From ed812416e03c34dc0cc9a1fb686dfb58c6711ea9 Mon Sep 17 00:00:00 2001 From: Matthew Weier O'Phinney Date: Wed, 13 Apr 2016 10:31:51 -0500 Subject: [PATCH] 1.12.18 preparations - Updated VERSION constant to 1.12.18 - Updated README: - set stable version - set release date - added verbiage around ZF2016-01 --- README.md | 12 ++++++++++-- library/Zend/Version.php | 2 +- 2 files changed, 11 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index e1bf485684..eb2ed0e231 100644 --- a/README.md +++ b/README.md @@ -7,12 +7,20 @@ Master: [![Build Status](https://api.travis-ci.org/zendframework/zf1.png?branch= RELEASE INFORMATION =================== -Zend Framework 1.12.18dev Release. -Released on MMM DD, YYYY. +Zend Framework 1.12.18 Release. +Released on Apr 13, 2016. IMPORTANT FIXES FOR 1.12.18 --------------------------- +This release contains security fixes: + +- **ZF2016-01**: A number of classes, including `Zend_Filter_Encrypt`, + `Zend_Form_Element_Hash`, `Zend_Gdata_HttpClient`, `Zend_Ldap_Attribute`, + and `Zend_OpenId`, were using randomization methods with insufficient entropy. + They have been updated to each use `Zend_Crypt_Math`, and the latter was + updated to use PHP 7's `random_bytes()` and `random_int()` where feasible. + See http://framework.zend.com/changelog for full details. NEW FEATURES diff --git a/library/Zend/Version.php b/library/Zend/Version.php index 461106d77d..645ac0cc97 100644 --- a/library/Zend/Version.php +++ b/library/Zend/Version.php @@ -32,7 +32,7 @@ final class Zend_Version /** * Zend Framework version identification - see compareVersion() */ - const VERSION = '1.12.18dev'; + const VERSION = '1.12.18'; /** * The latest stable version Zend Framework available