PHP Bugfix und Security Release – 7.2.2 – 7.1.14 – 7.0.27 – 5.6.33

Die Skriptsprache PHP wurde in den Zweigen

• 5.6.
• 7.0
• 7.1und
• 7.2

vor ein paar Tagen als Bugfix und Security Release aktualisiert. Nachfolgend die Release Notes

PHP 5.6.33 Release Notes

04 Jan 2018

• GD:
  • Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx). (CVE-2018-5711)
• Phar:
  • Fixed bug #74782 (Reflected XSS in .phar 404 page). (CVE-2018-5712)

PHP 7.0.27 Release Notes

04 Jan 2018

• CLI Server:
  • Fixed bug #60471 (Random „Invalid request (unexpected EOF)“ using a router script).
• Core:
  • Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
  • Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26).
• FPM:
  • Fixed bug #64938 (libxml_disable_entity_loader setting is shared between requests).
• GD:
  • Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx). (CVE-2018-5711)
• Opcache:
  • Fixed bug #75579 (Interned strings buffer overflow may cause crash).
• PCRE:
  • Fixed bug #74183 (preg_last_error not returning error code after error).
• Phar:
  • Fixed bug #74782 (Reflected XSS in .phar 404 page). (CVE-2018-5712)
• Standard:
  • Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP segment fault).
  • Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing).
• Zip:
  • Fixed bug #75540 (Segfault with libzip 1.3.1).

PHP 7.1.14 Release Notes

01 Feb 2018

• Core:
  • Fixed bug #75679 (Path 260 character problem).
  • Fixed bug #75786 (segfault when using spread operator on generator passed by reference).
  • Fixed bug #75799 (arg of get_defined_functions is optional).
  • Fixed bug #75396 (Exit inside generator finally results in fatal error).
  • Fixed bug #75079 (self keyword leads to incorrectly generated TypeError when in closure in trait).
• FCGI:
  • Fixed bug #75794 (getenv() crashes on Windows 7.2.1 when second parameter is false).
• IMAP:
  • Fixed bug #75774 (imap_append HeapCorruction).
• Opcache:
  • Fixed bug #75720 (File cache not populated after SHM runs full).
  • Fixed bug #75579 (Interned strings buffer overflow may cause crash).
• PGSQL:
  • Fixed bug #75671 (pg_version() crashes when called on a connection to cockroach).
• Readline:
  • Fixed bug #75775 (readline_read_history segfaults with empty file).
• SAPI:
  • Fixed bug #75735 (Segmentation fault in sapi_register_post_entry).
• SOAP:
  • Fixed bug #70469 (SoapClient generates E_ERROR even if exceptions=1 is used).
  • Fixed bug #75502 (Segmentation fault in zend_string_release).
• SPL:
  • Fixed bug #75717 (RecursiveArrayIterator does not traverse arrays by reference).
  • Fixed bug #75242 (RecursiveArrayIterator doesn’t have constants from parent class).
  • Fixed bug #73209 (RecursiveArrayIterator does not iterate object properties).
• Standard:
  • Fixed bug #75781 (substr_count incorrect result).

PHP 7.2.2 Release Notes

01 Feb 2018

• Core:
  • Fixed bug #75742 (potential memleak in internal classes’s static members).
  • Fixed bug #75679 (Path 260 character problem).
  • Fixed bug #75614 (Some non-portable == in shell scripts).
  • Fixed bug #75786 (segfault when using spread operator on generator passed by reference).
  • Fixed bug #75799 (arg of get_defined_functions is optional).
  • Fixed bug #75396 (Exit inside generator finally results in fatal error).
• FCGI:
  • Fixed bug #75794 (getenv() crashes on Windows 7.2.1 when second parameter is false).
• IMAP:
  • Fixed bug #75774 (imap_append HeapCorruction).
• Opcache:
  • Fixed bug #75720 (File cache not populated after SHM runs full).
  • Fixed bug #75687 (var 8 (TMP) has array key type but not value type).
  • Fixed bug #75698 (Using @ crashes php7.2-fpm).
  • Fixed bug #75579 (Interned strings buffer overflow may cause crash).
• PDO:
  • Fixed bug #75616 (PDO extension doesn’t allow to be built shared on Darwin).
• PDO MySQL:
  • Fixed bug #75615 (PDO Mysql module can’t be built as module).
• PGSQL:
  • Fixed bug #75671 (pg_version() crashes when called on a connection to cockroach).
• Readline:
  • Fixed bug #75775 (readline_read_history segfaults with empty file).
• SAPI:
  • Fixed bug #75735 (Segmentation fault in sapi_register_post_entry).
• SOAP:
  • Fixed bug #70469 (SoapClient generates E_ERROR even if exceptions=1 is used).
  • Fixed bug #75502 (Segmentation fault in zend_string_release).
• SPL:
  • Fixed bug #75717 (RecursiveArrayIterator does not traverse arrays by reference).
  • Fixed bug #75242 (RecursiveArrayIterator doesn’t have constants from parent class).
  • Fixed bug #73209 (RecursiveArrayIterator does not iterate object properties).
• Standard:
  • Fixed bug #75781 (substr_count incorrect result).
  • Fixed bug #75653 (array_values don’t work on empty array).
• Zip:
  • Display headers (buildtime) and library (runtime) versions in phpinfo (with libzip >= 1.3.1).

JARVIS

Interessiert in verschiedenste IT Themen, schreibe ich in diesem Blog über Software, Hardware, Smart Home, Games und vieles mehr. Ich berichte z.B. über die Installation und Konfiguration von Software als auch von Problemen mit dieser. News sind ebenso spannend, sodass ich auch über Updates, Releases und Neuigkeiten aus der IT berichte. Letztendlich nutze ich Taste-of-IT als eigene Dokumentation und Anlaufstelle bei wiederkehrenden Themen. Ich hoffe ich kann dich ebenso informieren und bei Problemen eine schnelle Lösung anbieten. Wer meinen Aufwand unterstützen möchte, kann gerne eine Tasse oder Pod Kaffe per PayPal spenden – vielen Dank.