com web/php: 7.0.21 announce: ChangeLog-7.php archive/archive.xml archive/entries/2017-07-06-1.xml include/releases.inc include/version.inc
releases/7_0_21.php
| From: | Anatol Belski | Date: | Thu, 06 Jul 2017 10:15:56 +0000 |
| Subject: | com web/php: 7.0.21 announce: ChangeLog-7.php archive/archive.xml archive/entries/2017-07-06-1.xml include/releases.inc include/version.inc releases/7_0_21.php |
||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-26136@lists.php.net to get a copy of this message | ||
Commit: 55189b6c6a3d4870da4cc0302ebc2a5c501b08dd
Author: Anatol Belski <ab@php.net> Thu, 6 Jul 2017 12:14:24 +0200
Parents: 13a6beab6d595b1ac0912208c84bd007712ac7f3
Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=55189b6c6a3d4870da4cc0302ebc2a5c501b08dd
Log:
7.0.21 announce
Changed paths:
M ChangeLog-7.php
M archive/archive.xml
A archive/entries/2017-07-06-1.xml
M include/releases.inc
M include/version.inc
A releases/7_0_21.php
diff --git a/ChangeLog-7.php b/ChangeLog-7.php index 4504efa..67a63ad 100644 --- a/ChangeLog-7.php +++ b/ChangeLog-7.php @@ -7,6 +7,89 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change <h1>PHP 7 ChangeLog</h1> +<section class="version" id="7.0.21"><!-- {{{ 7.0.21 --> +<h3>Version 7.0.21</h3> +<b><?php release_date('06-Jul-2017'); ?></b> +<ul><li>Core: +<ul> + <li><?php bugfix(74738); ?> (Multiple [PATH=] and [HOST=] sections not properly parsed).</li> + <li><?php bugfix(74658); ?> (Undefined constants in array properties result in broken properties).</li> + <li>Fixed misparsing of abstract unix domain socket names.</li> + <li><?php bugfix(74101); ?>, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in zval_get_type).</li> + <li><?php bugfix(74111); ?> (Heap buffer overread (READ: 1) finish_nested_data from unserialize).</li> + <li><?php bugfix(74603); ?> (PHP INI Parsing Stack Buffer Overflow Vulnerability).</li> + <li><?php bugfix(74819); ?> (wddx_deserialize() heap out-of-bound read via php_parse_date()).</li> +</ul></li> +<li>DOM: +<ul> + <li><?php bugfix(69373); ?> (References to deleted XPath query results).</li> +</ul></li> +<li>GD: +<ul> + <li><?php bugfix(74435); ?> (Buffer over-read into uninitialized memory).</li> +</ul></li> +<li>Intl: +<ul> + <li><?php bugfix(73473); ?> (Stack Buffer Overflow in msgfmt_parse_message).</li> + <li><?php bugfix(74705); ?> (Wrong reflection on Collator::getSortKey and collator_get_sort_key).</li> + <li><?php bugfix(73634); ?> (grapheme_strpos illegal memory access).</li> +</ul></li> +<li>Mbstring: +<ul> + <li>Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)</li> +</ul></li> +<li>OCI8: +<ul> + <li>Add TAF callback (PR #2459).</li> +</ul></li> +<li>Opcache: +<ul> + <li><?php bugfix(74663); ?> (Segfault with opcache.memory_protect and validate_timestamp).</li> +</ul></li> +<li>OpenSSL: +<ul> + <li><?php bugfix(74651); ?> (negative-size-param (-1) in memcpy in zif_openssl_seal()).</li> +</ul></li> +<li>PCRE: +<ul> + <li><?php bugfix(74087); ?> (Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)).</li> +</ul></li> +<li>PDO_OCI: +<ul> + <li>Support Instant Client 12.2 in --with-pdo-oci configure option.</li> +</ul></li> +<li>Reflection: +<ul> + <li><?php bugfix(74673); ?