com web/php: Announce 7.3.14: ChangeLog-7.php archive/archive.xml archive/entries/2020-01-23-3.xml include/releases.inc include/version.inc
releases/7_3_14.php
| From: | Christoph Michael Becker | Date: | Thu, 23 Jan 2020 09:41:14 +0000 |
| Subject: | com web/php: Announce 7.3.14: ChangeLog-7.php archive/archive.xml archive/entries/2020-01-23-3.xml include/releases.inc include/version.inc releases/7_3_14.php |
||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-28510@lists.php.net to get a copy of this message | ||
Commit: 10aead474434e0871bbeaa7f5597bc7fde0f9db4
Author: Christoph M. Becker <cmbecker69@gmx.de> Thu, 23 Jan 2020 10:41:14 +0100
Parents: 81e105eeff92dcaeaa0b610ce0e5f6c15e606edd
Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=10aead474434e0871bbeaa7f5597bc7fde0f9db4
Log:
Announce 7.3.14
Changed paths:
M ChangeLog-7.php
M archive/archive.xml
A archive/entries/2020-01-23-3.xml
M include/releases.inc
M include/version.inc
A releases/7_3_14.php
diff --git a/ChangeLog-7.php b/ChangeLog-7.php index d58839592..6e58c75b5 100644 --- a/ChangeLog-7.php +++ b/ChangeLog-7.php @@ -574,6 +574,75 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change <a name="PHP_7_3"></a> +<section class="version" id="7.3.14"><!-- {{{ 7.3.14 --> +<h3>Version 7.3.14</h3> +<b><?php release_date('23-Jan-2020'); ?></b> +<ul><li>Core: +<ul> + <li><?php bugfix(78999); ?> (Cycle leak when using function result as temporary).</li> +</ul></li> +<li>CURL: +<ul> + <li><?php bugfix(79033); ?> (Curl timeout error with specific url and post).</li> +</ul></li> +<li>Date: +<ul> + <li><?php bugfix(79015); ?> (undefined-behavior in php_date.c).</li> +</ul></li> +<li>DBA: +<ul> + <li><?php bugfix(78808); ?> ([LMDB] MDB_MAP_FULL: Environment mapsize limit reached).</li> +</ul></li> +<li>Fileinfo: +<ul> + <li><?php bugfix(74170); ?> (locale information change after mime_content_type).</li> +</ul></li> +<li>GD: +<ul> + <li><?php bugfix(78923); ?> (Artifacts when convoluting image with transparency).</li> + <li><?php bugfix(79067); ?> (gdTransformAffineCopy() may use unitialized values).</li> + <li><?php bugfix(79068); ?> (gdTransformAffineCopy() changes interpolation method).</li> +</ul></li> +<li>Libxml: +<ul> + <li><?php bugfix(79029); ?> (Use After Free's in XMLReader / XMLWriter).</li> +</ul></li> +<li>Mbstring: +<ul> + <li><?php bugfix(79037); ?> (global buffer-overflow in `mbfl_filt_conv_big5_wchar`). (CVE-2020-7060)</li> +</ul></li> +<li>OPcache: +<ul> + <li><?php bugfix(79040); ?> (Warning Opcode handlers are unusable due to ASLR).</li> +</ul></li> +<li>Pcntl: +<ul> + <li><?php bugfix(78402); ?> (Converting null to string in error message is bad DX).</li> +</ul></li> +<li>PDO_PgSQL: +<ul> + <li><?php bugfix(78983); ?> (pdo_pgsql config.w32 cannot find libpq-fe.h).</li> + <li><?php bugfix(78980); ?> (pgsqlGetNotify() overlooks dead connection).</li> + <li><?php bugfix(78982); ?> (pdo_pgsql returns dead persistent connection).</li> +</ul></li> +<li>Session: +<ul> + <li><?php bugfix(79091); ?> (heap use-after-free in session_create_id()).</li> +</ul></li> +<li>Shmop: +<ul> + <li><?php bugfix(78538); ?> (shmop memory leak).</li> +</ul></li> +<li>Standard: +<ul> + <li><?php bugfix(79099); ?> (OOB read in php_strip_tags_ex). (CVE-2020-7059)</li> + <li><?php bugfix(54298); ?> (Using empty additional_headers adding extraneous CRLF).</li> +</ul></li> +</ul> +<!-- }}} --></section> + + + <section class="version" id="7.3.13"><!-- {{{ 7.3.13 --> <h3>Version 7.3.13</h3> <b><?php release_date('18-Dec-2019'); ?