com web/php: Release 7.4.3: ChangeLog-7.php archive/archive.xml archive/entries/2020-02-20-3.xml include/version.inc releases/7_4_3.php
| From: | Derick Rethans | Date: | Thu, 20 Feb 2020 11:53:43 +0000 |
| Subject: | com web/php: Release 7.4.3: ChangeLog-7.php archive/archive.xml archive/entries/2020-02-20-3.xml include/version.inc releases/7_4_3.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-28539@lists.php.net to get a copy of this message | ||
Commit: 233bf8ea03563de977372c0563a00b25e3718085
Author: Derick Rethans <github@derickrethans.nl> Thu, 20 Feb 2020 11:53:43 +0000
Parents: 941b8daebc83f492fbcbd664592c06b2dc5b7c17
Branches: master
Link: http://git.php.net/?p=web/php.git;a=commitdiff;h=233bf8ea03563de977372c0563a00b25e3718085
Log:
Release 7.4.3
Changed paths:
M ChangeLog-7.php
M archive/archive.xml
A archive/entries/2020-02-20-3.xml
M include/version.inc
A releases/7_4_3.php
diff --git a/ChangeLog-7.php b/ChangeLog-7.php index 3c849a337..b7df30805 100644 --- a/ChangeLog-7.php +++ b/ChangeLog-7.php @@ -11,6 +11,103 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change <a href="#PHP_7_1">7.1</a> | <a href="#PHP_7_0">7.0</a> <a name="PHP_7_4"></a> +<section class="version" id="7.4.3"><!-- {{{ 7.4.3 --> +<h3>Version 7.4.3</h3> +<b><?php release_date('20-Feb-2020'); ?></b> +<ul><li>Core: +<ul> + <li><?php bugfix(79146); ?> (cscript can fail to run on some systems).</li> + <li><?php bugfix(79155); ?> (Property nullability lost when using multiple property definition).</li> + <li><?php bugfix(78323); ?> (Code 0 is returned on invalid options).</li> + <li><?php bugfix(78989); ?> (Delayed variance check involving trait segfaults).</li> + <li><?php bugfix(79174); ?> (cookie values with spaces fail to round-trip).</li> + <li><?php bugfix(76047); ?> (Use-after-free when accessing already destructed backtrace arguments).</li> +</ul></li> +<li>COM: +<ul> + <li><?php bugfix(79247); ?> (Garbage collecting variant objects segfaults).</li> +</ul></li> +<li>CURL: +<ul> + <li><?php bugfix(79078); ?> (Hypothetical use-after-free in curl_multi_add_handle()).</li> +</ul></li> +<li>FFI: +<ul> + <li><?php bugfix(79096); ?> (FFI Struct Segfault).</li> +</ul></li> +<li>IMAP: +<ul> + <li><?php bugfix(79112); ?> (IMAP extension can't find OpenSSL libraries at configure time).</li> +</ul></li> +<li>Intl: +<ul> + <li><?php bugfix(79212); ?> (NumberFormatter::format() may detect wrong type).</li> +</ul></li> +<li>Libxml: +<ul> + <li><?php bugfix(79191); ?> (Error in SoapClient ctor disables DOMDocument::save()).</li> +</ul></li> +<li>MBString: +<ul> + <li><?php bugfix(79149); ?> (SEGV in mb_convert_encoding with non-string encodings).</li> +</ul></li> +<li>MySQLi: +<ul> + <li><?php bugfix(78666); ?> (Properties may emit a warning on var_dump()).</li> +</ul></li> +<li>MySQLnd: +<ul> + <li><?php bugfix(79084); ?> (mysqlnd may fetch wrong column indexes with MYSQLI_BOTH).</li> + <li><?php bugfix(79011); ?> (MySQL caching_sha2_password Access denied for password with more than 20 chars).</li> +</ul></li> +<li>Opcache: +<ul> + <li><?php bugfix(79114); ?> (Eval class during preload causes class to be only half available).</li> + <li><?php bugfix(79128); ?> (Preloading segfaults if preload_user is used).</li> + <li><?php bugfix(79193); ?> (Incorrect type inference for self::$field =& $field).</li> +</ul></li> +<li>OpenSSL: +<ul> + <li><?php bugfix(79145); ?> (openssl memory leak).</li> +</ul></li> +<li>Phar: +<ul> + <li><?php bugfix(79082); ?> (Files added to tar with Phar::buildFromIterator have all-access permissions). (CVE-2020-7063)</li> + <li><?php bugfix(79171); ?> (heap-buffer-overflow in phar_extract_file). (CVE-2020-7061)</li> + <li><?php bugfix(76584); ?> (PharFileInfo::decompress not working).</li> +</ul></li> +<li>Reflection: +<ul> + <li><?php bugfix(79115); ?