com web/php: 7.2.26 announcement: ChangeLog-7.php archive/archive.xml archive/entries/2019-10-24-1.xml archive/entries/2019-12-18-3.xml
include/releases.inc include/version.inc releases/7_2_ 26.php
| From: | Remi Collet | Date: | Wed, 18 Dec 2019 13:05:52 +0000 |
| Subject: | com web/php: 7.2.26 announcement: ChangeLog-7.php archive/archive.xml archive/entries/2019-10-24-1.xml archive/entries/2019-12-18-3.xml include/releases.inc include/version.inc releases/7_2_ 26.php |
||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-28464@lists.php.net to get a copy of this message | ||
Commit: 3732912909dfbbb30ae97e5bf49b2466ab89ca3a
Author: Remi Collet <remi@php.net> Wed, 18 Dec 2019 14:05:52 +0100
Parents: 002d17677f39d17f797b5f57e13c8a06a2f71a23
Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=3732912909dfbbb30ae97e5bf49b2466ab89ca3a
Log:
7.2.26 announcement
Changed paths:
M ChangeLog-7.php
M archive/archive.xml
M archive/entries/2019-10-24-1.xml
A archive/entries/2019-12-18-3.xml
M include/releases.inc
M include/version.inc
A releases/7_2_26.php
diff --git a/ChangeLog-7.php b/ChangeLog-7.php index df943180a..ca6020375 100644 --- a/ChangeLog-7.php +++ b/ChangeLog-7.php @@ -1652,6 +1652,45 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change <a name="PHP_7_2"></a> +<section class="version" id="7.2.26"><!-- {{{ 7.2.26 --> +<h3>Version 7.2.26</h3> +<b><?php release_date('19-Dec-2019'); ?></b> +<ul><li>Bcmath: +<ul> + <li><?php bugfix(78878); ?> (Buffer underflow in bc_shift_addsub). (CVE-2019-11046)</li> +</ul></li> +<li>Core: +<ul> + <li><?php bugfix(78862); ?> (link() silently truncates after a null byte on Windows). (CVE-2019-11044)</li> + <li><?php bugfix(78863); ?> (DirectoryIterator class silently truncates after a null byte). (CVE-2019-11045)</li> +</ul></li> +<li>EXIF: +<ul> + <li><?php bugfix(78793); ?> (Use-after-free in exif parsing under memory sanitizer). (CVE-2019-11050)</li> + <li><?php bugfix(78910); ?> (Heap-buffer-overflow READ in exif). (CVE-2019-11047)</li> +</ul></li> +<li>GD: +<ul> + <li><?php bugfix(78849); ?> (GD build broken with -D SIGNED_COMPARE_SLOW).</li> +</ul></li> +<li>Intl: +<ul> + <li><?php bugfix(78804); ?> (Segmentation fault in Locale::filterMatches).</li> +</ul></li> +<li>OPcache: +<ul> + <li>Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).</li> +</ul></li> +<li>Standard: +<ul> + <li><?php bugfix(78759); ?> (array_search in $GLOBALS).</li> + <li><?php bugfix(78833); ?> (Integer overflow in pack causes out-of-bound access).</li> + <li><?php bugfix(78814); ?> (strip_tags allows / in tag name => whitelist bypass).</li> +</ul></li> +</ul> +<!-- }}} --></section> + + <section class="version" id="7.2.25"><!-- {{{ 7.2.25 --> <h3>Version 7.2.25</h3> <b><?php release_date('21-Nov-2019'); ?></b> diff --git a/archive/archive.xml b/archive/archive.xml index a9c0abc9f..75091275f 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2019-12-18-3.xml"/> <xi:include href="entries/2019-12-18-2.xml"/> <xi:include href="entries/2019-12-18-1.xml"/> <xi:include href="entries/2019-12-12-1.xml"/> diff --git a/archive/entries/2019-10-24-1.xml b/archive/entries/2019-10-24-1.xml index 20983d55a..eefc8b913 100644 --- a/archive/entries/2019-10-24-1.xml +++ b/archive/entries/2019-10-24-1.xml @@ -15,7 +15,7 @@ <p>All PHP 7.2 users are encouraged to upgrade to this version.