></b> diff --git a/archive/archive.xml b/archive/archive.xml index 471325e82..12f326159 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2020-01-23-3.xml"/> <xi:include href="entries/2020-01-23-2.xml"/> <xi:include href="entries/2020-01-23-1.xml"/> <xi:include href="entries/2020-01-17-1.xml"/> diff --git a/archive/entries/2020-01-23-3.xml b/archive/entries/2020-01-23-3.xml new file mode 100644 index 000000000..b3d6cb465 --- /dev/null +++ b/archive/entries/2020-01-23-3.xml @@ -0,0 +1,24 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 7.3.14 Released</title> + <id>https://www.php.net/archive/2020.php#2020-01-23-3</id> + <published>2020-01-23T09:38:59+00:00</published> + <updated>2020-01-23T09:38:59+00:00</updated> + <link href="https://www.php.net/index.php#id2020-01-23-3" rel="alternate" type="text/html"/> + <link href="https://www.php.net/archive/2020.php#2020-01-23-3" rel="via" type="text/html"/> + <category term="frontpage" label="PHP.net frontpage news"/> + <category term="releases" label="New PHP release"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP development team announces the immediate availability of PHP + 7.3.14. This is a security release which also contains several bug fixes.</p> + + <p>All PHP 7.3 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.3.14 please visit our <a href="https://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="https://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="https://www.php.net/ChangeLog-7.php#7.3.14">ChangeLog</a>. + </p> + </div> + </content> +</entry> diff --git a/include/releases.inc b/include/releases.inc index cf1f6e66a..e5042c211 100644 --- a/include/releases.inc +++ b/include/releases.inc @@ -2,6 +2,43 @@ $OLDRELEASES = array ( 7 => array ( + '7.3.13' => + array ( + 'announcement' => + array ( + 'English' => '/releases/7_3_13.php', + ), + 'tags' => + array ( + 0 => 'security', + ), + 'date' => '18 Dec 2019', + 'source' => + array ( + 0 => + array ( + 'filename' => 'php-7.3.13.tar.bz2', + 'name' => 'PHP 7.3.13 (tar.bz2)', + 'sha256' => '5c7b89062814f3c3953d1518f63ed463fd452929e3a37110af4170c5d23267bc', + 'date' => '18 Dec 2019', + ), + 1 => + array ( + 'filename' => 'php-7.3.13.tar.gz', + 'name' => 'PHP 7.3.13 (tar.gz)', + 'sha256' => '9cf835416a3471d7e6615e9288e76813d55ffaf60e0aa9ce74884a7c228cb6dd', + 'date' => '18 Dec 2019', + ), + 2 => + array ( + 'filename' => 'php-7.3.13.tar.xz', + 'name' => 'PHP 7.3.13 (tar.xz)', + 'sha256' => '57ac55fe442d2da650abeb9e6fa161bd3a98ba6528c029f076f8bba43dd5c228', + 'date' => '18 Dec 2019', + ), + ), + 'museum' => false, + ), '7.2.26' => array ( 'announcement' => diff --git a/include/version.inc b/include/version.inc index 7051eeea7..3dc31d531 100644 --- a/include/version.inc +++ b/include/version.inc @@ -28,12 +28,12 @@ $RELEASES = (function() { /* PHP 7.3 Release */ $PHP_7_3_VERSION = "7.3.13"; - $PHP_7_3_DATE = "18 Dec 2019"; + $PHP_7_3_DATE = "23 Jan 2020"; $PHP_7_3_TAGS = ['security']; // Set to ['security'] for security releases. $PHP_7_3_SHA256 = array( - "tar.bz2" => "5c7b89062814f3c3953d1518f63ed463fd452929e3a37110af4170c5d23267bc", - "tar.gz" => "9cf835416a3471d7e6615e9288e76813d55ffaf60e0aa9ce74884a7c228cb6dd", - "tar.xz" => "57ac55fe442d2da650abeb9e6fa161bd3a98ba6528c029f076f8bba43dd5c228", + "tar.bz2" => "b9dfcbbbc929ce67995f976de8636c5f46804593ecae6e110509329b9dc6c272", + "tar.gz" => "6aff532a380b0f30c9e295b67dc91d023fee3b0ae14b4771468bf5dda4cbf108", + "tar.xz" => "cc05dd373ca5d36652800762f65c10e828a17de35aaf246262e3efa99d00cdb0", ); /* PHP 7.2 Release */ diff --git a/releases/7_3_14.php b/releases/7_3_14.php new file mode 100644 index 000000000..8b5cc6c50 --- /dev/null +++ b/releases/7_3_14.php @@ -0,0 +1,19 @@ +<?php +$_SERVER['BASE_PAGE'] = 'releases/7_3_14.php'; +include_once __DIR__ . '/../include/prepend.inc'; +site_header("PHP 7.3.14 Release Announcement"); +?> + + <h1>PHP 7.3.14 Release Announcement</h1> + + <p>The PHP development team announces the immediate availability of PHP + 7.3.14. This is a security release which also contains several bug fixes.</p> + + <p>All PHP 7.3 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.3.14 please visit our <a href="https://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="https://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="https://www.php.net/ChangeLog-7.php#7.3.14">ChangeLog</a>. + </p> + +<?php site_footer(); ?>