> (ReflectionClass::isCloneable call reflected class __destruct).</li> +</ul></li> +<li>Session: +<ul> + <li><?php bugfix(79221); ?> (Null Pointer Dereference in PHP Session Upload Progress). (CVE-2020-7062)</li> +</ul></li> +<li>Standard: +<ul> + <li><?php bugfix(78902); ?> (Memory leak when using stream_filter_append).</li> + <li><?php bugfix(78969); ?> (PASSWORD_DEFAULT should match PASSWORD_BCRYPT instead of being null).</li> +</ul></li> +<li>Testing: +<ul> + <li><?php bugfix(78090); ?> (bug45161.phpt takes forever to finish).</li> +</ul></li> +<li>XSL: +<ul> + <li><?php bugfix(70078); ?> (XSL callbacks with nodes as parameter leak memory).</li> +</ul></li> +<li>Zip: +<ul> + <li>Add ZipArchive::CM_LZMA2 and ZipArchive::CM_XZ constants (since libzip 1.6.0).</li> + <li>Add ZipArchive::RDONLY (since libzip 1.0.0).</li> + <li>Add ZipArchive::ER_* missing constants.</li> + <li>Add ZipArchive::LIBZIP_VERSION constant.</li> + <li><?php bugfix(73119); ?> (Wrong return for ZipArchive::addEmptyDir Method).</li> +</ul></li> +</ul> +<!-- }}} --></section> + <section class="version" id="7.4.2"><!-- {{{ 7.4.2 --> <h3>Version 7.4.2</h3> diff --git a/archive/archive.xml b/archive/archive.xml index bd7eb6450..4e610c7e8 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2020-02-20-3.xml"/> <xi:include href="entries/2020-02-20-2.xml"/> <xi:include href="entries/2020-02-20-1.xml"/> <xi:include href="entries/2020-02-17-1.xml"/> diff --git a/archive/entries/2020-02-20-3.xml b/archive/entries/2020-02-20-3.xml new file mode 100644 index 000000000..865a3f2d3 --- /dev/null +++ b/archive/entries/2020-02-20-3.xml @@ -0,0 +1,24 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 7.4.3 released</title> + <id>https://www.php.net/archive/2020.php#2020-02-20-3</id> + <published>2020-02-20T20:53:17+09:00</published> + <updated>2020-02-20T20:53:17+09:00</updated> + <link href="https://www.php.net/index.php#id2020-02-20-3" rel="alternate" type="text/html"/> + <link href="https://www.php.net/archive/2020.php#2020-02-20-3" rel="via" type="text/html"/> + <category term="frontpage" label="PHP.net frontpage news"/> + <category term="releases" label="New PHP release"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP development team announces the immediate availability of PHP + 7.4.3. This is a security release which also contains several bug fixes.</p> + + <p>All PHP 7.4 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.4.3 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.4.3">ChangeLog</a>. + </p> + </div> + </content> +</entry> diff --git a/include/version.inc b/include/version.inc index 3659df442..ea5031288 100644 --- a/include/version.inc +++ b/include/version.inc @@ -17,13 +17,13 @@ */ $RELEASES = (function() { /* PHP 7.4 Release */ - $PHP_7_4_VERSION = "7.4.2"; - $PHP_7_4_DATE = "23 Jan 2020"; + $PHP_7_4_VERSION = "7.4.3"; + $PHP_7_4_DATE = "20 Feb 2020"; $PHP_7_4_TAGS = ['security']; // Set to ['security'] for security releases. $PHP_7_4_SHA256 = array( - "tar.gz" => "e1b8dbf561ac1d871362054ff4cd62dca5e19c8c896567996525dda7c4b320f9", - "tar.bz2" => "02909974be9c70814ed5652a6bdae9c74220d41c1e5ed5ad921e15d028f8e816", - "tar.xz" => "98284deac017da0d426117ecae7599a1f1bf62ae3911e8bc16c4403a8f4bdf13", + "tar.gz" => "58e421a1dba10da8542a014535cac77a78f0271afb901cc2bd363b881895a9ed", + "tar.bz2" => "c1517ba49578fb2dcc64c73a3edc76d4fc507c4a7ac639981584cc7d3b4c6d14", + "tar.xz" => "cf1f856d877c268124ded1ede40c9fb6142b125fdaafdc54f855120b8bc6982a", ); /* PHP 7.3 Release */ diff --git a/releases/7_4_3.php b/releases/7_4_3.php new file mode 100644 index 000000000..1e220a8e8 --- /dev/null +++ b/releases/7_4_3.php @@ -0,0 +1,18 @@ +<?php +$_SERVER['BASE_PAGE'] = 'releases/7.4.3.php'; +include_once __DIR__ . '/../include/prepend.inc'; +site_header("PHP 7.4.3 Release Announcement"); +?> + + <p>The PHP development team announces the immediate availability of PHP + 7.4.3. This is a security release which also contains several bug fixes.</p> + + <p>All PHP 7.4 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.4.3 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.4.3">ChangeLog</a>. + </p> + + +<?php site_footer(); ?>
