DVB-Cube <<< Das deutsche PC und DVB-Forum >>>

PC-Ecke => # Hard-und Software Allgemein => Thema gestartet von: SiLæncer am 01 April, 2005, 13:29

Titel: Neue Versionen der Skriptsprache PHP
Beitrag von: SiLæncer am 01 April, 2005, 13:29
Die freie Webskriptsprache PHP ist in neuen Versionen erhältlich. PHP 4.3.11 umfasst über 70 Bugfixes, die sich seit der letzten Version angesammelt hatten -- darunter Sicherheitslücken unter anderem in der Verarbeitung von Bilddateien und bei der Ansteuerung der Datenbank FreeBase.

In der überarbeiteten Version 5.0.4 sind über 100 Fehler behoben worden, die teilweise ebenfalls sicherheitsrelevant waren. Außerdem unterstützt PHP 5 nun SNMPv2; beide Ausgaben der Skriptsprache wurden um Funktionen für Oracles Instant Client erweitert.

Details zu den Änderungen finden sich in den Changelogs für PHP 4.3.11 und PHP 5.0.4.

Quelle und Links : http://www.heise.de/newsticker/meldung/58138
Titel: PHProjekt geht in die fünfte Runde
Beitrag von: SiLæncer am 26 Juni, 2005, 17:03
Nach fast einem Jahr harter Entwicklerarbeit an der Open-Source-Groupware-Suite PHProjekt knallen jetzt die Sektkorken: PHProjekt 5.0 is out! Die neue Software soll wesentlich benutzerfreundlicher sein und mit neuen Funktionen aufwarten, die insbesondere viele Nutzer und große Datenmengen managen können. Zur Gestaltung der Bedienoberfläche haben die Entwickler ausschließlich "Cascading Style Sheets" (CSS) eingesetzt; alle Frames wurden entfernt. Zum Download steht die neue Version allerdings noch nicht.

Ein separates relationales Datenbankmanagementsystem (RDBMS) wie MySQL, Postgres oder Oracle soll jetzt nicht mehr notwendig sein, weil PHProjekt 5 das Datenbankformat SQLite unterstützt, das Daten in einer einzelnen Datei auf Projekt-Ebene abspeichert. Eine Chart-Bibliothek erlaubt es, Gantt-Diagramme zum Beispiel für Präsentationen oder Arbeitspapiere auszudrucken. Gantt-Balkendiagramme zeigen im Überblick die Aktivitäten und Aufgaben jedes einzelnen Projektmitglieds an. Verschiebt der Administrator ganze Projektzweige, macht ihn ein Kollisionscheck auf Probleme aufmerksam, die durch die Verschiebung entstehen könnten.

Der neue Kalender sucht selbstständig zum Beispiel nach Konferenzterminen, zu denen alle eingeladenen Gäste noch nichts vorhaben. Der Organisator muss sich nicht selbst der Mühe unterziehen. Der in JavaScript geschriebene integrierte HTML-Editor FCK soll die Benutzung externer HTML-Editoren überflüssig machen und der Modul-Designer enthält jetzt auch einen Dateimanager, ein Todo-Verwaltungssystem, einen Helpdesk und einen eigenen Email-Client.

Quelle und Links : http://www.heise.de/newsticker/meldung/61055
Titel: PHP 4.4.0 beseitigt kurioses Problem in der Speicherverwaltung
Beitrag von: SiLæncer am 12 Juli, 2005, 15:55
Die PHP-Entwickler haben den 4er-Ast der Open-Source-Skriptsprache aktualisiert. Bei PHP 4.4.0 handelt es sich um eine Bugfix-Release, die neben einem schwer wiegenden Problem in der Speicherverwaltung auch um eine Reihe kleinerer Fehler ärmer ist. Das Speicherverwaltungsproblem konnte zu bizarren Situationen bei der Abarbeitung des Codes führen, in dessen Folge Variablen oder Objekte urplötzlich ihren Typ geändert haben.

Das PHP-Team weist darauf hin, dass sich mit der neuen Version die PHP-interne Programmierschnittstelle (API) geändert hat. Wer seine PHP-Umgebung mit Modulen erweitert hat, müsse daher deren sämtliche Bestandteile neu übersetzen.

Die Details der Änderungen verrät das Changelog. Die neue Version steht als Quelltext und als vorkompiliertes Windows-Binary zum Download bereit.

Quelle und Links : http://www.heise.de/newsticker/meldung/61607
Titel: PHP ...
Beitrag von: SiLæncer am 07 September, 2005, 15:21
Das PHP-Team hat den 5er-Ast seiner Open-Source-Skriptsprache vornehmlich um zahlreiche kleinere Bugs bereinigt. Außerdem enthält PHP 5.0.5 nun die PCRE-Bibliothek (Perl Compatible Regular Expressions) in Version 5 aus der Anfang August als Release Candidate veröffentlichten PHP-Version 5.1.

Sämtliche Änderungen und Neuerungen dokumentiert wie gewohnt das Changelog. PHP 5.0.5 steht ab sofort im Quelltext und vorkompiliertes Windows-Binary zum Download bereit.

Quelle und Links : http://www.heise.de/newsticker/meldung/63685 (http://www.heise.de/newsticker/meldung/63685)
Titel: PHP 4.4.1 kann Anwendungen lahm legen
Beitrag von: SiLæncer am 07 November, 2005, 16:37
Die kürzlich zum Schließen mehrerer Sicherheitslücken veröffentlichte PHP-Version 4.4.1 enthält einen Fehler, durch den PHP-Programme unter Umständen hängen bleiben können. Betroffen von dem in der Fehlerdatenbank unter der ID #35067 geführten Bug sind die zur Verarbeitung von Arrays genutzten Funktionen next(), prev() und reset(), sofern der Funktionsparameter keinen vollwertigen Array referenziert.

Probleme treten beispielsweise im Werbemanagement-System phpAdsNew und im Webmailer SquirrelMail zu Tage, es dürften aber auch viele andere PHP-Applikationen betroffen sein. In den aktuellen CVS-Snapshots von PHP4 wurde der Fehler zwar behoben, eine offizielle Version 4.4.2 ist allerdings noch nicht angekündigt. Von einem Downgrade auf Version 4.4.0, in der das Problem nicht auftritt, ist auf Grund der bekannten Sicherheitslücken aber in der Regel abzuraten.

