The document summarizes notable PHP updates and events from December 2016. Key points include security patches released for PHP 5.6 and 7.0, a remote code execution vulnerability in PHPMailer requiring upgrades, and new features in WordPress 4.7, CakePHP 3.3.10, and Laravel 5.3. It also lists upcoming PHP conferences in early 2017 and January topics for the online Nomad PHP meetups.

1. Last Month in PHP
December 2016
Kansas City PHP User Group

2. PHP Patch Releases
PHP 7.0.14 - Update!
● Security fixes
● php.net/ChangeLog-7.php#7.0.14
PHP 5.6.29 - Update!
● Security fixes
● php.net/ChangeLog-5.php#5.6.29
● PHP5: End of Active Support
PHP 7.1
● New Features:
○ Nullable types & Void return
type
○ Iterable pseudo type
○ Multi-Catch
○ More:
wiki.php.net/rfc#php_71
● php.net/manual/en/migration71.p
hp

3. PHPMailer Vulnerability
PHPMailer < 5.2.20 - UPGRADE!
● Remote Code Execution
○ https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10033
○ https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10045
● Popular libraries & frameworks use this:
○ SwiftMailer - Upgrade!
○ Zend Framework - Upgrade!

4. Upcoming Features in PHP RFC
No new RFCs in December

5. CMSes: Drupal
Drupal 7.53, 8.2.4
● Drupal 7.53
○ Maintenance Release
○ drupal.org/project/drupal/releases/7.53
● Drupal 8.2.4
○ Bugfix Release
○ drupal.org/project/drupal/releases/8.2.4

6. CMSes: WordPress
WordPress 4.7 - “Vaughan”
● New Theme: Twenty-Seventeen
● Shortcuts to editing content on preview
● Video headers
● Custom CSS
● REST API content endpoints
● wordpress.org/news/2016/12/vaughan

7. Frameworks - CakePHP
CakePHP 3.3.10 & 2.9.4
● 3.3.10 - bugfixes
○ bakery.cakephp.org/2016/12/11/cakephp_3310_released.html
● 2.9.4 - Feature release
○ Now supports PHP 7.1
○ bakery.cakephp.org/2016/12/23/cakephp_294_released.html

8. Frameworks - Laravel
Laravel 5.3.[27, 28]
● Laravel 5.3
○ Maintenance releases
○ Includes new Collections::partition() method
○ See: github.com/laravel/framework/blob/5.3/CHANGELOG-5.3.md

9. Frameworks - Symfony
Symfony 3.2.1, 3.1.8, 2.8.15, 2.7.22
● symfony.com/blog/symfony-3-2-1-released
● symfony.com/blog/symfony-3-1-8-released
● symfony.com/blog/symfony-2-8-15-released
● symfony.com/blog/symfony-2-7-22-released

10. Frameworks - Zend
ZF 2.4.11
● Security Release - Update!
● framework.zend.com/blog/2016-12-20-zf-2-4-11-released.html

11. PHP: The Right Way
● Welcome
○ Added a link to the site’s book
● Errors
○ Removed info about using “Whoops” in
Laravel since Laravel doesn’t use it
anymore
● Current Stable Version
○ Updated to 7.1
● Mac Setup
○ Added PHP 7.1 to homebrew setup
● Note: Every open-source project can use
your help with documentation. What are
you waiting for?

12. PHP Conferences
SunshinePHP 2017
● Feb 2-4 - Miami, FL
● KCPUG Speaker!
● 2017.sunshinephp.com
PHP UK 2017
● Feb 16-17 - London, UK
● phpconference.co.uk
Confoo.CA 2017
● Mar 8-10 - Montreal, CAN
● confoo.ca/en/yul2017
Midwest PHP 2017
● March 17-18 - Minneapolis, MN
● 2017.midwestphp.org

13. PHP Conferences - Continued
Lonestar PHP 2017
● Apr 20-22 - Dallas, TX
● Call for Papers ends 2017-01-15
○ cfp.lonestarphp.com
● Lonestarphp.com
PHP[TEK] 2017
● May 24-26 - Atlanta, GA
CoderCruise 2017
● July 16-23 - New Orleans, LA
● Call for Speakers ends 2017-01-06
○ codercruise.com/call-for-speakers
● codercruise.com

14. Nomad PHP (Online) - January 19
Nomad PHP EU - 01:00 PM CST
Build Your Frameworks Like Constructicons
● Stefan Koopmanschap (@skoop)
● nomadphp.com/nomadphp-2017-01-eu
Nomad PHP US - 08:00 PM CST
Containing Chaos with Kubernetes
● Terrence Ryan (tpryan)
● nomadphp.com/nomadphp-2017-01-us

15. Next Month in KCPHPUG
● Calling all speakers!
● Open Source Hack Night?