> (Segfault when cast Reflection object to string with undefined constant).</li> +</ul></li> +<li>SPL: +<ul> + <li><?php bugfix(74478); ?> (null coalescing operator failing with SplFixedArray).</li> +</ul></li> +<li>Standard: +<ul> + <li><?php bugfix(74708); ?> (Invalid Reflection signatures for random_bytes and random_int).</li> + <li><?php bugfix(73648); ?> (Heap buffer overflow in substr).</li> +</ul></li> +<li>FTP: +<ul> + <li><?php bugfix(74598); ?> (ftp:// wrapper ignores context arg).</li> +</ul></li> +<li>PHAR: +<ul> + <li><?php bugfix(74386); ?> (Phar::__construct reflection incorrect).</li> +</ul></li> +<li>SOAP: +<ul> + <li><?php bugfix(74679); ?> (Incorrect conversion array with WSDL_CACHE_MEMORY).</li> +</ul></li> +<li>Streams: +<ul> + <li><?php bugfix(74556); ?> (stream_socket_get_name() returns '\0').</li> +</ul></li> +</ul> +<!-- }}} --></section> + <section class="version" id="7.1.6"><!-- {{{ 7.1.6 --> <h3>Version 7.1.6</h3> <b><?php release_date('07-Jun-2017'); ?></b> diff --git a/archive/archive.xml b/archive/archive.xml index 996975a..b139926 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2017-07-06-1.xml"/> <xi:include href="entries/2017-06-23-1.xml"/> <xi:include href="entries/2017-06-22-1.xml"/> <xi:include href="entries/2017-06-17-1.xml"/> diff --git a/archive/entries/2017-07-06-1.xml b/archive/entries/2017-07-06-1.xml new file mode 100644 index 0000000..5172261 --- /dev/null +++ b/archive/entries/2017-07-06-1.xml @@ -0,0 +1,25 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 7.0.21 Released</title> + <id>http://php.net/archive/2017.php#id2017-07-06-1</id> + <published>2017-07-06T13:00:00+01:00</published> + <updated>2017-07-06T13:00:00+01:00</updated> + <category term="releases" label="New PHP release"/> + <category term="frontpage" label="PHP.net frontpage news"/> + <link href="http://php.net/index.php#id2017-07-06-1" rel="alternate" type="text/html"/> + <link href="http://php.net/archive/2017.php#id2017-07-06-1" rel="via" type="text/html"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP development team announces the immediate availability of PHP + 7.0.21. This is a security release. Several security bugs were fixed in + this release. + + All PHP 7.0 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.0.21 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.0.21">ChangeLog</a>. + </p> + </div> + </content> +</entry> diff --git a/include/releases.inc b/include/releases.inc index ac2985b..9199395 100644 --- a/include/releases.inc +++ b/include/releases.inc @@ -3,6 +3,39 @@ $OLDRELEASES = array ( 7 => array ( + '7.0.20' => + array ( + 'announcement' => + array ( + 'English' => '/releases/7_0_20.php', + ), + 'source' => + array ( + 0 => + array ( + 'filename' => 'php-7.0.20.tar.bz2', + 'name' => 'PHP 7.0.20 (tar.bz2)', + 'sha256' => 'cdfddfe01cc615218e333e34a1c761c9ef8fdf5199b27617264a02705eda7fc3', + 'date' => '08 Jun 2017', + ), + 1 => + array ( + 'filename' => 'php-7.0.20.tar.gz', + 'name' => 'PHP 7.0.20 (tar.gz)', + 'sha256' => 'b44947f0c1926928d5c2f176506b878c32b5cd09ce3b5b52bbbecf4328ab812d', + 'date' => '08 Jun 2017', + ), + 2 => + array ( + 'filename' => 'php-7.0.20.tar.xz', + 