com web/php: 7.0.8 announce: ChangeLog-7.php archive/archive.xml archive/entries/2016-06-23-1.xml include/releases.inc include/version.inc
releases/7_0_8.php
| From: | Anatol Belski | Date: | Thu, 23 Jun 2016 09:57:42 +0000 |
| Subject: | com web/php: 7.0.8 announce: ChangeLog-7.php archive/archive.xml archive/entries/2016-06-23-1.xml include/releases.inc include/version.inc releases/7_0_8.php |
||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-24895@lists.php.net to get a copy of this message | ||
Commit: 00053c9d9a24bbae7cf13a0e9d9cc414ce9dc5bb
Author: Anatol Belski <ab@php.net> Thu, 23 Jun 2016 11:57:42 +0200
Parents: b04b8e899adffc248f5dacd7b5e5b6a015147e85
Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=00053c9d9a24bbae7cf13a0e9d9cc414ce9dc5bb
Log:
7.0.8 announce
Changed paths:
M ChangeLog-7.php
M archive/archive.xml
A archive/entries/2016-06-23-1.xml
M include/releases.inc
M include/version.inc
A releases/7_0_8.php
diff --git a/ChangeLog-7.php b/ChangeLog-7.php index 7a0e10c..645704d 100644 --- a/ChangeLog-7.php +++ b/ChangeLog-7.php @@ -7,6 +7,91 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change <h1>PHP 7 ChangeLog</h1> +<section class="version" id="7.0.8"><!-- {{{ 7.0.8 --> +<h3>Version 7.0.8</h3> +<b><?php release_date('23-Jun-2016'); ?></b> +<ul><li>Core: +<ul> + <li><?php bugfix(72218); ?> (If host name cannot be resolved then PHP 7 crashes).</li> + <li><?php bugfix(72221); ?> (segfault, past-the-end access).</li> + <li><?php bugfix(72268); ?> (Integer Overflow in nl2br()).</li> + <li><?php bugfix(72275); ?> (Integer Overflow in json_encode()/json_decode()/ json_utf8_to_utf16()).</li> + <li><?php bugfix(72400); ?> (Integer Overflow in addcslashes/addslashes).</li> + <li><?php bugfix(72403); ?> (Integer Overflow in Length of String-typed ZVAL).</li> +</ul></li> +<li>FPM: +<ul> + <li><?php bugfix(72308); ?> (fastcgi_finish_request and logging environment variables).</li> +</ul></li> +<li>GD: +<ul> + <li><?php bugfix(72298); ?> (pass2_no_dither out-of-bounds access).</li> + <li><?php bugfix(72337); ?> (invalid dimensions can lead to crash) (Pierre)</li> + <li><?php bugfix(72339); ?> (Integer Overflow in _gd2GetHeader() resulting in heap overflow).</li> + <li><?php bugfix(72407); ?> (NULL Pointer Dereference at _gdScaleVert).</li> +</ul></li> +<li>Intl: +<ul> + <li><?php bugfix(64524); ?> (Add intl.use_exceptions to php.ini-*).</li> +</ul></li> +<li>mbstring: +<ul> + <li><?php bugfix(72402); ?> (_php_mb_regex_ereg_replace_exec - double free).</li> +</ul></li> +<li>mcrypt: +<ul> + <li><?php bugfix(72455); ?> (Heap Overflow due to integer overflows).</li> +</ul></li> +<li>PCRE: +<ul> + <li><?php bugfix(72143); ?> (preg_replace uses int instead of size_t).</li> +</ul></li> +<li>PDO_pgsql: +<ul> + <li><?php bugfix(71573); ?> (Segfault (core dumped) if paramno beyond bound).</li> + <li><?php bugfix(72294); ?> (Segmentation fault/invalid pointer in connection with pgsql_stmt_dtor).</li> +</ul></li> +<li>Phpdbg: +<ul> + <li><?php bugfix(72284); ?> (phpdbg fatal errors with coverage).</li> +</ul></li> +<li>Postgres: +<ul> + <li><?php bugfix(72195); ?> (pg_pconnect/pg_connect cause use-after-free).</li> + <li><?php bugfix(72197); ?> (pg_lo_create arbitrary read).</li> +</ul></li> +<li>SPL: +<ul> + <li><?php bugfix(72262); ?> (int/size_t confusion in SplFileObject::fread).</li> + <li><?php bugfix(72433); ?> (Use After Free Vulnerability in PHP's GC algorithm and unserialize).</li> +</ul></li> +<li>Standard: +<ul> + <li><?php bugfix(72017); ?