Quelle und Links : http://www.heise.de/newsticker/meldung/65834
Titel: Erster Release Candidate von PHP 5.2
Beitrag von: spoke1 am 25 Juli, 2006, 10:35


Das PHP-Team hat den ersten Release Candidate der kommenden Version 5.2 seiner Open-Source-Skriptsprache PHP veröffentlicht. An neuen Funktionen listet das Changelog beispielsweise Module für das Datenaustauschformat JSON oder zum Zugriff auf ZIP-Archive. Eine verbesserte Speicherverwaltung in der Zend Engine soll für weniger Overhead bei der Speicherallokation und damit bessere Performance sorgen.


mehr: http://www.heise.de/newsticker/meldung/75883
Titel: Beta von PHP 5.3 veröffentlicht
Beitrag von: SiLæncer am 30 Januar, 2009, 14:50
Das PHP-Entwicklungsteam hat für das künftige PHP 5.3 eine Beta-Version veröffentlicht und lädt alle Interessierten dazu ein, die neue Version der Web-Programmiersprache ausgiebig zu testen. Verglichen mit den vorhergehenden Alpha-Releases gibt es weniger neue Features, doch ist es den Entwicklern zufolge ein Blick auf die News-Liste wert, besonders wenn man bereits die Alpha-Versionen getestet hat. Neben rund 40 Bugfixes gibt es etwa 50 Überarbeitungen und Erweiterungen.

Vorige Woche hatte das Entwicklungsteam angedeutet, dass es nichts mit dem für das erste Quartal geplanten Veröffentlichungstermin von PHP 5.3 werden könnte. Es bittet darum, die Beta gründlich zu testen und Fehler anzuzeigen, um eher früher als später offene Punkte angehen zu können, sodass die Veröffentlichung der 5.3-Version möglichst nahe am geplanten Release-Termin wahrgenommen werde.

http://schlueters.de/blog/archives/98-PHP-5.3-reached-beta-status.html

Quelle : www.heise.de
Titel: PHP 5.2.9 beseitigt rund 50 Fehler
Beitrag von: SiLæncer am 27 Februar, 2009, 13:07
Neue Version bereinigt einige Sicherheitslücken

Mit der Veröffentlichung von PHP 5.2.9 beseitigen die Entwickler der freien Scriptsprache rund 50 Fehler in der Software. Vor allem Nutzern der XML-Erweiterung raten die Entwickler zum Update.
Wie üblich enthält die neue PHP-Version einige Sicherheitsupdates. Insgesamt wurde rund 50 Bugs in der Software beseitigt. Wer die XML-Erweiterung libxml 2.7 nutzt, sollte unbedingt auf die neue PHP-Version umsteigen, da hier ein größerer Fehler im Zusammenspiel mit CDATA beseitigt wurde.

PHP 5.2.9 steht ab sofort unter php.net zum Download bereit.

Quelle : www.golem.de
Titel: Release Candidate von PHP 5.3.0 veröffentlicht
Beitrag von: SiLæncer am 25 März, 2009, 12:28
Namespaces, Lambda-Funktionen, Closures und Late Static Binding

Mit der Veröffentlichung von PHP 5.3.0 RC1 nähert sich die Entwicklung des nächsten größeren Updates für PHP der Fertigstellung. Die neue Version bringt einige Funktionen mit, die ursprünglich für PHP 6 vorgesehen waren.
Zu den wesentlichen Neuerungen von PHP 5.3 zählt die Einführung von Namespaces, die seit der dritten Alphaversion Teil der Scriptsprache sind. Diese Namensräume kapseln Funktionen und Klassen ein, wodurch sich Programmierer keine Gedanken mehr machen müssen, ob ein Funktions- oder Klassenname bereits verwendet wird. Sie waren ursprünglich erst für PHP 6 anvisiert.

Ebenfalls neu sind Lambda-Funktionen, auch bekannt als anonyme Funktionen, zum Beispiel in JavaScript. Sie sind ein reguläres Sprachelement funktionaler Sprachen und werden nicht explizit mit einem Namen deklariert und unter diesem aufgerufen, sondern der Funktionskörper muss einer Variablen zugewiesen werden. Deshalb kann eine Lambda-Funktion auch als Über- oder Rückgabewert einer Funktion übergeben werden.

Zusammen mit Lambda-Funktionen werden auch sogenannte Closures eingeführt. Lambda-Funktionen werden häufig innerhalb einer Funktion oder Methode definiert, aber zumeist nicht darin ausgeführt. Das führt zu Problemen mit der Sichtbarkeit von Variablen innerhalb der Lambda-Funktion. In funktionalen Sprachen sind äußere Variablen standardmäßig innerhalb der Lambda-Funktion sichtbar. In PHP hingegen müssen erforderliche Variablen explizit mit dem neuen Schlüsselwort use in die Lambda-Funktion importiert werden.

Mit dem neuen Prefix static:: für Methodenaufrufe wird "Late static binding" eingeführt. Es kann für den statischen Aufruf einer Methode innerhalb einer Klassenmethode verwendet werden, ohne dass der Klassenname bekannt ist. Es reicht, wenn die Methode innerhalb der Klasse definiert oder von einer Klasse geerbt wurde.

Die neue Metamethode für Klassen __callStatic() erlaubt es, statische Aufrufe undefinierter Klassenmethoden abzufangen und auszuwerten, analog zu __call() für Methodenaufrufe auf instanzierte Objekte.

Darüber hinaus versprechen die Entwickler eine verbesserte Geschwindigkeit, eine optionale Garbage-Collection für zyklische Referenzen und ebenfalls optional mysqlnd als nativen Ersatz für libmysql. Verbessert wurde die Windows-Unterstützung einschließlich VC6 und VC9 Binarys und es werden einige neue Erweiterung mitgeliefert: ext/phar, ext/intl, ext/fileinfo, ext/sqlite3 und ext/enchant.

Zugleich entfallen einige Erweiterungen (ext/mhash, ext/msql, ext/pspell, ext/sybase), andere wurden in PECL verschoben (ext/ming, ext/fbsql, ext/ncurses und ext/fdf). Zudem wurde die Nutzung interner APIs vereinheitlicht.

Die PHP-Entwickler raten Nutzern von PHP 5, die neue Version zu testen, denn vermutlich wird PHP 5.3.0 den Zweig 5.2 ersetzen, das heißt Sicherheitsupdates werden nur noch für die neue Version erscheinen. Hilfestellung beim Umstieg sollen Upgrade Notes geben.

PHP 5.3.0 RC1 steht ab sofort unter qa.php.net zum Download bereit.