</p> - <p>For source downloads of PHP 7.2.247 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + <p>For source downloads of PHP 7.2.24 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.2.24">ChangeLog</a>. </p> diff --git a/archive/entries/2019-12-18-3.xml b/archive/entries/2019-12-18-3.xml new file mode 100644 index 000000000..0aa7e4b5d --- /dev/null +++ b/archive/entries/2019-12-18-3.xml @@ -0,0 +1,24 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 7.2.26 Released</title> + <id>https://www.php.net/archive/2019.php#2019-12-18-3</id> + <published>2019-12-18T13:02:37+00:00</published> + <updated>2019-12-18T13:02:37+00:00</updated> + <link href="https://www.php.net/index.php#id2019-12-18-3" rel="alternate" type="text/html"/> + <link href="https://www.php.net/archive/2019.php#2019-12-18-3" rel="via" type="text/html"/> + <category term="frontpage" label="PHP.net frontpage news"/> + <category term="releases" label="New PHP release"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP development team announces the immediate availability of PHP + 7.2.26. This is a security release which also contains several minor bug fixes.</p> + + <p>All PHP 7.2 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.2.26 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.2.26">ChangeLog</a>. + </p> + </div> + </content> +</entry> diff --git a/include/releases.inc b/include/releases.inc index c0aa5ea26..a42d0b0a4 100644 --- a/include/releases.inc +++ b/include/releases.inc @@ -2,6 +2,42 @@ $OLDRELEASES = array ( 7 => array ( + '7.2.25' => + array ( + 'announcement' => + array ( + 'English' => '/releases/7_2_25.php', + ), + 'tags' => + array ( + ), + 'date' => '21 Nov 2019', + 'source' => + array ( + 0 => + array ( + 'filename' => 'php-7.2.25.tar.bz2', + 'name' => 'PHP 7.2.25 (tar.bz2)', + 'sha256' => '7cb336b1ed0f9d87f46bbcb7b3437ee252d0d5060c0fb1a985adb6cbc73a6b9e', + 'date' => '21 Nov 2019', + ), + 1 => + array ( + 'filename' => 'php-7.2.25.tar.gz', + 'name' => 'PHP 7.2.25 (tar.gz)', + 'sha256' => 'b2cb1bd46454d33b2c65c2fd559f464cd14e57dd47b953adf5caa77fdf0de52b', + 'date' => '21 Nov 2019', + ), + 2 => + array ( + 'filename' => 'php-7.2.25.tar.xz', + 'name' => 'PHP 7.2.25 (tar.xz)', + 'sha256' => '746efeedc38e6ff7b1ec1432440f5fa801537adf6cd21e4afb3f040e5b0760a9', + 'date' => '21 Nov 2019', + ), + ), + 'museum' => false, + ), '7.3.12' => array ( 'announcement' => diff --git a/include/version.inc b/include/version.inc index 5b2a9e837..15fc70aeb 100644 --- a/include/version.inc +++ b/include/version.inc @@ -37,13 +37,13 @@ $RELEASES = (function() { ); /* PHP 7.2 Release */ - $PHP_7_2_VERSION = "7.2.25"; - $PHP_7_2_DATE = "21 Nov 2019"; - $PHP_7_2_TAGS = []; // Set to ['security'] for security releases. + $PHP_7_2_VERSION = "7.2.26"; + $PHP_7_2_DATE = "18 Dec 2019"; + $PHP_7_2_TAGS = ['security']; // Set to ['security'] for security releases. $PHP_7_2_SHA256 = array( - "tar.bz2" => "7cb336b1ed0f9d87f46bbcb7b3437ee252d0d5060c0fb1a985adb6cbc73a6b9e", - "tar.gz" => "b2cb1bd46454d33b2c65c2fd559f464cd14e57dd47b953adf5caa77fdf0de52b", - "tar.xz" => "746efeedc38e6ff7b1ec1432440f5fa801537adf6cd21e4afb3f040e5b0760a9", + "tar.bz2" => "f36d86eecf57ff919d6f67b064e1f41993f62e3991ea4796038d8d99c74e847b", + "tar.gz" => "e97d0636478bb519cd955a0c17b7970cf173063a840a83fc4afb75c22bc1bf08", + "tar.xz" => "1dd3bc875e105f5c9d21fb4dc240670bd2c22037820ff03890f5ab883c88b78d", ); return array( diff --git a/releases/7_2_26.php b/releases/7_2_26.php new file mode 100644 index 000000000..422047dfa --- /dev/null +++ b/releases/7_2_26.php @@ -0,0 +1,17 @@ +<?php +$_SERVER['BASE_PAGE'] = 'releases/7_2_26.php'; +include_once __DIR__ . '/../include/prepend.inc'; +site_header("PHP 7.2.26 Release Announcement"); +?