Everything
php
Learn Community Releases The PHP Project
Home » Releases » 7.0 » 7.0.33 »

PHP 7.0.6

PHP 7.0 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.0 is 7.0.33 which includes important security patches.

Source Code

  • PHP 7.0.6 (tar.bz2)

    • sha256: 14ddf192a9965c858c1e742a61456be2f34a4db87556172c0d76f08de96329b7

  • PHP 7.0.6 (tar.gz)

    • sha256: f6b47cb3e02530d96787ae5c7888aefbd1db6ae4164d68b88808ee6f4da94277

  • PHP 7.0.6 (tar.xz)

    • sha256: 1b237a9455e5476a425dbb9d99966bad68107747c601958cb9558a7fb49ab419

Change Log

  • core

    • Fixed bug #71930 (_zval_dtor_func: Assertion `(arr)->gc.refcount <= 1' failed).
      Laruence
    • Fixed bug #71922 (Crash on assert(new class{})).
      Nikita
    • Fixed bug #71914 (Reference is lost in "switch").
      Laruence
    • Fixed bug #71871 (Interfaces allow final and abstract functions).
      Nikita
    • Fixed Bug #71859 (zend_objects_store_call_destructors operates on realloced memory, crashing).
      Laruence
    • Fixed bug #71841 (EG(error_zval) is not handled well).
      Laruence
    • Fixed bug #71750 (Multiple Heap Overflows in php_raw_url_encode/ php_url_encode).
      Stas
    • Fixed bug #71731 (Null coalescing operator and ArrayAccess).
      Nikita
    • Fixed bug #71609 (Segmentation fault on ZTS with gethostbyname).
      krakjoe
    • Fixed bug #71414 (Inheritance, traits and interfaces).
      krakjoe
    • Fixed bug #71359 (Null coalescing operator and magic).
      krakjoe
    • Fixed bug #71334 (Cannot access array keys while uksort()).
      Nikita
    • Fixed bug #69659 (ArrayAccess, isset() and the offsetExists method).
      Nikita
    • Fixed bug #69537 (__debugInfo with empty string for key gives error).
      krakjoe
    • Fixed bug #62059 (ArrayObject and isset are not friends).
      Nikita
    • Fixed bug #71980 (Decorated/Nested Generator is Uncloseable in Finally).
      Nikita

  • bcmath

    • Fixed bug #72093 (bcpowmod accepts negative scale and corrupts _one_ definition).
      Stas

  • curl

    • Fixed bug #71831 (CURLOPT_NOPROXY applied as long instead of string).
      Michael Sierks

  • date

    • Fixed bug #71889 (DateInterval::format Segmentation fault).
      Thomas Punt

  • exif

    • Fixed bug #72094 (Out of bounds heap read access in exif header processing).
      Stas

  • gd

    • Fixed bug #71912 (libgd: signedness vulnerability). (CVE-2016-3074)
      Stas

  • intl

    • Fixed bug #71516 (IntlDateFormatter looses locale if pattern is set via constructor).
      Anatol
    • Fixed bug #70455 (Missing constant: IntlChar::NO_NUMERIC_VALUE).
      Anatol
    • Fixed bug #70451, #70452 (Inconsistencies in return values of IntlChar methods).
      Daniel Persson
    • Fixed bug #68893 (Stackoverflow in datefmt_create).
      Anatol
    • Fixed bug #66289 (Locale::lookup incorrectly returns en or en_US if locale is empty).
      Anatol
    • Fixed bug #70484 (selectordinal doesn't work with named parameters).
      Anatol
    • Fixed bug #72061 (Out-of-bounds reads in zif_grapheme_stripos with negative offset).
      Stas

  • odbc

    • Fixed bug #63171 (Script hangs after max_execution_time).
      Remi

  • opcache

    • Fixed bug #71843 (null ptr deref ZEND_RETURN_SPEC_CONST_HANDLER).
      Laruence

  • pdo

    • Fixed bug #52098 (Own PDOStatement implementation ignore __call()).
      Daniel kalaspuffar
      Julien
    • Fixed bug #71447 (Quotes inside comments not properly handled).
      Matteo

  • pdo_dblib

    • Fixed bug #71943 (dblib_handle_quoter needs to allocate an extra byte).
      Adam Baratz
    • Add DBLIB-specific attributes for controlling timeouts.
      Adam Baratz

  • pdo_pgsql

    • Fixed bug #62498 (pdo_pgsql inefficient when getColumnMeta() is used).
      Joseph Bylund

  • postgres

    • Fixed bug #71820 (pg_fetch_object binds parameters before call constructor).
      Anatol
    • Fixed bug #71998 (Function pg_insert does not insert when column type = inet).
      Anatol

  • soap

    • Fixed bug #71986 (Nested foreach assign-by-reference creates broken variables).
      Laruence

  • spl

    • Fixed bug #71838 (Deserializing serialized SPLObjectStorage-Object can't access properties in PHP).
      Nikita
    • Fixed bug #71735 (Double-free in SplDoublyLinkedList::offsetSet).
      Stas
    • Fixed bug #67582 (Cloned SplObjectStorage with overwritten getHash fails offsetExists()).
      Nikita
    • Fixed bug #52339 (SPL autoloader breaks class_exists()).
      Nikita

  • standard

    • Fixed bug #71995 (Returning the same var twice from __sleep() produces broken serialized data).
      Laruence
    • Fixed bug #71940 (Unserialize crushes on restore object reference).
      Laruence
    • Fixed bug #71969 (str_replace returns an incorrect resulting array after a foreach by reference).
      Laruence
    • Fixed bug #71891 (header_register_callback() and register_shutdown_function()).
      Laruence
    • Fixed bug #71884 (Null pointer deref (segfault) in stream_context_get_default).
      Laruence
    • Fixed bug #71840 (Unserialize accepts wrongly data).
      Ryat
      Laruence
    • Fixed bug #71837 (Wrong arrays behaviour).
      Laruence
    • Fixed bug #71827 (substr_replace bug, string length).
      krakjoe
    • Fixed bug #67512 (php_crypt() crashes if crypt_r() does not exist or _REENTRANT is not defined).
      Nikita
    • Fixed bug #72116 (array_fill optimization breaks implementation).
      Bob

  • xml

    • Fixed bug #72099 (xml_parse_into_struct segmentation fault).
      Stas

  • zip

    • Fixed bug #71923 (integer overflow in ZipArchive::getFrom*). (CVE-2016-3078)
      Stas

PHP 7.0


  Represents a security release