Quelle : www.golem.de
Titel: 2. Release Candidate von PHP 5.3
Beitrag von: SiLæncer am 08 Mai, 2009, 09:26
Die PHP-Entwickler haben für die demnächst zu erwartende Version 5.3 der populären Web-Programmiersprache den zweiten Release Candidate zum Testen freigegeben. PHP 5.3, das die Entwickler als größeres Release preisen, enthält zahlreiche grundlegende Erweiterungen und viele neue Funktionen. Hierunter sind unter anderem die Unterstützung für Namespaces, PHAR-Archive, Lambda-Funktionen und Closures-Klassen, Nowdoc-Syntax und Goto-Anweisungen zu erwähnen.

Der Fokus des neuen Release Candidate lag auf Performanceüberarbeitungen und Bugfixes. Mit einem weiteren RC ist in zwei bis drei Wochen zu rechnen, bevor es an die finale Freigabe geht.

Quelle : www.heise.de
Titel: Release Candidates für PHP 5.2.10 und PHP 5.3.0
Beitrag von: SiLæncer am 15 Juni, 2009, 14:08
Das PHP-Projekt hat einen zweiten Release Candidate (RC) für PHP 5.2.10 und einen dritten RC für PHP 5.3.0 veröffentlicht (http://qa.php.net/). Bei beiden RCs konzentrieren sich die Entwickler auf Bugfixes und Stabilität; sie hoffen, dass nur noch kleinere Änderungen vorgenommen werden müssen, bevor sie einen weiteren RC folgen lassen oder die finale stabile Versionen veröffentlichen können.

PHP 5.2.10 ist eine Wartungs-Release der PHP-5.2-Entwicklungsschiene. PHP 5.3.0 hingegen ist die neu entwickelte Version der Programmiersprache, die neue Funktionen wie Namensräume, späte Bindung für Klassenmethoden, Lambda-Funktionen und Closures enthält. Mit einem finalen Release ist in Kürze zu rechnen.

Quelle : www.heise.de (http://www.heise.de)

Titel: PHP 5.2.10 ist fertig
Beitrag von: SiLæncer am 19 Juni, 2009, 11:14
Nur wenige Tage nach dem zweiten Release Candidate gibt es jetzt die fertige Version von PHP 5.2.10 (http://www.php.net/downloads.php#v5). Die neue Version enthält über 100 Bugfixes, darunter einen, der sicherheitsrelevant ist – exif_read_data() führt zu Schutzverletzungen bei gewissen beschädigten .jpeg-Dateien. Die Entwickler empfehlen das Upgrade zur neuen Release.

Für PHP 5.3.0, die neu entwickelte Version der Programmiersprache, gibt es jetzt den vierten Release Candidate. Sie enthält neue Funktionen wie Namensräume, späte Bindung für Klassenmethoden, Lambda-Funktionen und Closures. Mit einer finalen Release ist in Kürze zu rechnen.

Quelle : www.heise.de (http://www.heise.de)
Titel: Veröffentlichung von PHP 5.3.0 verschoben
Beitrag von: SiLæncer am 25 Juni, 2009, 08:14
Neues Erscheinungsdatum ist der 30.6.2009

Aufgrund noch offener Bugs, bei denen PHP abstürzen kann, wurde die Veröffentlichung kurzfristig verschoben. Einige weniger kritische Korrekturen werden erst in PHP 5.3.1 erfolgen.
Auf der PHP-Internals-Mailingliste gab der Release-Manager für PHP 5.3, Lukas Kahwe Smith, bekannt, dass die Veröffentlichung von PHP 5.3.0 auf den 30. Juni 2009 verschoben wurde. Es gibt noch nicht korrigierte, kritische Fehler in PHP-Extensions, die standardmäßig in PHP einkompiliert werden.

In den vergangenen Tagen wurden noch einige weitere Fehler entdeckt, die allerdings weniger kritisch sind. Das Einspielen der entsprechenden Korrekturen ist erst für die später erscheinende PHP-Version 5.3.1 geplant.

PHP 5.3 bringt wesentliche neue Fähigkeiten mit, wie Namensräume und anonyme Funktionen, aber auch das umstrittene Goto. Deshalb wird PHP 5.3 dringend erwartet, die erste Alpha-Version erschien bereits im August 2008. Teilweise existieren sogar schon Programm, die PHP 5.3 zwingend voraussetzen, wie zum Beispiel pyrus, das neue Installationswerkzeug für PEAR.

Quelle : www.golem.de (http://www.golem.de)
Titel: PHP 5.3 mit vielen neuen Funktionen
Beitrag von: SiLæncer am 30 Juni, 2009, 14:41
Gut zweieinhalb Jahre nach der Veröffentlichung von PHP 5.2.0 ist nun mit Version 5.3.0 die nächste Generation der Web-Programmiersprache erschienen. Die neue Release ist eine der größten Überarbeitungen in der Geschichte von PHP, deren Umfang mit dem Versionssprung von PHP 4 auf PHP 5 vergleichbar ist. Viele der früher einmal für PHP 6 geplanten Funktionen sind bereits in der 5.3-Entwicklungsschiene gelandet.

Neu sind zum Beispiel Namespaces, die ein lange Zeit vermisstes, aber auch kontrovers diskutiertes Sprachmerkmal sind, bei dem sich derselbe Name (für eine Konstante, Klasse oder Funktion) in unterschiedlichen Namensräumen ohne Konflikt verwenden lässt. Mit Version 5.3 wurde darüber hinaus ein wesentliches Merkmal objektorientierter Programmierung eingeführt: die dynamische beziehungsweise späte Bindung. Erst zur Laufzeit lässt sich entscheiden, welche Methode bei einem Methodenaufruf tatsächlich auszuführen ist. Früher war die dynamische Bindung nur für Instanzmethoden implementiert, die Bindung für Klassenmethoden also statisch. Der Programmierer kann nun selbst entscheiden, ob er für den Aufruf einer Klassenmethode die dynamische oder statische Bindung verwenden soll.

Vor PHP 5.3 war es nur mit create_function() zu realisieren, eine Lambda-Funktion zu deklarieren. In PHP 5.3 ist es nun möglich, eine anonyme Funktion direkt im Quelltext zu notieren. Dank ihr ist der PHP-Interpreter in der Lage, in der Kompilierphase etwaige Syntaxfehler im Rumpf der anonymen Funktion zu entdecken. Neu sind auch Closures, anonyme Funktionen, die um eine Bindung an externe, sogenannte lexikalische Variablen erweitert sind.

