Everything
php
Learn Community Releases The PHP Project
Home » Releases » 7.0 » 7.0.33 »

PHP 7.0.21

PHP 7.0 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.0 is 7.0.33 which includes important security patches.

Source Code

Change Log

  • core

    • Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly parsed).
      Manuel Mausz
    • Fixed bug #74658 (Undefined constants in array properties result in broken properties).
      Laruence
    • Fixed misparsing of abstract unix domain socket names.
      Sara
    • Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in zval_get_type).
      Nikita
    • Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from unserialize).
      Nikita
    • Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
      Stas
    • Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via php_parse_date()).
      Derick

  • dom

    • Fixed bug #69373 (References to deleted XPath query results).
      ttoohey

  • gd

    • Fixed bug #74435 (Buffer over-read into uninitialized memory).
      cmb

  • intl

    • Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message).
      libnex
    • Fixed bug #74705 (Wrong reflection on Collator::getSortKey and collator_get_sort_key).
      Tyson Andre
      Remi
    • Fixed bug #73634 (grapheme_strpos illegal memory access).
      Stas

  • mbstring

    • Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

  • oci8

    • Add TAF callback (PR #2459).
      KoenigsKind

  • opcache

    • Fixed bug #74663 (Segfault with opcache.memory_protect and validate_timestamp).
      Laruence

  • openssl

    • Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
      Stas

  • pcre

    • Fixed bug #74087 (Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)).
      Stas

  • pdo_oci

    • Support Instant Client 12.2 in --with-pdo-oci configure option.
      Tianfang Yang

  • reflection

    • Fixed bug #74673 (Segfault when cast Reflection object to string with undefined constant).
      Laruence

  • spl

    • Fixed bug #74478 (null coalescing operator failing with SplFixedArray).
      jhdxr

  • standard

    • Fixed bug #74708 (Invalid Reflection signatures for random_bytes and random_int).
      Tyson Andre
      Remi
    • Fixed bug #73648 (Heap buffer overflow in substr).
      Stas

  • ftp

    • Fixed bug #74598 (ftp:// wrapper ignores context arg).
      Sara

  • phar

    • Fixed bug #74386 (Phar::__construct reflection incorrect).
      villfa

  • soap

    • Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY).
      Dmitry

  • streams

    • Fixed bug #74556 (stream_socket_get_name() returns '\0').
      Sara

PHP 7.0


  Represents a security release