diff --git a/ChangeLog-7.php b/ChangeLog-7.php index d58839592..6e58c75b5 100644 --- a/ChangeLog-7.php +++ b/ChangeLog-7.php @@ -574,6 +574,75 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change <a name="PHP_7_3"></a> +<section class="version" id="7.3.14"><!-- {{{ 7.3.14 --> +<h3>Version 7.3.14</h3> +<b><?php release_date('23-Jan-2020'); ?></b> +<ul><li>Core: +<ul> + <li><?php bugfix(78999); ?> (Cycle leak when using function result as temporary).</li> +</ul></li> +<li>CURL: +<ul> + <li><?php bugfix(79033); ?> (Curl timeout error with specific url and post).</li> +</ul></li> +<li>Date: +<ul> + <li><?php bugfix(79015); ?> (undefined-behavior in php_date.c).</li> +</ul></li> +<li>DBA: +<ul> + <li><?php bugfix(78808); ?> ([LMDB] MDB_MAP_FULL: Environment mapsize limit reached).</li> +</ul></li> +<li>Fileinfo: +<ul> + <li><?php bugfix(74170); ?> (locale information change after mime_content_type).</li> +</ul></li> +<li>GD: +<ul> + <li><?php bugfix(78923); ?> (Artifacts when convoluting image with transparency).</li> + <li><?php bugfix(79067); ?> (gdTransformAffineCopy() may use unitialized values).</li> + <li><?php bugfix(79068); ?> (gdTransformAffineCopy() changes interpolation method).</li> +</ul></li> +<li>Libxml: +<ul> + <li><?php bugfix(79029); ?> (Use After Free's in XMLReader / XMLWriter).</li> +</ul></li> +<li>Mbstring: +<ul> + <li><?php bugfix(79037); ?> (global buffer-overflow in `mbfl_filt_conv_big5_wchar`). (CVE-2020-7060)</li> +</ul></li> +<li>OPcache: +<ul> + <li><?php bugfix(79040); ?> (Warning Opcode handlers are unusable due to ASLR).</li> +</ul></li> +<li>Pcntl: +<ul> + <li><?php bugfix(78402); ?> (Converting null to string in error message is bad DX).</li> +</ul></li> +<li>PDO_PgSQL: +<ul> + <li><?php bugfix(78983); ?> (pdo_pgsql config.w32 cannot find libpq-fe.h).</li> + <li><?php bugfix(78980); ?> (pgsqlGetNotify() overlooks dead connection).</li> + <li><?php bugfix(78982); ?> (pdo_pgsql returns dead persistent connection).</li> +</ul></li> +<li>Session: +<ul> + <li><?php bugfix(79091); ?> (heap use-after-free in session_create_id()).</li> +</ul></li> +<li>Shmop: +<ul> + <li><?php bugfix(78538); ?> (shmop memory leak).</li> +</ul></li> +<li>Standard: +<ul> + <li><?php bugfix(79099); ?> (OOB read in php_strip_tags_ex). (CVE-2020-7059)</li> + <li><?php bugfix(54298); ?> (Using empty additional_headers adding extraneous CRLF).</li> +</ul></li> +</ul> +<!-- }}} --></section> + + + <section class="version" id="7.3.13"><!-- {{{ 7.3.13 --> <h3>Version 7.3.13</h3> <b><?php release_date('18-Dec-2019'); ?></b> diff --git a/archive/archive.xml b/archive/archive.xml index 471325e82..12f326159 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2020-01-23-3.xml"/> <xi:include href="entries/2020-01-23-2.xml"/> <xi:include href="entries/2020-01-23-1.xml"/> <xi:include href="entries/2020-01-17-1.xml"/> diff --git a/archive/entries/2020-01-23-3.xml b/archive/entries/2020-01-23-3.xml new file mode 100644 index 000000000..b3d6cb465 --- /dev/null +++ b/archive/entries/2020-01-23-3.xml @@ -0,0 +1,24 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 7.3.14 Released</title> + <id>https://www.php.net/archive/2020.php#2020-01-23-3</id> + <published>2020-01-23T09:38:59+00:00</published> + <updated>2020-01-23T09:38:59+00:00</updated> + <link href="https://www.php.net/index.php#id2020-01-23-3" rel="alternate" type="text/html"/> + <link href="https://www.php.net/archive/2020.php#2020-01-23-3" rel="via" type="text/html"/> + <category term="frontpage" label="PHP.net frontpage news"/> + <category term="releases" label="New PHP release"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP development team announces the immediate availability of PHP + 7.3.14. This is a security release which also contains several bug fixes.