Zusätzlich hat PHP einen neuen Garbage Collector erhalten, der den in "Concurrent Cycle Collection in Reference Counted Systems" von IBM vorgestellten Algorithmus nutzt. Das Besondere an ihm ist, dass er Objektzyklen erkennt und auflöst. Besonders bei lang laufenden PHP-Prozessen soll sich der neue Garbage Collector bemerkbar machen. Die PHP-Entwickler haben einige weitere Überarbeitungen am PHP-Interpreter vorgenommen, die über die Verbesserungen des Garbage Collector hinaus gehen. Sie wirken sich sowohl auf die Ausführungsgeschwindigkeit als auch auf den Speicherverbrauch aus.

Schließlich hält mit mysqlnd eine für PHP entwickelte und optimierte Implementierung des MySQL-Client/Server-Protokolls in PHP 5.3 Einzug. Dies führt beim Umgang mit großen Datenmengen zu deutlich verbessertem Laufzeitverhalten. Durch Microsofts Unterstützung schließt PHP unter Windows mit PHP 5.3 hinsichtlich Funktionsumfang, Performanz und Stabilität im Vergleich zu anderen Betriebssystemen auf. Funktionen, die bislang nur unter Unix verfügbar waren beziehungsweise unter Unix teilweise anders funktionierten, lassen sich nun auf der Microsoft-Plattform verwenden.

Quelle : www.heise.de (http://www.heise.de)
Titel: PHP 5.3.1 erschienen
Beitrag von: SiLæncer am 19 November, 2009, 22:26
Zitat

The PHP development team would like to announce the immediate availability of PHP 5.3.1. This release focuses on improving the stability of the PHP 5.3.x branch with over 100 bug fixes, some of which are security related. All users of PHP are encouraged to upgrade to this release.

Security Enhancements and Fixes in PHP 5.3.1:

    * Added "max_file_uploads" INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion.
    * Added missing sanity checks around exif processing.
    * Fixed a safe_mode bypass in tempnam().
    * Fixed a open_basedir bypass in posix_mkfifo().
    * Fixed failing safe_mode_include_dir.

Further details about the PHP 5.3.1 release can be found in the release announcement (http://www.php.net/releases/5_3_1.php), and the full list of changes are available in the ChangeLog (http://www.php.net/ChangeLog-5.php#5.3.1).

http://www.php.net/
Titel: PHP 5.2.12 veröffentlicht
Beitrag von: SiLæncer am 18 Dezember, 2009, 09:29
Neue Version mit rund 60 Fehlerkorrekturen

Die PHP-Version 5.2.12 schließt mehrere Sicherheitslücken. Zudem wurden insgesamt 60 Fehler korrigiert, was der Software zu mehr Stabilität verhelfen soll.
PHP 5.2.12 beseitigt unter anderem eine Sicherheitslücke, die es erlaubt, die Beschränkungen des Safe-Mode sowie von Open-Basdir zu umgehen. Zudem kann in der PHP-Konfiguration die Option "max_file_uploads" hinzugefügt und in der Standardeinstellung die Zahl der maximal mit einem Request hochladbaren Dateien auf 20 begrenzt werden, um DoS-Angriffe zu erschweren.

Die globale Variable $_SESSION wird nun besser geschützt und eine unzureichende Stringprüfung in htmlspecialchars() beseitigt. Hinzu kommen rund 60 weitere Fehlerkorrekturen, um die Stabilität von PHP zu verbessern.

Die Entwickler der freien Skriptsprache raten wie üblich allen Nutzern zum Update. Die neue Version steht unter php.net zum Download bereit.

Quelle : www.golem.de
Titel: PHP 5.3.2 erschienen
Beitrag von: SiLæncer am 04 März, 2010, 23:25
Code: [Auswählen]
Security Enhancements and Fixes in PHP 5.3.2:

    * Improved LCG entropy. (Rasmus, Samy Kamkar)
    * Fixed safe_mode validation inside tempnam() when the directory path does not end with a /). (Martin Jansen)
    * Fixed a possible open_basedir/safe_mode bypass in the session extension identified by Grzegorz Stachowiak. (Ilia)

Key Bug Fixes in PHP 5.3.2 include:

    * Added support for SHA-256 and SHA-512 to php's crypt.
    * Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check.
    * Fixed bug #51059 (crypt crashes when invalid salt are given).
    * Fixed bug #50940 Custom content-length set incorrectly in Apache sapis.
    * Fixed bug #50847 (strip_tags() removes all tags greater then 1023 bytes long).
    * Fixed bug #50723 (Bug in garbage collector causes crash).
    * Fixed bug #50661 (DOMDocument::loadXML does not allow UTF-16).
    * Fixed bug #50632 (filter_input() does not return default value if the variable does not exist).
    * Fixed bug #50540 (Crash while running ldap_next_reference test cases).
    * Fixed bug #49851 (http wrapper breaks on 1024 char long headers).
    * Over 60 other bug fixes.

http://www.php.net/
Titel: PHP 6 - wie geht's weiter?
Beitrag von: SiLæncer am 12 März, 2010, 17:51
Ein neues PHP unter der Versionsnummer 6 ist schon lange im Gespräch, viele der für dieses Release geplanten Funktionen landeten allerdings dann bereits in PHP 5.3, das im vergangenen Sommer  erschien. Auch wenn eine frühere Meldung der PHP-Entwickler darauf schließen ließ, dass PHP 6.0 eine sehr hohe Priorität genieße, scheint es noch etwas länger zu dauern, bis etwas Sichtbares gezeigt werden kann. Zumindest wurde jetzt schon mal der PHP-5.4-Entwicklungszweig eröffnet.

Für PHP 6 diskutieren die Entwickler, welche Form der UTF-Unterstützung sie wirklich wollen. Ideen gehen zum Beispiel in die Richtung, String-Klassen zu verwenden, die String-Operationen in Unicode und in Binärcode umhüllen (wrap), ohne allzu sehr in die Engine eingreifen zu müssen. Dafür spricht laut Johannes Schlüter, einer der PHP-Entwickler, dass dadurch der viel gescholtenen Inkonsistenz der String-APIs entgegen gewirkt werde, ohne mit dem alten Code brechen zu müssen. Denn neuer Code könne die neuen Klassen benutzen, alter die bisherigen Funktionen.

Ursprünglich war geplant, UTF-16 als Standard-Codierung innerhalb der Engine zu verwenden. Laut Schlüter habe man darauf zurückgreifen wollen, da PHP 6 die ICU-Bibliothek (International Components for Unicode) verwenden sollte, die String-Funktionen für diese Codierung enthält. Würde man UTF-16 als Standardverschlüsselung für PHP 6 einsetzen, bedeute das, den Skriptcode und alle ein- und ausgehenden Daten mit anderer Verschlüsselung (vorrangig UTF-8) nach UTF-16 und wieder zurück konvertieren zu müssen. Denn UTF-16 wird relativ wenig verwendet, UTF-8 hat sich unter anderem bei den aktuellen Betriebssystemen als Standardcodierung für Unicode etabliert.

