Skip to content

Commit 4b21542

Browse files
weltlingweltling
committed
7.0.10 announce
1 parent 76170c1 commit 4b21542

File tree

6 files changed

+248
-9
lines changed

6 files changed

+248
-9
lines changed

‎ChangeLog-7.php

Lines changed: 155 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,161 @@
77

88
<h1>PHP 7 ChangeLog</h1>
99

10+
<section class="version" id="7.0.10"><!-- {{{ 7.0.10 -->
11+
<h3>Version 7.0.10</h3>
12+
<b><?php release_date('18-Aug-2016'); ?></b>
13+
<ul><li>Core:
14+
<ul>
15+
<li><?php bugfix(72629); ?> (Caught exception assignment to variables ignores references).</li>
16+
<li><?php bugfix(72594); ?> (Calling an earlier instance of an included anonymous class fatals).</li>
17+
<li><?php bugfix(72581); ?> (previous property undefined in Exception after deserialization).</li>
18+
<li><?php bugfix(72496); ?> (Cannot declare public method with signature incompatible with parent private method).</li>
19+
<li><?php bugfix(72024); ?> (microtime() leaks memory).</li>
20+
<li><?php bugfix(71911); ?> (Unable to set --enable-debug on building extensions by phpize on Windows).</li>
21+
<li>Fixed bug causing ClosedGeneratorException being thrown into the calling code instead of the Generator yielding from.</li>
22+
<li>Implemented FR <?php bugl(72614); ?> (Support "nmake test" on building extensions by phpize).</li>
23+
<li><?php bugfix(72641); ?> (phpize (on Windows) ignores PHP_PREFIX).</li>
24+
<li>Fixed potential segfault in object storage freeing in shutdown sequence.</li>
25+
<li><?php bugfix(72663); ?> (Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization).</li>
26+
<li><?php bugfix(72681); ?> (PHP Session Data Injection Vulnerability).</li>
27+
<li><?php bugfix(72683); ?> (getmxrr broken).</li>
28+
<li><?php bugfix(72742); ?> (memory allocator fails to realloc small block to large one).</li>
29+
</ul></li>
30+
<li>Bz2:
31+
<ul>
32+
<li><?php bugfix(72837); ?> (integer overflow in bzdecompress caused heap corruption).</li>
33+
</ul></li>
34+
<li>Calendar:
35+
<ul>
36+
<li><?php bugfix(67976); ?> (cal_days_month() fails for final month of the French calendar).</li>
37+
<li><?php bugfix(71894); ?> (AddressSanitizer: global-buffer-overflow in zif_cal_from_jd).</li>
38+
</ul></li>
39+
<li>COM:
40+
<ul>
41+
<li><?php bugfix(72569); ?> (DOTNET/COM array parameters broke in PHP7).</li>
42+
</ul></li>
43+
<li>CURL:
44+
<ul>
45+
<li><?php bugfix(71709); ?> (curl_setopt segfault with empty CURLOPT_HTTPHEADER).</li>
46+
<li><?php bugfix(71929); ?> (CURLINFO_CERTINFO data parsing error).</li>
47+
<li><?php bugfix(72674); ?> (Heap overflow in curl_escape).</li>
48+
</ul></li>
49+
<li>DOM:
50+
<ul>
51+
<li><?php bugfix(66502); ?> (DOM document dangling reference).</li>
52+
</ul></li>
53+
<li>EXIF:
54+
<ul>
55+
<li><?php bugfix(72735); ?> (Samsung picture thumb not read (zero size)).</li>
56+
<li><?php bugfix(72627); ?> (Memory Leakage In exif_process_IFD_in_TIFF).</li>
57+
</ul></li>
58+
<li>Filter:
59+
<ul>
60+
<li><?php bugfix(71745); ?> (FILTER_FLAG_NO_RES_RANGE does not cover whole 127.0.0.0/8 range).</li>
61+
</ul></li>
62+
<li>FPM:
63+
<ul>
64+
<li><?php bugfix(72575); ?> (using --allow-to-run-as-root should ignore missing user).</li>
65+
</ul></li>
66+
<li>GD:
67+
<ul>
68+
<li><?php bugfix(72596); ?> (imagetypes function won't advertise WEBP support).</li>
69+
<li><?php bugfix(72604); ?> (imagearc() ignores thickness for full arcs).</li>
70+
<li><?php bugfix(70315); ?> (500 Server Error but page is fully rendered).</li>
71+
<li><?php bugfix(43828); ?> (broken transparency of imagearc for truecolor in blendingmode).</li>
72+
<li><?php bugfix(66555); ?> (Always false condition in ext/gd/libgd/gdkanji.c).</li>
73+
<li><?php bugfix(68712); ?> (suspicious if-else statements).</li>
74+
<li><?php bugfix(72697); ?> (select_colors write out-of-bounds).</li>
75+
<li><?php bugfix(72730); ?> (imagegammacorrect allows arbitrary write access).</li>
76+
</ul></li>
77+
<li>Intl:
78+
<ul>
79+
<li><?php bugfix(72639); ?> (Segfault when instantiating class that extends IntlCalendar and adds a property).</li>
80+
<li>Partially fixed <?php bugfix(72506); ?> (idn_to_ascii for UTS #46 incorrect for long domain names).</li>
