Преглед на файлове

Preparation for 1.12.20

- Updated README:
  - Updated version to stable
  - Set date for release
  - Added release notes including ZF2016-03 details
- Updated VERSION constant
Matthew Weier O'Phinney преди 9 години
родител
ревизия
880d6d0205
променени са 2 файла, в които са добавени 13 реда и са изтрити 3 реда
  1. 12 2
      README.md
  2. 1 1
      library/Zend/Version.php

+ 12 - 2
README.md

@@ -18,12 +18,22 @@ Master: [![Build Status](https://api.travis-ci.org/zendframework/zf1.png?branch=
 RELEASE INFORMATION
 ===================
 
-Zend Framework 1.12.20-dev Release.
-Released on MMM DD, YYYY.
+Zend Framework 1.12.20 Release.
+Released on September 08, 2016.
 
 IMPORTANT FIXES FOR 1.12.20
 ---------------------------
 
+**This release contains security updates:**
+
+- **ZF2016-03:** The implementation of `ORDER BY` and `GROUP BY` in
+  `Zend_Db_Select` remained prone to SQL injection when a combination of SQL
+  expressions and comments were used. This release provides a comprehensive
+  solution that identifies and removes comments prior to checking validity of
+  the statement to ensure no SQLi vectors occur. We advise always filtering user
+  input prior to invoking these methods, however, to further protect your
+  applications.
+
 See http://framework.zend.com/changelog for full details.
 
 NEW FEATURES

+ 1 - 1
library/Zend/Version.php

@@ -32,7 +32,7 @@ final class Zend_Version
     /**
      * Zend Framework version identification - see compareVersion()
      */
-    const VERSION = '1.12.20dev';
+    const VERSION = '1.12.20';
 
     /**
      * The latest stable version Zend Framework available