UTF-16 würde zum einen eine übermäßig komplexe Implementierung bedeuten, sowie mehr CPU-Zeit und Speicher benötigen, da die Codierung in vielen Fällen doppelt so viele Bytes braucht wie UTF-8. Zum anderen wäre die neue Entwicklung nicht mehr rückwärtskompatibel, was manuelle Eingriffe in vorhandenen PHP-Code erfordere. Das sind Schlüter zufolge alles Gründe dafür, dass viele an der PHP-Entwicklung Beteiligte bislang nicht gewillt waren, den Hauptentwicklungspfad (trunk) als zentralen Entwicklungsbaum zu nutzen. Auf jeden Fall haben die Entwickler schon mal beschlossen, dass der Subversion-Trunk auf dem aktuellen PHP 5.3 aufsetzen und die Funktionen des alten Entwicklungspfads mit den neuen dort verschmelzen sollen.

Quelle : www.heise.de
Titel: PHP Handbuch 2. April 2010
Beitrag von: SiLæncer am 05 April, 2010, 18:29
Umfangreiches Handbuch, das Sie über alle Fragen zur Opensource-Scriptsprache PHP aufklärt.

(http://download.winboard.org/uploads/Image/257448350_4019f85705.jpg)

Das Handbuch erläutert Ihnen alles was Sie zu "Hypertext Preprocessor" (PHP) wissen müssen. Nach der allgemeinen Einführung erhalten Sie jede Menge Informationen zu Sprachreferenzen, Sicherheit und zusätzlichen Features von PHP. Hintergrund: Die Programmiersprache PHP wird gewöhnlich dazu verwendet,dynamisch generierte Webseiten in kurzer Zeit zu erzeugen.

Windows: 95 - 7
Lizenz: Freeware
Hersteller: http://www.php.net/
Titel: PHP 5.3.3 erschienen
Beitrag von: SiLæncer am 22 Juli, 2010, 18:42
Changelog:

Code: [Auswählen]
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
22 Jul 2010, PHP 5.3.3
- Upgraded bundled sqlite to version 3.6.23.1. (Ilia)
- Upgraded bundled PCRE to version 8.02. (Ilia)

- Added support for JSON_NUMERIC_CHECK option in json_encode() that converts
  numeric strings to integers. (Ilia)
- Added stream_set_read_buffer, allows to set the buffer for read operation.
  (Pierre)
- Added stream filter support to mcrypt extension (ported from
  mcrypt_filter). (Stas)
- Added full_special_chars filter to ext/filter. (Rasmus)
- Added backlog socket context option for stream_socket_server(). (Mike)
- Added fifth parameter to openssl_encrypt()/openssl_decrypt()
  (string $iv) to use non-NULL IV.
  Made implicit use of NULL IV a warning. (Sara)
- Added openssl_cipher_iv_length(). (Sara)
- Added FastCGI Process Manager (FPM) SAPI. (Tony)
- Added recent Windows versions to php_uname and fix undefined windows
  version support. (Pierre)
- Added Berkeley DB 5 support to the DBA extension. (Johannes, Chris Jones)
- Added support for copy to/from array/file for pdo_pgsql extension.
  (Denis Gasparin, Ilia)
- Added inTransaction() method to PDO, with specialized support for Postgres.
  (Ilia, Denis Gasparin)

- Changed namespaced classes so that the ctor can only be named
  __construct now. (Stas)
- Reset error state in PDO::beginTransaction() reset error state. (Ilia)

- Implemented FR#51295 (SQLite3::busyTimeout not existing). (Mark)
- Implemented FR#35638 (Adding udate to imap_fetch_overview results).
  (Charles_Duffy at dell dot com )
- Rewrote var_export() to use smart_str rather than output buffering, prevents
  data disclosure if a fatal error occurs (CVE-2010-2531). (Scott)
- Fixed possible buffer overflows in mysqlnd_list_fields,  mysqlnd_change_user.
  (Andrey)
- Fixed possible buffer overflows when handling error packets in mysqlnd.
  Reported by Stefan Esser. (Andrey)
- Fixed very rare memory leak in mysqlnd, when binding thousands of columns.
  (Andrey)
- Fixed a crash when calling an inexistent method of a class that inherits
  PDOStatement if instantiated directly instead of doing by the PDO methods.
  (Felipe)

- Fixed memory leak on error in mcrypt_create_iv on Windows. (Pierre)
- Fixed a possible crash because of recursive GC invocation. (Dmitry)
- Fixed a possible resource destruction issues in shm_put_var().
  Reported by Stefan Esser. (Dmitry)
- Fixed a possible information leak because of interruption of XOR operator.
  Reported by Stefan Esser. (Dmitry)
- Fixed a possible memory corruption because of unexpected call-time pass by
  refernce and following memory clobbering through callbacks.
  Reported by Stefan Esser. (Dmitry)
- Fixed a possible memory corruption in ArrayObject::uasort(). Reported by
  Stefan Esser. (Dmitry)
- Fixed a possible memory corruption in parse_str(). Reported by Stefan Esser.
  (Dmitry)
- Fixed a possible memory corruption in pack(). Reported by Stefan Esser.
  (Dmitry)
- Fixed a possible memory corruption in substr_replace(). Reported by Stefan   
  Esser. (Dmitry)
- Fixed a possible memory corruption in addcslashes(). Reported by Stefan   
  Esser. (Dmitry)
- Fixed a possible stack exhaustion inside fnmatch(). Reported by Stefan   
  Esser. (Ilia)
- Fixed a possible dechunking filter buffer overflow. Reported by Stefan Esser.
  (Pierre)
- Fixed a possible arbitrary memory access inside sqlite extension. Reported
  by Mateusz Kocielski. (Ilia)
- Fixed string format validation inside phar extension. Reported by Stefan
  Esser. (Ilia)
- Fixed handling of session variable serialization on certain prefix
  characters. Reported by Stefan Esser. (Ilia)
- Fixed a NULL pointer dereference when processing invalid XML-RPC
  requests (Fixes CVE-2010-0397, bug #51288). (Raphael Geissert)
- Fixed 64-bit integer overflow in mhash_keygen_s2k(). (Clément LECIGNE, Stas)
- Fixed SplObjectStorage unserialization problems (CVE-2010-2225). (Stas)
- Fixed the mail.log ini setting when no filename was given. (Johannes)