diff --git a/ChangeLog-7.php b/ChangeLog-7.php index 3c849a337..b7df30805 100644 --- a/ChangeLog-7.php +++ b/ChangeLog-7.php @@ -11,6 +11,103 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change <a href="#PHP_7_1">7.1</a> | <a href="#PHP_7_0">7.0</a> <a name="PHP_7_4"></a> +<section class="version" id="7.4.3"><!-- {{{ 7.4.3 --> +<h3>Version 7.4.3</h3> +<b><?php release_date('20-Feb-2020'); ?></b> +<ul><li>Core: +<ul> + <li><?php bugfix(79146); ?> (cscript can fail to run on some systems).</li> + <li><?php bugfix(79155); ?> (Property nullability lost when using multiple property definition).</li> + <li><?php bugfix(78323); ?> (Code 0 is returned on invalid options).</li> + <li><?php bugfix(78989); ?> (Delayed variance check involving trait segfaults).</li> + <li><?php bugfix(79174); ?> (cookie values with spaces fail to round-trip).</li> + <li><?php bugfix(76047); ?> (Use-after-free when accessing already destructed backtrace arguments).</li> +</ul></li> +<li>COM: +<ul> + <li><?php bugfix(79247); ?> (Garbage collecting variant objects segfaults).</li> +</ul></li> +<li>CURL: +<ul> + <li><?php bugfix(79078); ?> (Hypothetical use-after-free in curl_multi_add_handle()).</li> +</ul></li> +<li>FFI: +<ul> + <li><?php bugfix(79096); ?> (FFI Struct Segfault).</li> +</ul></li> +<li>IMAP: +<ul> + <li><?php bugfix(79112); ?> (IMAP extension can't find OpenSSL libraries at configure time).</li> +</ul></li> +<li>Intl: +<ul> + <li><?php bugfix(79212); ?> (NumberFormatter::format() may detect wrong type).</li> +</ul></li> +<li>Libxml: +<ul> + <li><?php bugfix(79191); ?> (Error in SoapClient ctor disables DOMDocument::save()).</li> +</ul></li> +<li>MBString: +<ul> + <li><?php bugfix(79149); ?> (SEGV in mb_convert_encoding with non-string encodings).</li> +</ul></li> +<li>MySQLi: +<ul> + <li><?php bugfix(78666); ?> (Properties may emit a warning on var_dump()).</li> +</ul></li> +<li>MySQLnd: +<ul> + <li><?php bugfix(79084); ?> (mysqlnd may fetch wrong column indexes with MYSQLI_BOTH).</li> + <li><?php bugfix(79011); ?> (MySQL caching_sha2_password Access denied for password with more than 20 chars).</li> +</ul></li> +<li>Opcache: +<ul> + <li><?php bugfix(79114); ?> (Eval class during preload causes class to be only half available).</li> + <li><?php bugfix(79128); ?> (Preloading segfaults if preload_user is used).</li> + <li><?php bugfix(79193); ?> (Incorrect type inference for self::$field =& $field).</li> +</ul></li> +<li>OpenSSL: +<ul> + <li><?php bugfix(79145); ?> (openssl memory leak).</li> +</ul></li> +<li>Phar: +<ul> + <li><?php bugfix(79082); ?> (Files added to tar with Phar::buildFromIterator have all-access permissions). (CVE-2020-7063)</li> + <li><?php bugfix(79171); ?> (heap-buffer-overflow in phar_extract_file). (CVE-2020-7061)</li> + <li><?php bugfix(76584); ?> (PharFileInfo::decompress not working).</li> +</ul></li> +<li>Reflection: +<ul> + <li><?php bugfix(79115); ?> (ReflectionClass::isCloneable call reflected class __destruct).</li> +</ul></li> +<li>Session: +<ul> + <li><?php bugfix(79221); ?> (Null Pointer Dereference in PHP Session Upload Progress). (CVE-2020-7062)</li> +</ul></li> +<li>Standard: +<ul> + <li><?php bugfix(78902); ?> (Memory leak when using stream_filter_append).</li> + <li><?php bugfix(78969); ?> (PASSWORD_DEFAULT should match PASSWORD_BCRYPT instead of being null).</li> +</ul></li> +<li>Testing: +<ul> + <li><?php bugfix(78090); ?> (bug45161.phpt takes forever to finish).