81+
</ul></li>
82+
<li>mbstring:
83+
<ul>
84+
<li><?php bugfix(72691); ?> (mb_ereg_search raises a warning if a match zero-width).</li>
85+
<li><?php bugfix(72693); ?> (mb_ereg_search increments search position when a match zero-width).</li>
86+
<li><?php bugfix(72694); ?> (mb_ereg_search_setpos does not accept a string's last position).</li>
87+
<li><?php bugfix(72710); ?> (`mb_ereg` causes buffer overflow on regexp compile error).</li>
88+
</ul></li>
89+
<li>Mcrypt:
90+
<ul>
91+
<li><?php bugfix(72782); ?> (Heap Overflow due to integer overflows).</li>
92+
</ul></li>
93+
<li>Opcache:
94+
<ul>
95+
<li><?php bugfix(72590); ?> (Opcache restart with kill_all_lockers does not work).</li>
96+
</ul></li>
97+
<li>PCRE:
98+
<ul>
99+
<li><?php bugfix(72688); ?> (preg_match missing group names in matches).</li>
100+
</ul></li>
101+
<li>PDO_pgsql:
102+
<ul>
103+
<li><?php bugfix(70313); ?> (PDO statement fails to throw exception).</li>
104+
</ul></li>
105+
<li>Reflection:
106+
<ul>
107+
<li><?php bugfix(72222); ?> (ReflectionClass::export doesn't handle array constants).</li>
108+
</ul></li>
109+
<li>SimpleXML:
110+
<ul>
111+
<li><?php bugfix(72588); ?> (Using global var doesn't work while accessing SimpleXML element).</li>
112+
</ul></li>
113+
<li>SNMP:
114+
<ul>
115+
<li><?php bugfix(72708); ?> (php_snmp_parse_oid integer overflow in memory allocation).</li>
116+
</ul></li>
117+
<li>SPL:
118+
<ul>
119+
<li><?php bugfix(55701); ?> (GlobIterator throws LogicException).</li>
120+
<li><?php bugfix(72646); ?> (SplFileObject::getCsvControl does not return the escape character).</li>
121+
<li><?php bugfix(72684); ?> (AppendIterator segfault with closed generator).</li>
122+
</ul></li>
123+
<li>SQLite3:
124+
<ul>
125+
<li><?php bugfix(72668); ?> (Spurious warning when exception is thrown in user defined function).</li>
126+
<li><?php bugfix(72571); ?> (SQLite3::bindValue, SQLite3::bindParam crash).</li>
127+
<li>Implemented FR <?php bugl(72653); ?> (SQLite should allow opening with empty filename).</li>
128+
<li>Updated to SQLite3 3.13.0.</li>
129+
</ul></li>
130+
<li>Standard:
131+
<ul>
132+
<li><?php bugfix(72622); ?> (array_walk + array_replace_recursive create references from nothing).</li>
133+
<li><?php bugfix(72152); ?> (base64_decode $strict fails to detect null byte).</li>
134+
<li><?php bugfix(72263); ?> (base64_decode skips a character after padding in strict mode).</li>
135+
<li><?php bugfix(72264); ?> (base64_decode $strict fails with whitespace between padding).</li>
136+
<li><?php bugfix(72330); ?> (CSV fields incorrectly split if escape char followed by UTF chars).</li>
137+
</ul></li>
138+
<li>Streams:
139+
<ul>
140+
<li><?php bugfix(41021); ?> (Problems with the ftps wrapper).</li>
141+
<li><?php bugfix(54431); ?> (opendir() does not work with ftps:// wrapper).</li>
142+
<li><?php bugfix(72667); ?> (opendir() with ftp:// attempts to open data stream for non-existent directories).</li>
143+
<li><?php bugfix(72771); ?> (ftps:// wrapper is vulnerable to protocol downgrade attack).</li>
144+
</ul></li>
145+
<li>XMLRPC:
146+
<ul>
147+
<li><?php bugfix(72647); ?> (xmlrpc_encode() unexpected output after referencing array elements).</li>
148+
</ul></li>
149+
<li>Wddx:
150+
<ul>
151+
<li><?php bugfix(72564); ?> (boolean always deserialized as "true") (Remi)</li>
152+
<li><?php bugfix(72142); ?> (WDDX Packet Injection Vulnerability in wddx_serialize_value()).</li>
153+
<li><?php bugfix(72749); ?> (wddx_deserialize allows illegal memory access) (Stas)</li>
154+
<li><?php bugfix(72750); ?> (wddx_deserialize null dereference).</li>
155+
<li><?php bugfix(72790); ?> (wddx_deserialize null dereference with invalid xml).</li>
156+
<li><?php bugfix(72799); ?> (wddx_deserialize null dereference in php_wddx_pop_element).</li>
157+
</ul></li>
158+
<li>Zip:
159+
<ul>
160+
<li><?php bugfix(72660); ?> (NULL Pointer dereference in zend_virtual_cwd).</li>
161+
</ul></li>
162+
</ul>
163+
<!-- }}} --></section>
164+
10165
<section class="version" id="7.0.9"><!-- {{{ 7.0.9 -->
11166
<h3>Version 7.0.9</h3>
12167
<b><?php release_date('21-Jul-2016'); ?></b>