- Fixed bug #52317 (Segmentation fault when using mail() on a rhel 4.x (only 64
  bit)). (Adam)
- Fixed bug #52262 (json_decode() shows no errors on invalid UTF-8).
  (Scott)
- Fixed bug #52240 (hash_copy() does not copy the HMAC key, causes wrong
  results and PHP crashes). (Felipe)
- Fixed bug #52238 (Crash when an Exception occured in iterator_to_array).
  (Johannes)
- Fixed bug #52193 (converting closure to array yields empty array). (Felipe)
- Fixed bug #52183 (Reflectionfunction reports invalid number of arguments for
  function aliases). (Felipe)
- Fixed bug #52162 (custom request header variables with numbers are removed).
  (Sriram Natarajan)
- Fixed bug #52160 (Invalid E_STRICT redefined constructor error). (Felipe)
- Fixed bug #52138 (Constants are parsed into the ini file for section names).
  (Felipe)
- Fixed bug #52115 (mysqli_result::fetch_all returns null, not an empty array).
  (Andrey)
- Fixed bug #52101 (dns_get_record() garbage in 'ipv6' field on Windows).
  (Pierre)
- Fixed bug #52082 (character_set_client & character_set_connection reset after
  mysqli_change_user()). (Andrey)
- Fixed bug #52043 (GD doesn't recognize latest libJPEG versions).
  (php at group dot apple dot com, Pierre)
- Fixed bug #52041 (Memory leak when writing on uninitialized variable returned
  from function). (Dmitry)
- Fixed bug #52060 (Memory leak when passing a closure to method_exists()).
  (Felipe)
- Fixed bug #52057 (ReflectionClass fails on Closure class). (Felipe)
- Fixed bug #52051 (handling of case sensitivity of old-style constructors
  changed in 5.3+). (Felipe)
- Fixed bug #52037 (Concurrent builds fail in install-programs). (seanius at
  debian dot org, Kalle)
- Fixed bug #52019 (make lcov doesn't support TESTS variable anymore). (Patrick)
- Fixed bug #52010 (open_basedir restrictions mismatch on vacuum command).
  (Ilia)
- Fixed bug #52001 (Memory allocation problems after using variable variables).
  (Dmitry)
- Fixed bug #51991 (spl_autoload and *nix support with namespace). (Felipe)
- Fixed bug #51943 (AIX: Several files are out of ANSI spec). (Kalle,
  coreystup at gmail dot com)
- Fixed bug #51911 (ReflectionParameter::getDefaultValue() memory leaks with
  constant array). (Felipe)
- Fixed bug #51905 (ReflectionParameter fails if default value is an array
  with an access to self::). (Felipe)
- Fixed bug #51899 (Parse error in parse_ini_file() function when empy value
  followed by no newline). (Felipe)
- Fixed bug #51844 (checkdnsrr does not support types other than MX). (Pierre)
- Fixed bug #51827 (Bad warning when register_shutdown_function called with
  wrong num of parameters). (Felipe)
- Fixed bug #51822 (Segfault with strange __destruct() for static class
  variables). (Dmitry)
- Fixed bug #51791 (constant() aborts execution when fail to check undefined
  constant). (Felipe)
- Fixed bug #51732 (Fileinfo __construct or open does not work with NULL).
  (Pierre)
- Fixed bug #51725 (xmlrpc_get_type() returns true on invalid dates). (Mike)
- Fixed bug #51723 (Content-length header is limited to 32bit integer with
  Apache2 on Windows). (Pierre)
- Fixed bug #51721 (mark DOMNodeList and DOMNamedNodeMap as Traversable).
  (David Zuelke)
- Fixed bug #51712 (Test mysql_mysqlnd_read_timeout_long must fail on MySQL4).
  (Andrey)
- Fixed bug #51697 (Unsafe operations in free_storage of SPL iterators,
  causes crash during shutdown). (Etienne)
- Fixed bug #51690 (Phar::setStub looks for case-sensitive
  __HALT_COMPILER()). (Ilia)
- Fixed bug #51688 (ini per dir crashes when invalid document root  are given).
  (Pierre)
- Fixed bug #51671 (imagefill does not work correctly for small images).
  (Pierre)
- Fixed bug #51670 (getColumnMeta causes segfault when re-executing query
  after calling nextRowset). (Pierrick)
- Fixed bug #51647 Certificate file without private key (pk in another file)
  doesn't work. (Andrey)
- Fixed bug #51629 (CURLOPT_FOLLOWLOCATION error message is misleading).
  (Pierre)
- Fixed bug #51627 (script path not correctly evaluated).
  (russell dot tempero at rightnow dot com)
- Fixed bug #51624 (Crash when calling mysqli_options()). (Felipe)
- Fixed bug #51615 (PHP crash with wrong HTML in SimpleXML). (Felipe)
- Fixed bug #51609 (pg_copy_to: Invalid results when using fourth parameter).
  (Felipe)
- Fixed bug #51608 (pg_copy_to: WARNING: nonstandard use of \\ in a string
  literal). (cbandy at jbandy dot com)
- Fixed bug #51607 (pg_copy_from does not allow schema in the tablename
  argument). (cbandy at jbandy dot com)
- Fixed bug #51605 (Mysqli - zombie links). (Andrey)
- Fixed bug #51604 (newline in end of header is shown in start of message).
  (Daniel Egeberg)
- Fixed bug #51590 (JSON_ERROR_UTF8 is undefined). (Felipe)
- Fixed bug #51583 (Bus error due to wrong alignment in mysqlnd). (Rainer Jung)
- Fixed bug #51582 (Don't assume UINT64_C it's ever available).
  (reidrac at usebox dot net, Pierre)
- Fixed bug #51577 (Uninitialized memory reference with oci_bind_array_by_name)
  (Oracle Corp.)
- Fixed bug #51562 (query timeout in mssql can not be changed per query).
  (ejsmont dot artur at gmail dot com)
- Fixed bug #51552 (debug_backtrace() causes segmentation fault and/or memory
  issues). (Dmitry)
- Fixed bug #51445 (var_dump() invalid/slow *RECURSION* detection). (Felipe)
- Fixed bug #51435 (Missing ifdefs / logic bug in crypt code cause compile
  errors). (Felipe)
- Fixed bug #51424 (crypt() function hangs after 3rd call). (Pierre, Sriram)
- Fixed bug #51394 (Error line reported incorrectly if error handler throws an