'name' => 'PHP 7.0.20 (tar.xz)', + 'sha256' => '31b9cf1fb83fe3cd82c2f6603a0ae81ae6abacb5286827e362d8f85e68908e0a', + 'date' => '08 Jun 2017', + ), + ), + 'date' => '08 Jun 2017', + 'museum' => false, + ), '7.1.5' => array ( 'announcement' => diff --git a/include/version.inc b/include/version.inc index 716e5a0..590208a 100644 --- a/include/version.inc +++ b/include/version.inc @@ -29,15 +29,15 @@ $PHP_7_1_SHA256 = array( ); /* PHP 7.0 Release */ -$PHP_7_0_RC = "7.0.21RC1"; // Current RC version (e.g., '5.6.7RC1') or false +$PHP_7_0_RC = false; // Current RC version (e.g., '5.6.7RC1') or false $PHP_7_0_RC_DATE = "22 June 2017"; -$PHP_7_0_VERSION = "7.0.20"; -$PHP_7_0_DATE = "08 Jun 2017"; +$PHP_7_0_VERSION = "7.0.21"; +$PHP_7_0_DATE = "06 Jul 2017"; $PHP_7_0_SHA256 = array( - "tar.bz2" => "cdfddfe01cc615218e333e34a1c761c9ef8fdf5199b27617264a02705eda7fc3", - "tar.gz" => "b44947f0c1926928d5c2f176506b878c32b5cd09ce3b5b52bbbecf4328ab812d", - "tar.xz" => "31b9cf1fb83fe3cd82c2f6603a0ae81ae6abacb5286827e362d8f85e68908e0a", + "tar.bz2" => "2ba133c392de6f86aacced8c54e0adefd1c81d3840ac323b9926b8ed3dc6231f", + "tar.gz" => "f2f05f629dd02c75834ddf033916bd5ff92a720602839d81fd8b6d90e37b6225", + "tar.xz" => "6713fe3024365d661593235b525235045ef81f18d0043654658c9de1bcb8b9e3", ); /* PHP 5.6 Release */ diff --git a/releases/7_0_21.php b/releases/7_0_21.php new file mode 100644 index 0000000..99c9877 --- /dev/null +++ b/releases/7_0_21.php @@ -0,0 +1,22 @@ +<?php +// $Id$ +$_SERVER['BASE_PAGE'] = 'releases/7_0_21.php'; +include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; +site_header("PHP 7.0.21 Release Announcement"); +?> + + <h1>PHP 7.0.21 Release Announcement</h1> + + <p>The PHP development team announces the immediate availability of PHP + 7.0.21. This is a security release. Several security bugs were fixed in + this release. + + All PHP 7.0 users are encouraged to upgrade to this version. + </p> + + <p>For source downloads of PHP 7.0.21 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.0.21">ChangeLog</a>. + </p> + +<?php site_footer(); ?>
diff --git a/ChangeLog-7.php b/ChangeLog-7.php index 4504efa..67a63ad 100644 --- a/ChangeLog-7.php +++ b/ChangeLog-7.php @@ -7,6 +7,89 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change <h1>PHP 7 ChangeLog</h1> +<section class="version" id="7.0.21"><!-- {{{ 7.0.21 --> +<h3>Version 7.0.21</h3> +<b><?php release_date('06-Jul-2017'); ?></b> +<ul><li>Core: +<ul> + <li><?php bugfix(74738); ?> (Multiple [PATH=] and [HOST=] sections not properly parsed).</li> + <li><?php bugfix(74658); ?> (Undefined constants in array properties result in broken properties).</li> + <li>Fixed misparsing of abstract unix domain socket names.</li> + <li><?php bugfix(74101); ?>, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in zval_get_type).</li> + <li><?php bugfix(74111); ?> (Heap buffer overread (READ: 1) finish_nested_data from unserialize).</li> + <li><?php bugfix(74603); ?> (PHP INI Parsing Stack Buffer Overflow Vulnerability).</li> + <li><?php bugfix(74819); ?> (wddx_deserialize() heap out-of-bound read via php_parse_date()).</li> +</ul></li> +<li>DOM: +<ul> + <li><?php bugfix(69373); ?> (References to deleted XPath query results).