From 98a4ef9bce1ec92f66fff3485a3399956ea99f06 Mon Sep 17 00:00:00 2001
From: Sara Golemon <pollita@php.net>
Date: Thu, 10 Jan 2019 13:53:04 -0500
Subject: [PATCH] 7.1.26 Announcement

---
 ChangeLog-7.php                  | 38 ++++++++++++++++++++++++++++++++
 archive/archive.xml              |  1 +
 archive/entries/2019-01-10-3.xml | 24 ++++++++++++++++++++
 include/releases.inc             | 33 +++++++++++++++++++++++++++
 include/version.inc              | 10 ++++-----
 releases/7_1_26.php              | 20 +++++++++++++++++
 6 files changed, 121 insertions(+), 5 deletions(-)
 create mode 100644 archive/entries/2019-01-10-3.xml
 create mode 100644 releases/7_1_26.php

diff --git a/ChangeLog-7.php b/ChangeLog-7.php
index 199d13f00..61ccb77dd 100644
--- a/ChangeLog-7.php
+++ b/ChangeLog-7.php
@@ -176,6 +176,44 @@ site_header("PHP 7 ChangeLog", array("current" => "docs", "css" => array("change
 </ul>
 <!-- }}} --></section>
 
+<section class="version" id="7.1.26"><!-- {{{ 7.1.26 -->
+<h3>Version 7.1.26</h3>
+<b><?php release_date('10-Jan-2019'); ?></b>
+<ul><li>Core:
+<ul>
+  <li><?php bugfix(77369); ?> (memcpy with negative length via crafted DNS response).</li>
+</ul></li>
+<li>GD:
+<ul>
+  <li><?php bugfix(77269); ?> (efree() on uninitialized Heap data in imagescale leads to use-after-free).</li>
+  <li><?php bugfix(77270); ?> (imagecolormatch Out Of Bounds Write on Heap).</li>
+</ul></li>
+<li>IMAP:
+<ul>
+  <li><?php bugfix(77020); ?> (null pointer dereference in imap_mail).</li>
+</ul></li>
+<li>Mbstring:
+<ul>
+  <li><?php bugfix(77370); ?> (Buffer overflow on mb regex functions - fetch_token).</li>
+  <li><?php bugfix(77371); ?> (heap buffer overflow in mb regex functions - compile_string_node).</li>
+  <li><?php bugfix(77381); ?> (heap buffer overflow in multibyte match_at).</li>
+  <li><?php bugfix(77382); ?> (heap buffer overflow due to incorrect length in expand_case_fold_string).</li>
+  <li><?php bugfix(77385); ?> (buffer overflow in fetch_token).</li>
+  <li><?php bugfix(77394); ?> (Buffer overflow in multibyte case folding - unicode).</li>
+  <li><?php bugfix(77418); ?> (Heap overflow in utf32be_mbc_to_code).</li>
+</ul></li>
+<li>Phar:
+<ul>
+  <li><?php bugfix(77247); ?> (heap buffer overflow in phar_detect_phar_fname_ext).</li>
+</ul></li>
+<li>Xmlrpc:
+<ul>
+  <li><?php bugfix(77242); ?> (heap out of bounds read in xmlrpc_decode()).</li>
+  <li><?php bugfix(77380); ?> (Global out of bounds read in xmlrpc base64 code).</li>
+</ul></li>
+</ul>
+<!-- }}} --></section>
+
 <section class="version" id="7.0.33"><!-- {{{ 7.0.33 -->
 <h3>Version 7.0.33</h3>
 <b><?php release_date('06-Dec-2018'); ?></b>
diff --git a/archive/archive.xml b/archive/archive.xml
index d2680371a..cbc51d637 100644
--- a/archive/archive.xml
+++ b/archive/archive.xml
@@ -9,6 +9,7 @@
     <uri>http://php.net/contact</uri>
     <email>php-webmaster@lists.php.net</email>
   </author>
+  <xi:include href="entries/2019-01-10-3.xml"/>
   <xi:include href="entries/2019-01-10-2.xml"/>
   <xi:include href="entries/2019-01-10-1.xml"/>
   <xi:include href="entries/2018-12-15-1.xml"/>
diff --git a/archive/entries/2019-01-10-3.xml b/archive/entries/2019-01-10-3.xml
new file mode 100644
index 000000000..67c9747ea
--- /dev/null
+++ b/archive/entries/2019-01-10-3.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="utf-8"?>
+<entry xmlns="http://www.w3.org/2005/Atom">
+  <title>PHP 7.1.26 Release Announcement</title>
+  <id>http://php.net/archive/2019.php#id2019-01-10-3</id>
+  <published>2019-01-10T18:52:00+00:00</published>
+  <updated>2019-01-10T18:52:00+00:00</updated>
+  <category term="frontpage" label="PHP.net frontpage news"/>
+  <category term="releases" label="New PHP release"/>
+  <link href="http://php.net/index.php#id2019-01-10-3" rel="alternate" type="text/html"/>
+  <link href="http://php.net/archive/2019.php#id2019-01-10-3" rel="via" type="text/html"/>
+  <content type="xhtml">
+    <div xmlns="http://www.w3.org/1999/xhtml">
+       <p>The PHP development team announces the immediate availability of PHP
+       7.1.26. This is a security release which also contains several bug fixes.</p>
+     
+       <p>All PHP 7.1 users are encouraged to upgrade to this version.</p>
+     
+       <p>For source downloads of PHP 7.1.26 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>,
+       Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>.
+       The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.1.26">ChangeLog</a>.
+       </p>
+    </div>
+  </content>
+</entry>
diff --git a/include/releases.inc b/include/releases.inc
index 99e6ffbc6..1666de43d 100644
--- a/include/releases.inc
+++ b/include/releases.inc
@@ -2,6 +2,39 @@
 $OLDRELEASES = array (
   7 => 
   array (
+    '7.1.25' => 
+    array (
+      'announcement' => 
+      array (
+        'English' => '/releases/7_1_25.php',
+      ),
+      'source' => 
+      array (
+        0 => 
+        array (
+          'filename' => 'php-7.1.25.tar.bz2',
+          'name' => 'PHP 7.1.25 (tar.bz2)',
+          'sha256' => '002cdc880ac7cfaede2c389204d366108847db0f3ac72edf1ba95c0577f9aaac',
+          'date' => '06 Dec 2018',
+        ),
+        1 => 
+        array (
+          'filename' => 'php-7.1.25.tar.gz',
+          'name' => 'PHP 7.1.25 (tar.gz)',
+          'sha256' => '7dc40e202140e8b4fb3d992c15a68d98dc06b805e6b218497d260abbe51f5958',
+          'date' => '06 Dec 2018',
+        ),
+        2 => 
+        array (
+          'filename' => 'php-7.1.25.tar.xz',
+          'name' => 'PHP 7.1.25 (tar.xz)',
+          'sha256' => '0fd8dad1903cd0b2d615a1fe4209f99e53b7292403c8ffa1919c0f4dd1eada88',
+          'date' => '06 Dec 2018',
+        ),
+      ),
+      'date' => '10 Jan 2019',
+      'museum' => false,
+    ),
     '7.3.0' => 
     array (
       'announcement' => 
diff --git a/include/version.inc b/include/version.inc
index 4ad11f220..653f1a9a1 100644
--- a/include/version.inc
+++ b/include/version.inc
@@ -43,12 +43,12 @@ $PHP_7_2_SHA256     = array(
 $PHP_7_1_RC = false; // Current RC version (e.g., '5.6.7RC1') or false
 $PHP_7_1_RC_DATE = "25 Oct 2018";
 