> +<h1>PHP 7.2.26 Release Announcement</h1> + +<p>The PHP development team announces the immediate availability of PHP 7.2.26. +This is a security release which also contains several minor bug fixes.</p> + +<p>All PHP 7.2 users are encouraged to upgrade to this version.</p> + +<p>For source downloads of PHP 7.2.26 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, +Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. +The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.2.26">ChangeLog</a>. +</p> +<?php site_footer(); ?>
diff --git a/ChangeLog-7.php b/ChangeLog-7.php index df943180a..ca6020375 100644 --- a/ChangeLog-7.php +++ b/ChangeLog-7.php @@ -1652,6 +1652,45 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change <a name="PHP_7_2"></a> +<section class="version" id="7.2.26"><!-- {{{ 7.2.26 --> +<h3>Version 7.2.26</h3> +<b><?php release_date('19-Dec-2019'); ?></b> +<ul><li>Bcmath: +<ul> + <li><?php bugfix(78878); ?> (Buffer underflow in bc_shift_addsub). (CVE-2019-11046)</li> +</ul></li> +<li>Core: +<ul> + <li><?php bugfix(78862); ?> (link() silently truncates after a null byte on Windows). (CVE-2019-11044)</li> + <li><?php bugfix(78863); ?> (DirectoryIterator class silently truncates after a null byte). (CVE-2019-11045)</li> +</ul></li> +<li>EXIF: +<ul> + <li><?php bugfix(78793); ?> (Use-after-free in exif parsing under memory sanitizer). (CVE-2019-11050)</li> + <li><?php bugfix(78910); ?> (Heap-buffer-overflow READ in exif). (CVE-2019-11047)</li> +</ul></li> +<li>GD: +<ul> + <li><?php bugfix(78849); ?> (GD build broken with -D SIGNED_COMPARE_SLOW).</li> +</ul></li> +<li>Intl: +<ul> + <li><?php bugfix(78804); ?> (Segmentation fault in Locale::filterMatches).</li> +</ul></li> +<li>OPcache: +<ul> + <li>Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).</li> +</ul></li> +<li>Standard: +<ul> + <li><?php bugfix(78759); ?> (array_search in $GLOBALS).</li> + <li><?php bugfix(78833); ?> (Integer overflow in pack causes out-of-bound access).</li> + <li><?php bugfix(78814); ?> (strip_tags allows / in tag name => whitelist bypass).</li> +</ul></li> +</ul> +<!-- }}} --></section> + + <section class="version" id="7.2.25"><!-- {{{ 7.2.25 --> <h3>Version 7.2.25</h3> <b><?php release_date('21-Nov-2019'); ?></b> diff --git a/archive/archive.xml b/archive/archive.xml index a9c0abc9f..75091275f 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2019-12-18-3.xml"/> <xi:include href="entries/2019-12-18-2.xml"/> <xi:include href="entries/2019-12-18-1.xml"/> <xi:include href="entries/2019-12-12-1.xml"/> diff --git a/archive/entries/2019-10-24-1.xml b/archive/entries/2019-10-24-1.xml index 20983d55a..eefc8b913 100644 --- a/archive/entries/2019-10-24-1.xml +++ b/archive/entries/2019-10-24-1.xml @@ -15,7 +15,7 @@ <p>All PHP 7.2 users are encouraged to upgrade to this version.</p> - <p>For source downloads of PHP 7.2.247 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + <p>For source downloads of PHP 7.2.24 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.2.24">ChangeLog</a>. </p> diff --git a/archive/entries/2019-12-18-3.xml b/archive/entries/2019-12-18-3.xml new file mode 100644 index 000000000..0aa7e4b5d --- /dev/null +++ b/archive/entries/2019-12-18-3.xml @@ -0,0 +1,24 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 7.2.26 Released</title> + <id>https://www.php.net/archive/2019.php#2019-12-18-3</id> + <published>2019-12-18T13:02:37+00:00</published> + <updated>2019-12-18T13:02:37+00:00</updated> + <link href="https://www.php.net/index.php#id2019-12-18-3" rel="alternate" type="text/html"/> + <link href="https://www.php.net/archive/2019.php#2019-12-18-3" rel="via" type="text/html"/> + <category term="frontpage" label="PHP.net frontpage news"/> + <category term="releases" label="New PHP release"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP development team announces the immediate availability of PHP + 7.2.26. This is a security release which also contains several minor bug fixes.