> (range() with float step produces unexpected result).</li> + <li><?php bugfix(72193); ?> (dns_get_record returns array containing elements of type 'unknown').</li> + <li><?php bugfix(72229); ?> (Wrong reference when serialize/unserialize an object).</li> + <li><?php bugfix(72300); ?> (ignore_user_abort(false) has no effect).</li> +</ul></li> +<li>XML: +<ul> + <li><?php bugfix(72206); ?> (xml_parser_create/xml_parser_free leaks mem).</li> +</ul></li> +<li>XMLRPC: +<ul> + <li><?php bugfix(72155); ?> (use-after-free caused by get_zval_xmlrpc_type).</li> +</ul></li> +<li>WDDX: +<ul> + <li><?php bugfix(72340); ?> (Double Free Courruption in wddx_deserialize).</li> +</ul></li> +<li>Zip: +<ul> + <li><?php bugfix(72258); ?> (ZipArchive converts filenames to unrecoverable form).</li> + <li><?php bugfix(72434); ?> (ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize).</li> +</ul></li> +</ul> +<!-- }}} --></section> + <section class="version" id="7.0.7"><!-- {{{ 7.0.7 --> <h3>Version 7.0.7</h3> <b><?php release_date('26-May-2016'); ?></b> diff --git a/archive/archive.xml b/archive/archive.xml index 3b4a875..44ef103 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2016-06-23-1.xml"/> <xi:include href="entries/2016-06-15-1.xml"/> <xi:include href="entries/2016-06-09-1.xml"/> <xi:include href="entries/2016-06-06-1.xml"/> diff --git a/archive/entries/2016-06-23-1.xml b/archive/entries/2016-06-23-1.xml new file mode 100644 index 0000000..ad24a4f --- /dev/null +++ b/archive/entries/2016-06-23-1.xml @@ -0,0 +1,25 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 7.0.8 Released</title> + <id>http://php.net/archive/2016.php#id2016-06-23-1</id> + <published>2016-06-23T13:00:00+01:00</published> + <updated>2016-06-23T13:00:00+01:00</updated> + <category term="releases" label="New PHP release"/> + <category term="frontpage" label="PHP.net frontpage news"/> + <link href="http://php.net/index.php#id2016-06-23-1" rel="alternate" type="text/html"/> + <link href="http://php.net/archive/2016.php#id2016-06-23-1" rel="via" type="text/html"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP development team announces the immediate availability of PHP + 7.0.8. This is a security release. Several security bugs were fixed in + this release. + + All PHP 7.0 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.0.8 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.0.8">ChangeLog</a>. + </p> + </div> + </content> +</entry> diff --git a/include/releases.inc b/include/releases.inc index fdb34b1..2836be2 100644 --- a/include/releases.inc +++ b/include/releases.inc @@ -2,6 +2,42 @@ $OLDRELEASES = array ( 7 => array ( + '7.0.7' => + array ( + 'announcement' => + array ( + 'English' => '/releases/7_0_7.php', + ), + 'source' => + array ( + 0 => + array ( + 'filename' => 'php-7.0.7.tar.bz2', + 'name' => 'PHP 7.0.7 (tar.bz2)', + 'md5' => 'cc231de15146ca14a69610f695995ab8', + 'sha256' => '474f2925c4782b94016e3afbb17b14ff9cc6f4fdb6f6e231b36a378bb18a3d1a', + 'date' => '26 May 2016', + ), + 1 => + array ( + 'filename' => 'php-7.0.7.tar.gz', + 'name' => 'PHP 7.0.7 (tar.gz)', + 'md5' => '197ec66d134da8968ddd0b89f1cfac2a', + 'sha256' => '66282ff4a9f88fe9607d9574e15bf335885b964245591a1740adb3f79c514a67', + 'date' => '26 May 2016', + ), + 2 => + array ( + 'filename' => 'php-7.0.7.tar.xz', + 'name' => 'PHP 7.0.7 (tar.xz)', + 'md5' => '75f8d1693a470cefe2a50abd283eb291', + 'sha256' => '9cc64a7459242c79c10e79d74feaf5bae3541f604966ceb600c3d2e8f5fe4794', + 'date' => '26 