Everything
php
Learn Community Releases The PHP Project
Home » Releases » 7.0 » 7.0.33 »

PHP 7.0.4

PHP 7.0 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.0 is 7.0.33 which includes important security patches.

Source Code

  • PHP 7.0.4 (tar.bz2)

    • sha256: a246c503709c189ba8e1e22ed2cb22abc27da43a997ff1b3318e181baf529dcc

  • PHP 7.0.4 (tar.gz)

    • sha256: f6cdac2fd37da0ac0bbcee0187d74b3719c2f83973dfe883d5cde81c356fe0a8

  • PHP 7.0.4 (tar.xz)

    • sha256: 584e0e374e357a71b6e95175a2947d787453afc7f9ab7c55651c10491c4df532

Change Log

  • core

    • Fixed bug (Low probability segfault in zend_arena).
      Laruence
    • Fixed bug #71441 (Typehinted Generator with return in try/finally crashes).
      Bob
    • Fixed bug #71442 (forward_static_call crash).
      Laruence
    • Fixed bug #71443 (Segfault using built-in webserver with intl using symfony).
      Laruence
    • Fixed bug #71449 (An integer overflow bug in php_implode()).
      Stas
    • Fixed bug #71450 (An integer overflow bug in php_str_to_str_ex()).
      Stas
    • Fixed bug #71474 (Crash because of VM stack corruption on Magento2).
      Dmitry
    • Fixed bug #71485 (Return typehint on internal func causes Fatal error when it throws exception).
      Laruence
    • Fixed bug #71529 (Variable references on array elements don't work when using count).
      Nikita
    • Fixed bug #71601 (finally block not executed after yield from).
      Bob
    • Fixed bug #71637 (Multiple Heap Overflow due to integer overflows in xml/filter_url/addcslashes).
      CVE-2016-4344
      CVE-2016-4345
      CVE-2016-4346) (Stas

  • cli server

    • Fixed bug #71559 (Built-in HTTP server, we can download file in web by bug).
      Johannes
      Anatol

  • curl

    • Fixed bug #71523 (Copied handle with new option CURLOPT_HTTPHEADER crashes while curl_multi_exec).
      Laruence
    • Fixed memory leak in curl_getinfo().
      Leigh

  • date

    • Fixed bug #71525 (Calls to date_modify will mutate timelib_rel_time, causing date_date_set issues).
      Sean DuBois

  • fileinfo

    • Fixed bug #71434 (finfo throws notice for specific python file).
      Laruence

  • fpm

    • Fixed bug #62172 (FPM not working with Apache httpd 2.4 balancer/fcgi setup).
      Matt Haught
      Remi
    • Fixed bug #71269 (php-fpm dumped core).
      Mickaël

  • opcache

    • Fixed bug #71584 (Possible use-after-free of ZCG(cwd) in Zend Opcache).
      Yussuf Khalil

  • pcre

    • Fixed bug #71537 (PCRE segfault from Opcache).
      Laruence

  • phpdbg

    • Fixed inherited functions from unspecified files being included in phpdbg_get_executable().
      Bob

  • soap

    • Fixed bug #71610 (Type Confusion Vulnerability - SOAP / make_http_soap_request()). (CVE-2016-3185)
      Stas

  • standard

    • Fixed bug #71603 (compact() maintains references in php7).
      Laruence
    • Fixed bug #70720 (strip_tags improper php code parsing).
      Julien

  • xmlrpc

    • Fixed bug #71501 (xmlrpc_encode_request ignores encoding option).
      Hieu Le

  • zip

    • Fixed bug #71561 (NULL pointer dereference in Zip::ExtractTo).
      Laruence

PHP 7.0


  Represents a security release