-$PHP_7_1_VERSION         = "7.1.25";
-$PHP_7_1_DATE            = "06 Dec 2018";
+$PHP_7_1_VERSION         = "7.1.26";
+$PHP_7_1_DATE            = "10 Jan 2019";
 $PHP_7_1_SHA256     = array(
-    'tar.bz2'       => '002cdc880ac7cfaede2c389204d366108847db0f3ac72edf1ba95c0577f9aaac',
-    'tar.gz'        => '7dc40e202140e8b4fb3d992c15a68d98dc06b805e6b218497d260abbe51f5958',
-    'tar.xz'        => '0fd8dad1903cd0b2d615a1fe4209f99e53b7292403c8ffa1919c0f4dd1eada88',
+    'tar.bz2'       => '5b351ca86bc7e4600778aaf1d61ab9e4e38864efa86ab4cc4d5b02ea7f542ae6',
+    'tar.gz'        => '069315d3c3f964fd165bbbb3c2fc56005813e2cf97bed05055318dcc4e775328',
+    'tar.xz'        => '10b7ae634c12852fae52a22dc2262e5f12418ad59fd20da2d00d71a212235d31',
 );
 
 /* PHP 7.0 Release */
diff --git a/releases/7_1_26.php b/releases/7_1_26.php
new file mode 100644
index 000000000..e118e82b0
--- /dev/null
+++ b/releases/7_1_26.php
@@ -0,0 +1,20 @@
+<?php
+$_SERVER['BASE_PAGE'] = 'releases/7_1_26.php';
+include_once $_SERVER['DOCUMENT_ROOT'] . '/include/prepend.inc';
+site_header("PHP 7.1.26 Release Announcement");
+?>
+
+    <h1>PHP 7.1.26 Release Announcement</h1>
+
+  <p>The PHP development team announces the immediate availability of PHP
+  7.1.26. This is a security release which also contains several bug fixes.</p>
+
+  <p>All PHP 7.1 users are encouraged to upgrade to this version.</p>
+
+  <p>For source downloads of PHP 7.1.26 please visit our <a href="http://www.php.net/downloads.php">downloads page</a>,
+  Windows source and binaries can be found on <a href="http://windows.php.net/download/">windows.php.net/download/</a>.
+  The list of changes is recorded in the <a href="http://www.php.net/ChangeLog-7.php#7.1.26">ChangeLog</a>.
+  </p>
+
+
+<?php site_footer(); ?>