</li> +</ul></li> +<li>XSL: +<ul> + <li><?php bugfix(70078); ?> (XSL callbacks with nodes as parameter leak memory).</li> +</ul></li> +<li>Zip: +<ul> + <li>Add ZipArchive::CM_LZMA2 and ZipArchive::CM_XZ constants (since libzip 1.6.0).</li> + <li>Add ZipArchive::RDONLY (since libzip 1.0.0).</li> + <li>Add ZipArchive::ER_* missing constants.</li> + <li>Add ZipArchive::LIBZIP_VERSION constant.</li> + <li><?php bugfix(73119); ?> (Wrong return for ZipArchive::addEmptyDir Method).</li> +</ul></li> +</ul> +<!-- }}} --></section> + <section class="version" id="7.4.2"><!-- {{{ 7.4.2 --> <h3>Version 7.4.2</h3> diff --git a/archive/archive.xml b/archive/archive.xml index bd7eb6450..4e610c7e8 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2020-02-20-3.xml"/> <xi:include href="entries/2020-02-20-2.xml"/> <xi:include href="entries/2020-02-20-1.xml"/> <xi:include href="entries/2020-02-17-1.xml"/> diff --git a/archive/entries/2020-02-20-3.xml b/archive/entries/2020-02-20-3.xml new file mode 100644 index 000000000..865a3f2d3 --- /dev/null +++ b/archive/entries/2020-02-20-3.xml @@ -0,0 +1,24 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 7.4.3 released</title> + <id>https://www.php.net/archive/2020.php#2020-02-20-3</id> + <published>2020-02-20T20:53:17+09:00</published> + <updated>2020-02-20T20:53:17+09:00</updated> + <link href="https://www.php.net/index.php#id2020-02-20-3" rel="alternate" type="text/html"/> + <link href="https://www.php.net/archive/2020.php#2020-02-20-3" rel="via" type="text/html"/> + <category term="frontpage" label="PHP.net frontpage news"/> + <category term="releases" label="New PHP release"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"> + <p>The PHP development team announces the immediate availability of PHP + 7.4.3. This is a security release which also contains several bug fixes.</p> + + <p>All PHP 7.4 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.4.3 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.4.3">ChangeLog</a>. + </p> + </div> + </content> +</entry> diff --git a/include/version.inc b/include/version.inc index 3659df442..ea5031288 100644 --- a/include/version.inc +++ b/include/version.inc @@ -17,13 +17,13 @@ */ $RELEASES = (function() { /* PHP 7.4 Release */ - $PHP_7_4_VERSION = "7.4.2"; - $PHP_7_4_DATE = "23 Jan 2020"; + $PHP_7_4_VERSION = "7.4.3"; + $PHP_7_4_DATE = "20 Feb 2020"; $PHP_7_4_TAGS = ['security']; // Set to ['security'] for security releases. $PHP_7_4_SHA256 = array( - "tar.gz" => "e1b8dbf561ac1d871362054ff4cd62dca5e19c8c896567996525dda7c4b320f9", - "tar.bz2" => "02909974be9c70814ed5652a6bdae9c74220d41c1e5ed5ad921e15d028f8e816", - "tar.xz" => "98284deac017da0d426117ecae7599a1f1bf62ae3911e8bc16c4403a8f4bdf13", + "tar.gz" => "58e421a1dba10da8542a014535cac77a78f0271afb901cc2bd363b881895a9ed", + "tar.bz2" => "c1517ba49578fb2dcc64c73a3edc76d4fc507c4a7ac639981584cc7d3b4c6d14", + "tar.xz" => "cf1f856d877c268124ded1ede40c9fb6142b125fdaafdc54f855120b8bc6982a", ); /* PHP 7.3 Release */ diff --git a/releases/7_4_3.php b/releases/7_4_3.php new file mode 100644 index 000000000..1e220a8e8 --- /dev/null +++ b/releases/7_4_3.php @@ -0,0 +1,18 @@ +<?php +$_SERVER['BASE_PAGE'] = 'releases/7.4.3.php'; +include_once __DIR__ . '/../include/prepend.inc'; +site_header("PHP 7.4.3 Release Announcement"); +?> + + <p>The PHP development team announces the immediate availability of PHP + 7.4.3. This is a security release which also contains several bug fixes.</p> + + <p>All PHP 7.4 users are encouraged to upgrade to this version.</p> + + <p>For source downloads of PHP 7.4.3 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>, + Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>. + The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.4.3">ChangeLog</a>. + </p> + + +<?php site_footer(); ?>