May 2016', + ), + ), + 'date' => '26 May 2016', + 'museum' => false, + ), '7.0.6' => array ( 'announcement' => diff --git a/include/version.inc b/include/version.inc index 5f3efb2..aa31e92 100644 --- a/include/version.inc +++ b/include/version.inc @@ -19,20 +19,20 @@ */ /* PHP 7.0 Release */ -$PHP_7_0_RC = "7.0.8RC1"; // Current RC version (e.g., '5.6.7RC1') or false +$PHP_7_0_RC = false; // Current RC version (e.g., '5.6.7RC1') or false $PHP_7_0_RC_DATE = '09 Jun 2016'; -$PHP_7_0_VERSION = "7.0.7"; -$PHP_7_0_DATE = "26 May 2016"; +$PHP_7_0_VERSION = "7.0.8"; +$PHP_7_0_DATE = "23 Jun 2016"; $PHP_7_0_MD5 = array( - "tar.bz2" => "cc231de15146ca14a69610f695995ab8", - "tar.gz" => "197ec66d134da8968ddd0b89f1cfac2a", - "tar.xz" => "75f8d1693a470cefe2a50abd283eb291", + "tar.bz2" => "d4f67b081a3c1b0b35f729ef8131cdda", + "tar.gz" => "642d86f3269404abc1bbfd887b682ccf", + "tar.xz" => "c4438583c95d3ddf746929d7fcb61045", ); $PHP_7_0_SHA256 = array( - "tar.bz2" => "474f2925c4782b94016e3afbb17b14ff9cc6f4fdb6f6e231b36a378bb18a3d1a", - "tar.gz" => "66282ff4a9f88fe9607d9574e15bf335885b964245591a1740adb3f79c514a67", - "tar.xz" => "9cc64a7459242c79c10e79d74feaf5bae3541f604966ceb600c3d2e8f5fe4794", + "tar.bz2" => "66dc7ba388490e07b1313fe3a06b1fa822e1310585fe29f4909995f131e27c8d", + "tar.gz" => "1f024fa6d87594b99fa312e3185c357dcffa42e07d21c726f41d1fa6f773720b", + "tar.xz" => "0a2142c458b0846f556b16da1c927d74c101aa951bb840549abe5c58584fb394", ); /* PHP 5.6 Release */ diff --git a/releases/7_0_8.php b/releases/7_0_8.php new file mode 100644 index 0000000..d52d76f --- /dev/null +++ b/releases/7_0_8.php @@ -0,0 +1,22 @@ +<?php +// $Id$ +$_SERVER['BASE_PAGE'] = 'releases/7_0_8.php'; +include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; +site_header("PHP 7.0.8 Release Announcement"); +?> + + <h1>PHP 7.0.8 Release Announcement</h1> + + <p>The PHP development team announces the immediate availability of PHP + 7.0.8. This is a security release. Several security bugs were fixed in + this release. + + All PHP 7.0 users are encouraged to upgrade to this version. + </p> + + <p>For source downloads of PHP 7.0.8 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.0.8">ChangeLog</a>. + </p> + +<?php site_footer(); ?>
diff --git a/ChangeLog-7.php b/ChangeLog-7.php index 7a0e10c..645704d 100644 --- a/ChangeLog-7.php +++ b/ChangeLog-7.php @@ -7,6 +7,91 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change <h1>PHP 7 ChangeLog</h1> +<section class="version" id="7.0.8"><!-- {{{ 7.0.8 --> +<h3>Version 7.0.8</h3> +<b><?php release_date('23-Jun-2016'); ?></b> +<ul><li>Core: +<ul> + <li><?php bugfix(72218); ?> (If host name cannot be resolved then PHP 7 crashes).</li> + <li><?php bugfix(72221); ?> (segfault, past-the-end access).</li> + <li><?php bugfix(72268); ?> (Integer Overflow in nl2br()).</li> + <li><?php bugfix(72275); ?> (Integer Overflow in json_encode()/json_decode()/ json_utf8_to_utf16()).</li> + <li><?php bugfix(72400); ?> (Integer Overflow in addcslashes/addslashes).</li> + <li><?php bugfix(72403); ?> (Integer Overflow in Length of String-typed ZVAL).</li> +</ul></li> +<li>FPM: +<ul> + <li><?php bugfix(72308); ?> (fastcgi_finish_request and logging environment variables).</li> +</ul></li> +<li>GD: +<ul> + <li><?php bugfix(72298); ?> (pass2_no_dither out-of-bounds access).</li> + <li><?php bugfix(72337); ?> (invalid dimensions can lead to crash) (Pierre)</li> + <li><?php bugfix(72339); ?> (Integer Overflow in _gd2GetHeader() resulting in heap overflow).