ac52a3df9d6429faad81cf2562", + "tar.gz" => "63f8d358d651adef906f650175c796b1", + "tar.xz" => "79664ce44f7c93f355a25a3fe3dcc91b", ); /* PHP 5.4 Release */ $PHP_5_4_RC = false; // Current RC version (e.g., '5.6.7RC1') or false diff --git a/releases/5_5_21.php b/releases/5_5_21.php new file mode 100644 index 0000000..468e624 --- /dev/null +++ b/releases/5_5_21.php @@ -0,0 +1,21 @@ +<?php +// $Id$ +$_SERVER['BASE_PAGE'] = 'releases/5_5_21.php'; +include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; +site_header("PHP 5.5.21 Release Announcement"); +?> + +<h1>PHP 5.5.21 Release Announcement</h1> + + <p>The PHP development team announces the immediate availability of PHP + 5.5.21. This release fixes several bugs as well as CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232. + + All PHP 5.5 users are encouraged to upgrade to this version. + </p> + + <p>For source downloads of PHP 5.5.21 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-5.php#5.5.21">ChangeLog</a>. + </p> + +<?php site_footer(); ?>