</p> + + <p>All PHP 7.2 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.2.26 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.2.26">ChangeLog</a>. + </p> + </div> + </content> +</entry> diff --git a/include/releases.inc b/include/releases.inc index c0aa5ea26..a42d0b0a4 100644 --- a/include/releases.inc +++ b/include/releases.inc @@ -2,6 +2,42 @@ $OLDRELEASES = array ( 7 => array ( + '7.2.25' => + array ( + 'announcement' => + array ( + 'English' => '/releases/7_2_25.php', + ), + 'tags' => + array ( + ), + 'date' => '21 Nov 2019', + 'source' => + array ( + 0 => + array ( + 'filename' => 'php-7.2.25.tar.bz2', + 'name' => 'PHP 7.2.25 (tar.bz2)', + 'sha256' => '7cb336b1ed0f9d87f46bbcb7b3437ee252d0d5060c0fb1a985adb6cbc73a6b9e', + 'date' => '21 Nov 2019', + ), + 1 => + array ( + 'filename' => 'php-7.2.25.tar.gz', + 'name' => 'PHP 7.2.25 (tar.gz)', + 'sha256' => 'b2cb1bd46454d33b2c65c2fd559f464cd14e57dd47b953adf5caa77fdf0de52b', + 'date' => '21 Nov 2019', + ), + 2 => + array ( + 'filename' => 'php-7.2.25.tar.xz', + 'name' => 'PHP 7.2.25 (tar.xz)', + 'sha256' => '746efeedc38e6ff7b1ec1432440f5fa801537adf6cd21e4afb3f040e5b0760a9', + 'date' => '21 Nov 2019', + ), + ), + 'museum' => false, + ), '7.3.12' => array ( 'announcement' => diff --git a/include/version.inc b/include/version.inc index 5b2a9e837..15fc70aeb 100644 --- a/include/version.inc +++ b/include/version.inc @@ -37,13 +37,13 @@ $RELEASES = (function() { ); /* PHP 7.2 Release */ - $PHP_7_2_VERSION = "7.2.25"; - $PHP_7_2_DATE = "21 Nov 2019"; - $PHP_7_2_TAGS = []; // Set to ['security'] for security releases. + $PHP_7_2_VERSION = "7.2.26"; + $PHP_7_2_DATE = "18 Dec 2019"; + $PHP_7_2_TAGS = ['security']; // Set to ['security'] for security releases. $PHP_7_2_SHA256 = array( - "tar.bz2" => "7cb336b1ed0f9d87f46bbcb7b3437ee252d0d5060c0fb1a985adb6cbc73a6b9e", - "tar.gz" => "b2cb1bd46454d33b2c65c2fd559f464cd14e57dd47b953adf5caa77fdf0de52b", - "tar.xz" => "746efeedc38e6ff7b1ec1432440f5fa801537adf6cd21e4afb3f040e5b0760a9", + "tar.bz2" => "f36d86eecf57ff919d6f67b064e1f41993f62e3991ea4796038d8d99c74e847b", + "tar.gz" => "e97d0636478bb519cd955a0c17b7970cf173063a840a83fc4afb75c22bc1bf08", + "tar.xz" => "1dd3bc875e105f5c9d21fb4dc240670bd2c22037820ff03890f5ab883c88b78d", ); return array( diff --git a/releases/7_2_26.php b/releases/7_2_26.php new file mode 100644 index 000000000..422047dfa --- /dev/null +++ b/releases/7_2_26.php @@ -0,0 +1,17 @@ +<?php +$_SERVER['BASE_PAGE'] = 'releases/7_2_26.php'; +include_once __DIR__ . '/../include/prepend.inc'; +site_header("PHP 7.2.26 Release Announcement"); +?> +<h1>PHP 7.2.26 Release Announcement</h1> + +<p>The PHP development team announces the immediate availability of PHP 7.2.26. +This is a security release which also contains several minor bug fixes.</p> + +<p>All PHP 7.2 users are encouraged to upgrade to this version.</p> + +<p>For source downloads of PHP 7.2.26 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, +Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. +The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.2.26">ChangeLog</a>. +</p> +<?php site_footer(); ?>