‎archive/archive.xml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@
99
<uri>http://php.net/contact</uri>
1010
<email>[email protected]</email>
1111
</author>
12+
<xi:include href="entries/2016-08-18-1.xml"/>
1213
<xi:include href="entries/2016-08-16-2.xml"/>
1314
<xi:include href="entries/2016-08-16-1.xml"/>
1415
<xi:include href="entries/2016-08-04-1.xml"/>

‎archive/entries/2016-08-18-1.xml

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
<?xml version="1.0" encoding="utf-8"?>
2+
<entry xmlns="http://www.w3.org/2005/Atom">
3+
<title>PHP 7.0.10 Released</title>
4+
<id>http://php.net/archive/2016.php#id2016-08-18-1</id>
5+
<published>2016-08-18T23:59:00+01:00</published>
6+
<updated>2016-08-18T23:59:00+01:00</updated>
7+
<category term="releases" label="New PHP release"/>
8+
<category term="frontpage" label="PHP.net frontpage news"/>
9+
<link href="http://php.net/index.php#id2016-08-18-1" rel="alternate" type="text/html"/>
10+
<link href="http://php.net/archive/2016.php#id2016-08-18-1" rel="via" type="text/html"/>
11+
<content type="xhtml">
12+
<div xmlns="http://www.w3.org/1999/xhtml">
13+
<p>The PHP development team announces the immediate availability of PHP
14+
7.0.10. This is a security release. Several security bugs were fixed in
15+
this release.
16+
17+
All PHP 7.0 users are encouraged to upgrade to this version.</p>
18+
19+
<p>For source downloads of PHP 7.0.10 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>,
20+
Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>.
21+
The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.0.10">ChangeLog</a>.
22+
</p>
23+
</div>
24+
</content>
25+
</entry>