</li> +</ul></li> +<li>GD: +<ul> + <li><?php bugfix(74435); ?> (Buffer over-read into uninitialized memory).</li> +</ul></li> +<li>Intl: +<ul> + <li><?php bugfix(73473); ?> (Stack Buffer Overflow in msgfmt_parse_message).</li> + <li><?php bugfix(74705); ?> (Wrong reflection on Collator::getSortKey and collator_get_sort_key).</li> + <li><?php bugfix(73634); ?> (grapheme_strpos illegal memory access).</li> +</ul></li> +<li>Mbstring: +<ul> + <li>Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)</li> +</ul></li> +<li>OCI8: +<ul> + <li>Add TAF callback (PR #2459).</li> +</ul></li> +<li>Opcache: +<ul> + <li><?php bugfix(74663); ?> (Segfault with opcache.memory_protect and validate_timestamp).</li> +</ul></li> +<li>OpenSSL: +<ul> + <li><?php bugfix(74651); ?> (negative-size-param (-1) in memcpy in zif_openssl_seal()).</li> +</ul></li> +<li>PCRE: +<ul> + <li><?php bugfix(74087); ?> (Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)).</li> +</ul></li> +<li>PDO_OCI: +<ul> + <li>Support Instant Client 12.2 in --with-pdo-oci configure option.</li> +</ul></li> +<li>Reflection: +<ul> + <li><?php bugfix(74673); ?> (Segfault when cast Reflection object to string with undefined constant).</li> +</ul></li> +<li>SPL: +<ul> + <li><?php bugfix(74478); ?> (null coalescing operator failing with SplFixedArray).</li> +</ul></li> +<li>Standard: +<ul> + <li><?php bugfix(74708); ?> (Invalid Reflection signatures for random_bytes and random_int).</li> + <li><?php bugfix(73648); ?> (Heap buffer overflow in substr).</li> +</ul></li> +<li>FTP: +<ul> + <li><?php bugfix(74598); ?> (ftp:// wrapper ignores context arg).</li> +</ul></li> +<li>PHAR: +<ul> + <li><?php bugfix(74386); ?> (Phar::__construct reflection incorrect).</li> +</ul></li> +<li>SOAP: +<ul> + <li><?php bugfix(74679); ?> (Incorrect conversion array with WSDL_CACHE_MEMORY).</li> +</ul></li> +<li>Streams: +<ul> + <li><?php bugfix(74556); ?> (stream_socket_get_name() returns '\0').</li> +</ul></li> +</ul> +<!-- }}} --></section> + <section class="version" id="7.1.6"><!-- {{{ 7.1.6 --> <h3>Version 7.1.6</h3> <b><?php release_date('07-Jun-2017'); ?></b> diff --git a/archive/archive.xml b/archive/archive.xml index 996975a..b139926 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2017-07-06-1.xml"/> <xi:include href="entries/2017-06-23-1.xml"/> <xi:include href="entries/2017-06-22-1.xml"/> <xi:include href="entries/2017-06-17-1.xml"/> diff --git a/archive/entries/2017-07-06-1.xml b/archive/entries/2017-07-06-1.xml new file mode 100644 index 0000000..5172261 --- /dev/null +++ b/archive/entries/2017-07-06-1.xml @@ -0,0 +1,25 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 7.0.21 Released</title> + <id>http://php.net/archive/2017.php#id2017-07-06-1</id> + <published>2017-07-06T13:00:00+01:00</published> + <updated>2017-07-06T13:00:00+01:00</updated> + <category term="releases" label="New PHP release"/> + <category term="frontpage" label="PHP.net frontpage news"/> + <link href="http://php.net/index.php#id2017-07-06-1" rel="alternate" type="text/html"/> + <link href="http://php.net/archive/2017.php#id2017-07-06-1" rel="via" type="text/html"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP development team announces the immediate availability of PHP + 7.0.21. This is a security release. Several security bugs were fixed in + this release. + + All PHP 7.0 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.0.21 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.0.21">ChangeLog</a>. + </p> + </div> + </content> +</entry> diff --git a/include/releases.inc b/include/releases.inc index ac2985b..9199395 100644 --- a/include/releases.inc +++ b/include/releases.inc @@ -3,6 +3,39 @@ $OLDRELEASES = array ( 7 => array ( + '7.0.20' => + array ( + 'announcement' => + array ( + 'English' => '/releases/7_0_20.php', + ), + 'source' => + array ( + 0 => + array ( + 'filename' => 'php-7.0.20.tar.bz2', + 'name' => 'PHP 7.0.20 (tar.bz2)', + 'sha256' => 'cdfddfe01cc615218e333e34a1c761c9ef8fdf5199b27617264a02705eda7fc3', + 'date' => '08 Jun 2017', + ), + 1 => + array ( + 'filename' => 'php-7.0.20.tar.gz', + 'name' => 'PHP 7.0.20 (tar.gz)', + 'sha256' => 'b44947f0c1926928d5c2f176506b878c32b5cd09ce3b5b52bbbecf4328ab812d', + 'date' => '08 Jun 2017', + ), + 2 => + array ( + 'filename' => 'php-7.0.20.tar.xz', + 'name' => 'PHP 7.0.20 (tar.xz)', + 'sha256' => '31b9cf1fb83fe3cd82c2f6603a0ae81ae6abacb5286827e362d8f85e68908e0a', + 'date' => '08 Jun 2017', + ), + ), + 'date' => '08 Jun 2017', + 'museum' => false, + ), '7.1.5' => array ( 'announcement' => diff --git a/include/version.inc b/include/version.inc index 716e5a0..590208a 100644 --- a/include/version.inc +++ b/include/version.inc @@ -29,15 +29,15 @@ $PHP_7_1_SHA256 = array( ); /* PHP 7.0 Release */ -$PHP_7_0_RC = "7.0.21RC1"; // Current RC version (e.g., '5.6.7RC1') or false +$PHP_7_0_RC = false; // Current RC version (e.g., '5.6.7RC1') or false $PHP_7_0_RC_DATE = "22 June 2017"; -$PHP_7_0_VERSION = "7.0.20"; -$PHP_7_0_DATE = "08 Jun 2017"; +$PHP_7_0_VERSION = "7.0.21"; +$PHP_7_0_DATE = "06 Jul 2017"; $PHP_7_0_SHA256 = array( - "tar.bz2" => "cdfddfe01cc615218e333e34a1c761c9ef8fdf5199b27617264a02705eda7fc3", - "tar.gz" => "b44947f0c1926928d5c2f176506b878c32b5cd09ce3b5b52bbbecf4328ab812d", - "tar.xz" => "31b9cf1fb83fe3cd82c2f6603a0ae81ae6abacb5286827e362d8f85e68908e0a", + "tar.bz2" => "2ba133c392de6f86aacced8c54e0adefd1c81d3840ac323b9926b8ed3dc6231f", + "tar.gz" => "f2f05f629dd02c75834ddf033916bd5ff92a720602839d81fd8b6d90e37b6225", + "tar.xz" => "6713fe3024365d661593235b525235045ef81f18d0043654658c9de1bcb8b9e3", ); /* PHP 5.6 Release */ diff --git a/releases/7_0_21.php b/releases/7_0_21.php new file mode 100644 index 0000000..99c9877 --- /dev/null +++ b/releases/7_0_21.php @@ -0,0 +1,22 @@ +<?php +// $Id$ +$_SERVER['BASE_PAGE'] = 'releases/7_0_21.php'; +include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc'; +site_header("PHP 7.0.21 Release Announcement"); +?> + + <h1>PHP 7.0.21 Release Announcement</h1> + + <p>The PHP development team announces the immediate availability of PHP + 7.0.21. This is a security release. Several security bugs were fixed in + this release. + + All PHP 7.0 users are encouraged to upgrade to this version. + </p> + + <p>For source downloads of PHP 7.0.21 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.0.21">ChangeLog</a>. + </p> + +<?php site_footer(); ?>