</li> + <li><?php bugfix(72407); ?> (NULL Pointer Dereference at _gdScaleVert).</li> +</ul></li> +<li>Intl: +<ul> + <li><?php bugfix(64524); ?> (Add intl.use_exceptions to php.ini-*).</li> +</ul></li> +<li>mbstring: +<ul> + <li><?php bugfix(72402); ?> (_php_mb_regex_ereg_replace_exec - double free).</li> +</ul></li> +<li>mcrypt: +<ul> + <li><?php bugfix(72455); ?> (Heap Overflow due to integer overflows).</li> +</ul></li> +<li>PCRE: +<ul> + <li><?php bugfix(72143); ?> (preg_replace uses int instead of size_t).</li> +</ul></li> +<li>PDO_pgsql: +<ul> + <li><?php bugfix(71573); ?> (Segfault (core dumped) if paramno beyond bound).</li> + <li><?php bugfix(72294); ?> (Segmentation fault/invalid pointer in connection with pgsql_stmt_dtor).</li> +</ul></li> +<li>Phpdbg: +<ul> + <li><?php bugfix(72284); ?> (phpdbg fatal errors with coverage).</li> +</ul></li> +<li>Postgres: +<ul> + <li><?php bugfix(72195); ?> (pg_pconnect/pg_connect cause use-after-free).</li> + <li><?php bugfix(72197); ?> (pg_lo_create arbitrary read).</li> +</ul></li> +<li>SPL: +<ul> + <li><?php bugfix(72262); ?> (int/size_t confusion in SplFileObject::fread).</li> + <li><?php bugfix(72433); ?> (Use After Free Vulnerability in PHP's GC algorithm and unserialize).</li> +</ul></li> +<li>Standard: +<ul> + <li><?php bugfix(72017); ?> (range() with float step produces unexpected result).</li> + <li><?php bugfix(72193); ?> (dns_get_record returns array containing elements of type 'unknown').</li> + <li><?php bugfix(72229); ?> (Wrong reference when serialize/unserialize an object).</li> + <li><?php bugfix(72300); ?> (ignore_user_abort(false) has no effect).</li> +</ul></li> +<li>XML: +<ul> + <li><?php bugfix(72206); ?> (xml_parser_create/xml_parser_free leaks mem).</li> +</ul></li> +<li>XMLRPC: +<ul> + <li><?php bugfix(72155); ?> (use-after-free caused by get_zval_xmlrpc_type).</li> +</ul></li> +<li>WDDX: +<ul> + <li><?php bugfix(72340); ?> (Double Free Courruption in wddx_deserialize).</li> +</ul></li> +<li>Zip: +<ul> + <li><?php bugfix(72258); ?> (ZipArchive converts filenames to unrecoverable form).</li> + <li><?php bugfix(72434); ?> (ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize).</li> +</ul></li> +</ul> +<!-- }}} --></section> + <section class="version" id="7.0.7"><!-- {{{ 7.0.7 --> <h3>Version 7.0.7</h3> <b><?php release_date('26-May-2016'); ?></b> diff --git a/archive/archive.xml b/archive/archive.xml index 3b4a875..44ef103 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2016-06-23-1.xml"/> <xi:include href="entries/2016-06-15-1.xml"/> <xi:include href="entries/2016-06-09-1.xml"/> <xi:include href="entries/2016-06-06-1.xml"/> diff --git a/archive/entries/2016-06-23-1.xml b/archive/entries/2016-06-23-1.xml new file mode 100644 index 0000000..ad24a4f --- /dev/null +++ b/archive/entries/2016-06-23-1.xml @@ -0,0 +1,25 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 7.0.8 Released</title> + <id>http://php.net/archive/2016.php#id2016-06-23-1</id> + <published>2016-06-23T13:00:00+01:00</published> + <updated>2016-06-23T13:00:00+01:00</updated> + <category term="releases" label="New PHP release"/> + <category term="frontpage" label="PHP.net frontpage news"/> + <link href="http://php.net/index.php#id2016-06-23-1" rel="alternate" type="text/html"/> + <link href="http://php.net/archive/2016.php#id2016-06-23-1" rel="via" type="text/html"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP development team announces the immediate availability of PHP + 7.0.8. This is a security release. Several