‎include/releases.inc

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,42 @@
22
$OLDRELEASES = array (
33
7 =>
44
array (
5+
'7.0.9' =>
6+
array (
7+
'announcement' =>
8+
array (
9+
'English' => '/releases/7_0_9.php',
10+
),
11+
'source' =>
12+
array (
13+
0 =>
14+
array (
15+
'filename' => 'php-7.0.9.tar.bz2',
16+
'name' => 'PHP 7.0.9 (tar.bz2)',
17+
'md5' => '63b32d3e97df7b30c2bcd138ef0b21c0',
18+
'sha256' => '2ee6968b5875f2f38700c58a189aad859a6a0b85fc337aa102ec2dc3652c3b7b',
19+
'date' => '21 Jul 2016',
20+
),
21+
1 =>
22+
array (
23+
'filename' => 'php-7.0.9.tar.gz',
24+
'name' => 'PHP 7.0.9 (tar.gz)',
25+
'md5' => '32ea3ce54d7d5ed03c6c600dffd65813',
26+
'sha256' => '93895a6a610c94751c890e5ee91a7f4bc0eae476b95fe30425d13f7ae88753d5',
27+
'date' => '21 Jul 2016',
28+
),
29+
2 =>
30+
array (
31+
'filename' => 'php-7.0.9.tar.xz',
32+
'name' => 'PHP 7.0.9 (tar.xz)',
33+
'md5' => '6294813fb3c8158cfde74302f573cac7',
34+
'sha256' => '970c322ba3e472cb0264b8ba9d4d92e87918da5d0cca53c4aba2a70545b8626d',
35+
'date' => '21 Jul 2016',
36+
),
37+
),
38+
'date' => '21 Jul 2016',
39+
'museum' => false,
40+
),
541
'7.0.8' =>
642
array (
743
'announcement' =>

‎include/version.inc

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -18,20 +18,20 @@
1818
*/
1919

2020
/* PHP 7.0 Release */
21-
$PHP_7_0_RC = "7.0.10RC1"; // Current RC version (e.g., '5.6.7RC1') or false
21+
$PHP_7_0_RC = false; // Current RC version (e.g., '5.6.7RC1') or false
2222
$PHP_7_0_RC_DATE = '04 Aug 2016';
2323

24-
$PHP_7_0_VERSION = "7.0.9";
25-
$PHP_7_0_DATE = "21 Jul 2016";
24+
$PHP_7_0_VERSION = "7.0.10";
25+
$PHP_7_0_DATE = "18 Aug 2016";
2626
$PHP_7_0_MD5 = array(
27-
"tar.bz2" => "63b32d3e97df7b30c2bcd138ef0b21c0",
28-
"tar.gz" => "32ea3ce54d7d5ed03c6c600dffd65813",
29-
"tar.xz" => "6294813fb3c8158cfde74302f573cac7",
27+
"tar.bz2" => "cd1d27be3f522b0543e43c8c2b7116e4",
28+
"tar.gz" => "e02b20546a227d23ce147e5a566c73b5",
29+
"tar.xz" => "6f087f16514b6c442e8009a5828827b7",
3030
);
3131
$PHP_7_0_SHA256 = array(
32-
"tar.bz2" => "2ee6968b5875f2f38700c58a189aad859a6a0b85fc337aa102ec2dc3652c3b7b",
33-
"tar.gz" => "93895a6a610c94751c890e5ee91a7f4bc0eae476b95fe30425d13f7ae88753d5",
34-
"tar.xz" => "970c322ba3e472cb0264b8ba9d4d92e87918da5d0cca53c4aba2a70545b8626d",
32+
"tar.bz2" => "8055bbe5a736986931c0c6a08b765d6d778271ec7d2d56c50a1ad259ec09f6de",
33+
"tar.gz" => "46216e05db09c0fffbf832e3b64f3722ccbdd6d4ae16d9791e41adf0a4b00641",
34+
"tar.xz" => "348476ff7ba8d95a1e28e1059430c10470c5f8110f6d9133d30153dda4cdf56a",
3535
);
3636

3737
/* PHP 5.6 Release */

‎releases/7_0_10.php

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
<?php
2+
// $Id$
3+
$_SERVER['BASE_PAGE'] = 'releases/7_0_10.php';
4+
include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc';
5+
site_header("PHP 7.0.10 Release Announcement");
6+
?>
7+
8+
<h1>PHP 7.0.10 Release Announcement</h1>
9+
10+
<p>The PHP development team announces the immediate availability of PHP
11+
7.0.10. This is a security release. Several security bugs were fixed in
12+
this release.
13+
14+
All PHP 7.0 users are encouraged to upgrade to this version.
15+
</p>
16+
17+
<p>For source downloads of PHP 7.0.10 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>,
18+
Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>.
19+
The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.0.10">ChangeLog</a>.
20+
</p>
21+
22+
<?php site_footer(); ?>

0 commit comments

Comments
 (0)