</p> + + <p>All PHP 7.3 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.3.14 please visit our <a href="https://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="https://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="https://www.php.net/ChangeLog-7.php#7.3.14">ChangeLog</a>. + </p> + </div> + </content> +</entry> diff --git a/include/releases.inc b/include/releases.inc index cf1f6e66a..e5042c211 100644 --- a/include/releases.inc +++ b/include/releases.inc @@ -2,6 +2,43 @@ $OLDRELEASES = array ( 7 => array ( + '7.3.13' => + array ( + 'announcement' => + array ( + 'English' => '/releases/7_3_13.php', + ), + 'tags' => + array ( + 0 => 'security', + ), + 'date' => '18 Dec 2019', + 'source' => + array ( + 0 => + array ( + 'filename' => 'php-7.3.13.tar.bz2', + 'name' => 'PHP 7.3.13 (tar.bz2)', + 'sha256' => '5c7b89062814f3c3953d1518f63ed463fd452929e3a37110af4170c5d23267bc', + 'date' => '18 Dec 2019', + ), + 1 => + array ( + 'filename' => 'php-7.3.13.tar.gz', + 'name' => 'PHP 7.3.13 (tar.gz)', + 'sha256' => '9cf835416a3471d7e6615e9288e76813d55ffaf60e0aa9ce74884a7c228cb6dd', + 'date' => '18 Dec 2019', + ), + 2 => + array ( + 'filename' => 'php-7.3.13.tar.xz', + 'name' => 'PHP 7.3.13 (tar.xz)', + 'sha256' => '57ac55fe442d2da650abeb9e6fa161bd3a98ba6528c029f076f8bba43dd5c228', + 'date' => '18 Dec 2019', + ), + ), + 'museum' => false, + ), '7.2.26' => array ( 'announcement' => diff --git a/include/version.inc b/include/version.inc index 7051eeea7..3dc31d531 100644 --- a/include/version.inc +++ b/include/version.inc @@ -28,12 +28,12 @@ $RELEASES = (function() { /* PHP 7.3 Release */ $PHP_7_3_VERSION = "7.3.13"; - $PHP_7_3_DATE = "18 Dec 2019"; + $PHP_7_3_DATE = "23 Jan 2020"; $PHP_7_3_TAGS = ['security']; // Set to ['security'] for security releases. $PHP_7_3_SHA256 = array( - "tar.bz2" => "5c7b89062814f3c3953d1518f63ed463fd452929e3a37110af4170c5d23267bc", - "tar.gz" => "9cf835416a3471d7e6615e9288e76813d55ffaf60e0aa9ce74884a7c228cb6dd", - "tar.xz" => "57ac55fe442d2da650abeb9e6fa161bd3a98ba6528c029f076f8bba43dd5c228", + "tar.bz2" => "b9dfcbbbc929ce67995f976de8636c5f46804593ecae6e110509329b9dc6c272", + "tar.gz" => "6aff532a380b0f30c9e295b67dc91d023fee3b0ae14b4771468bf5dda4cbf108", + "tar.xz" => "cc05dd373ca5d36652800762f65c10e828a17de35aaf246262e3efa99d00cdb0", ); /* PHP 7.2 Release */ diff --git a/releases/7_3_14.php b/releases/7_3_14.php new file mode 100644 index 000000000..8b5cc6c50 --- /dev/null +++ b/releases/7_3_14.php @@ -0,0 +1,19 @@ +<?php +$_SERVER['BASE_PAGE'] = 'releases/7_3_14.php'; +include_once __DIR__ . '/../include/prepend.inc'; +site_header("PHP 7.3.14 Release Announcement"); +?> + + <h1>PHP 7.3.14 Release Announcement</h1> + + <p>The PHP development team announces the immediate availability of PHP + 7.3.14. This is a security release which also contains several bug fixes.</p> + + <p>All PHP 7.3 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.3.14 please visit our <a href="https://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="https://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="https://www.php.net/ChangeLog-7.php#7.3.14">ChangeLog</a>. + </p> + +<?php site_footer(); ?>