security bugs were fixed in + this release. + + All PHP 7.0 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.0.8 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.0.8">ChangeLog</a>. + </p> + </div> + </content> +</entry> diff --git a/include/releases.inc b/include/releases.inc index fdb34b1..2836be2 100644 --- a/include/releases.inc +++ b/include/releases.inc @@ -2,6 +2,42 @@ $OLDRELEASES = array ( 7 => array ( + '7.0.7' => + array ( + 'announcement' => + array ( + 'English' => '/releases/7_0_7.php', + ), + 'source' => + array ( + 0 => + array ( + 'filename' => 'php-7.0.7.tar.bz2', + 'name' => 'PHP 7.0.7 (tar.bz2)', + 'md5' => 'cc231de15146ca14a69610f695995ab8', + 'sha256' => '474f2925c4782b94016e3afbb17b14ff9cc6f4fdb6f6e231b36a378bb18a3d1a', + 'date' => '26 May 2016', + ), + 1 => + array ( + 'filename' => 'php-7.0.7.tar.gz', + 'name' => 'PHP 7.0.7 (tar.gz)', + 'md5' => '197ec66d134da8968ddd0b89f1cfac2a', + 'sha256' => '66282ff4a9f88fe9607d9574e15bf335885b964245591a1740adb3f79c514a67', + 'date' => '26 May 2016', + ), + 2 => + array ( + 'filename' => 'php-7.0.7.tar.xz', + 'name' => 'PHP 7.0.7 (tar.xz)', + 'md5' => '75f8d1693a470cefe2a50abd283eb291', + 'sha256' => '9cc64a7459242c79c10e79d74feaf5bae3541f604966ceb600c3d2e8f5fe4794', + 'date' => '26 May 2016', + ), + ), + 'date' => '26 May 2016', + 'museum' => false, + ), '7.0.6' => array ( 'announcement' => diff --git a/include/version.inc b/include/version.inc index 5f3efb2..aa31e92 100644 --- a/include/version.inc +++ b/include/version.inc @@ -19,20 +19,20 @@ */ /* PHP 7.0 Release */ -$PHP_7_0_RC = "7.0.8RC1"; // Current RC version (e.g., '5.6.7RC1') or false +$PHP_7_0_RC = false; // Current RC version (e.g., '5.6.7RC1') or false $PHP_7_0_RC_DATE = '09 Jun 2016'; -$PHP_7_0_VERSION = "7.0.7"; -$PHP_7_0_DATE = "26 May 2016"; +$PHP_7_0_VERSION = "7.0.8"; +$PHP_7_0_DATE = "23 Jun 2016"; $PHP_7_0_MD5 = array( - "tar.bz2" => "cc231de15146ca14a69610f695995ab8", - "tar.gz" => "197ec66d134da8968ddd0b89f1cfac2a", - "tar.xz" => "75f8d1693a470cefe2a50abd283eb291", + "tar.bz2" => "d4f67b081a3c1b0b35f729ef8131cdda", + "tar.gz" => "642d86f3269404abc1bbfd887b682ccf", + "tar.xz" => "c4438583c95d3ddf746929d7fcb61045", ); $PHP_7_0_SHA256 = array( - "tar.bz2" => "474f2925c4782b94016e3afbb17b14ff9cc6f4fdb6f6e231b36a378bb18a3d1a", - "tar.gz" => "66282ff4a9f88fe9607d9574e15bf335885b964245591a1740adb3f79c514a67", - "tar.xz" => "9cc64a7459242c79c10e79d74feaf5bae3541f604966ceb600c3d2e8f5fe4794", + "tar.bz2" => "66dc7ba388490e07b1313fe3a06b1fa822e1310585fe29f4909995f131e27c8d", + "tar.gz" => "1f024fa6d87594b99fa312e3185c357dcffa42e07d21c726f41d1fa6f773720b", + "tar.xz" => "0a2142c458b0846f556b16da1c927d74c101aa951bb840549abe5c58584fb394", ); /* PHP 5.6 Release */ diff --git a/releases/7_0_8.php b/releases/7_0_8.php new file mode 100644 index 0000000..d52d76f --- /dev/null +++ b/releases/7_0_8.php @@ -0,0 +1,22 @@ +<?php +// $Id$ +$_SERVER['BASE_PAGE'] = 'releases/7_0_8.php'; +include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; +site_header("PHP 7.0.8 Release Announcement"); +?> + + <h1>PHP 7.0.8 Release Announcement</h1> + + <p>The PHP development team announces the immediate availability of PHP + 7.0.8. This is a security release. Several security bugs were fixed in + this release. + + All PHP 7.0 users are encouraged to upgrade to this version. + </p> + + <p>For source downloads of PHP 7.0.8 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.0.8">ChangeLog</a>. + </p> + +<?php site_footer(); ?>