  exception). (Stas)
- Fixed bug #51393 (DateTime::createFromFormat() fails if format string contains
  timezone). (Adam)
- Fixed bug #51347 (mysqli_close / connection memory leak). (Andrey, Johannes)
- Fixed bug #51338 (URL-Rewriter is still enabled if use_only_cookies is
  on). (Ilia, j dot jeising at gmail dot com)
- Fixed bug #51291 (oci_error doesn't report last error when called two times)
  (Oracle Corp.)
- Fixed bug #51276 (php_load_extension() is missing when HAVE_LIBDL is
  undefined). (Tony)
- Fixed bug #51273 (Faultstring property does not exist when the faultstring is
  empty) (Ilia, dennis at transip dot nl)
- Fixed bug #51269 (zlib.output_compression Overwrites Vary Header). (Adam)
- Fixed bug #51257 (CURL_VERSION_LARGEFILE incorrectly used after libcurl
  version 7.10.1). (aron dot ujvari at microsec dot hu)
- Fixed bug #51242 (Empty mysql.default_port does not default to 3306 anymore,
  but 0). (Adam)
- Fixed bug #51237 (milter SAPI crash on startup). (igmar at palsenberg dot com)
- Fixed bug #51213 (pdo_mssql is trimming value of the money column). (Ilia,
  alexr at oplot dot com)
- Fixed bug #51190 (ftp_put() returns false when transfer was successful). 
  (Ilia)
- Fixed bug #51183 (ext/date/php_date.c fails to compile with Sun Studio).
  (Sriram Natarajan)
- Fixed bug #51176 (Static calling in non-static method behaves like $this->).
  (Felipe)
- Fixed bug #51171 (curl_setopt() doesn't output any errors or warnings when   
  an invalid option is provided). (Ilia)
- Fixed bug #51128 (imagefill() doesn't work with large images). (Pierre)
- Fixed bug #51096 ('last day' and 'first day' are handled incorrectly when
  parsing date strings). (Derick)
- Fixed bug #51086 (DBA DB4 doesn't work with Berkeley DB 4.8). (Chris Jones)
- Fixed bug #51062 (DBA DB4 uses mismatched headers and libraries). (Chris
  Jones)
- Fixed bug #51026 (mysqli_ssl_set not working). (Andrey)
- Fixed bug #51023 (filter doesn't detect int overflows with GCC 4.4).
  (Raphael Geissert)
- Fixed bug #50999 (unaligned memory access in dba_fetch()). (Felipe)
- Fixed bug #50976 (Soap headers Authorization not allowed).
  (Brain France, Dmitry)
- Fixed bug #50828 (DOMNotation is not subclass of DOMNode). (Rob)
- Fixed bug #50810 (property_exists does not work for private). (Felipe)
- Fixed bug #50762 (in WSDL mode Soap Header handler function only being called
  if defined in WSDL). (mephius at gmail dot com)
- Fixed bug #50731 (Inconsistent namespaces sent to functions registered with
  spl_autoload_register). (Felipe)
- Fixed bug #50563 (removing E_WARNING from parse_url). (ralph at smashlabs dot
  com, Pierre)
- Fixed bug #50578 (incorrect shebang in phar.phar). (Fedora at FamilleCollet
  dot com)
- Fixed bug #50555 (DateTime::sub() allows 'relative' time modifications).
  (Derick)
- Fixed bug #50392 (date_create_from_format enforces 6 digits for 'u' format
  character). (Derick)
- Fixed bug #50383 (Exceptions thrown in __call / __callStatic do not include
  file and line in trace). (Felipe)
- Fixed bug #50358 (Compile failure compiling ext/phar/util.lo). (Felipe)
- Fixed bug #50101 (name clash between global and local variable).
  (patch by yoarvi at gmail dot com)
- Fixed bug #51002 (fix possible memory corruption with very long names).
  (Pierre)
- Fixed bug #49893 (Crash while creating an instance of Zend_Mail_Storage_Pop3).
  (Dmitry)
- Fixed bug #49819 (STDOUT losing data with posix_isatty()). (Mike)
- Fixed bug #49778 (DateInterval::format("%a") is always zero when an interval
  is created from an ISO string). (Derick)
- Fixed bug #49700 (memory leaks in php_date.c if garbage collector is
  enabled). (Dmitry)
- Fixed bug #49576 (FILTER_VALIDATE_EMAIL filter needs updating) (Rasmus)
- Fixed bug #49490 (XPath namespace prefix conflict). (Rob)
- Fixed bug #49429 (odbc_autocommit doesn't work). (Felipe)
- Fixed bug #49320 (PDO returns null when SQLite connection fails). (Felipe)
- Fixed bug #49234 (mysqli_ssl_set not found). (Andrey)
- Fixed bug #49216 (Reflection doesn't seem to work properly on MySqli).
  (Andrey)
- Fixed bug #49192 (PHP crashes when GC invoked on COM object). (Stas)
- Fixed bug #49081 (DateTime::diff() mistake if start in January and interval >
  28 days). (Derick)
- Fixed bug #49059 (DateTime::diff() repeats previous sub() operation).
  (yoarvi@gmail.com, Derick)
- Fixed bug #48983 (DomDocument : saveHTMLFile wrong charset). (Rob)
- Fixed bug #48930 (__COMPILER_HALT_OFFSET__ incorrect in PHP >= 5.3). (Felipe)
- Fixed bug #48902 (Timezone database fallback map is outdated). (Derick)
- Fixed bug #48781 (Cyclical garbage collector memory leak). (Dmitry)
- Fixed bug #48601 (xpath() returns FALSE for legitimate query). (Rob)
- Fixed bug #48361 (SplFileInfo::getPathInfo should return the
  parent dir). (Etienne)
- Fixed bug #48289 (iconv_mime_encode() quoted-printable scheme is broken).
  (Adam, patch from hiroaki dot kawai at gmail dot com).
- Fixed bug #47842 (sscanf() does not support 64-bit values). (Mike)
- Fixed bug #46111 (Some timezone identifiers can not be parsed). (Derick)
- Fixed bug #45808 (stream_socket_enable_crypto() blocks and eats CPU).
  (vincent at optilian dot com)
- Fixed bug #43233 (sasl support for ldap on Windows). (Pierre)
- Fixed bug #35673 (formatOutput does not work with saveHTML). (Rob)
- Fixed bug #33210 (getimagesize() fails to detect width/height on certain
http://www.php.net/
Titel: PHP 5.3.6 Final
Beitrag von: SiLæncer am 17 März, 2011, 16:54
Code: [Auswählen]
Security Enhancements and Fixes in PHP 5.3.6:

    * Enforce security in the fastcgi protocol parsing with fpm SAPI.
    * Fixed bug #54247 (format-string vulnerability on Phar). (CVE-2011-1153)
    * Fixed bug #54193 (Integer overflow in shmop_read()). (CVE-2011-1092)
    * Fixed bug #54055 (buffer overrun with high values for precision ini setting).
    * Fixed bug #54002 (crash on crafted tag in exif). (CVE-2011-0708)
    * Fixed bug #53885 (ZipArchive segfault with FL_UNCHANGED on empty archive). (CVE-2011-0421)

Key enhancements in PHP 5.3.6 include:

    * Upgraded bundled Sqlite3 to version 3.7.4.
    * Upgraded bundled PCRE to version 8.11.
    * Added ability to connect to HTTPS sites through proxy with basic authentication using stream_context/http/header/Proxy-Authorization.
    * Added options to debug backtrace functions.
    * Changed default value of ini directive serialize_precision from 100 to 17.
    * Fixed Bug #53971 (isset() and empty() produce apparently spurious runtime error).
    * Fixed Bug #53958 (Closures can't 'use' shared variables by value and by reference).
    * Fixed bug #53577 (Regression introduced in 5.3.4 in open_basedir with a trailing forward slash).
    * Over 60 other bug fixes.

http://www.php.net/
Titel: PHP 5.3.7 Final
Beitrag von: SiLæncer am 18 August, 2011, 16:32
Code: [Auswählen]
Security Enhancements and Fixes in PHP 5.3.7:

    Updated crypt_blowfish to 1.2. (CVE-2011-2483)
    Fixed crash in error_log(). Reported by Mateusz Kocielski
    Fixed buffer overflow on overlog salt in crypt().
    Fixed bug #54939 (File path injection vulnerability in RFC1867 File upload filename). Reported by Krzysztof Kotowicz. (CVE-2011-2202)
    Fixed stack buffer overflow in socket_connect(). (CVE-2011-1938)
    Fixed bug #54238 (use-after-free in substr_replace()). (CVE-2011-1148)

Key enhancements in PHP 5.3.7 include:

    Upgraded bundled Sqlite3 to version 3.7.7.1
    Upgraded bundled PCRE to version 8.12
    Fixed bug #54910 (Crash when calling call_user_func with unknown function name)
    Fixed bug #54585 (track_errors causes segfault)
    Fixed bug #54262 (Crash when assigning value to a dimension in a non-array)
    Fixed a crash inside dtor for error handling
    Fixed bug #55339 (Segfault with allow_call_time_pass_reference = Off)
    Fixed bug #54935 php_win_err can lead to crash
    Fixed bug #54332 (Crash in zend_mm_check_ptr // Heap corruption)
    Fixed bug #54305 (Crash in gc_remove_zval_from_buffer)
    Fixed bug #54580 (get_browser() segmentation fault when browscap ini directive is set through php_admin_value)
    Fixed bug #54529 (SAPI crashes on apache_config.c:197)
    Fixed bug #54283 (new DatePeriod(NULL) causes crash).
    Fixed bug #54269 (Short exception message buffer causes crash)
    Fixed Bug #54221 (mysqli::get_warnings segfault when used in multi queries)
    Fixed bug #54395 (Phar::mount() crashes when calling with wrong parameters)
    Fixed bug #54384 (Dual iterators, GlobIterator, SplFileObject and SplTempFileObject crash when user-space classes don't call the parent constructor)
    Fixed bug #54292 (Wrong parameter causes crash in SplFileObject::__construct())
    Fixed bug #54291 (Crash iterating DirectoryIterator for dir name starting with \0)
    Fixed bug #54281 (Crash in non-initialized RecursiveIteratorIterator)
    Fixed bug #54623 (Segfault when writing to a persistent socket after closing a copy of the socket)
    Fixed bug #54681 (addGlob() crashes on invalid flags)
    Over 80 other bug fixes.

Windows users: please mind that we do no longer provide builds created with Visual Studio C++ 6. It is impossible to maintain a high quality and safe build of PHP for Windows using this unmaintained compiler.
http://www.php.net/
Titel: PHP 5.3.8 Final
Beitrag von: SiLæncer am 24 August, 2011, 05:47
Version 5.3.8
23-Aug-2011

    Core:
        Fixed bug #55439 (crypt() returns only the salt for MD5). (Stas)
    OpenSSL:
        Reverted a change in timeout handling restoring PHP 5.3.6 behavior, as the new behavior caused mysqlnd SSL connections to hang ( Bug #55283). (Pierre, Andrey, Johannes)

http://www.php.net/
Titel: PHP 5.4 RC1 veröffentlicht
Beitrag von: SiLæncer am 11 November, 2011, 17:01
Das PHP-Entwicklerteam hat den ersten Veröffentlichungskandidaten von PHP 5.4 bereitgestellt.

Über zwei Jahre und vier Monate ist die Herausgabe von PHP 5.3 schon her. Jetzt steht der erste Veröffentlichungskandidat von PHP 5.4 zum Testen bereit. Die PHP-Entwickler planen, alle zwei Wochen einen neuen Veröffentlichungskandidaten aufzulegen, bis alle Kriterien für die Freigabe erfüllt sind. Neben Fehlerkorrekturen gehört dazu auch die Vervollständigung der Dokumentation. Neue Funktionen werden bis zur Freigabe von PHP 5.4 nicht mehr aufgenommen.

PHP 5.4 führt sogenannte Traits ein, die es verschiedenen Klassen ermöglichen, dieselben Funktionen zu nutzen. Die Wirkung von Traits ist ähnlich wie die von Interfaces in Java, die Syntax jedoch unterschiedlich. Methoden, die in Traits definiert werden, werden zu Methoden der Klassen, die die Treits nutzen. Arrays können nun auch dereferenziert werden, wenn sie als Rückgabewert einer Funktion erscheinen, so dass in einigen Fällen auf temporäre Variablen verzichtet werden kann. Der Standard-Zeichensatz von PHP 5.4 wird UTF-8 statt wie bisher ISO-8859-1 sein. Das Debug-Flag E_ALL enthält nun E_STRICT.

Die Sprache erhielt einen eingebauten Webserver, der über die Kommandozeile gesteuert wird und zum besseren Testen von Code während der Entwicklung dient. Es gibt nun eine neue Notation, um Zahlen binär einzugeben, beispielsweise als 0b10101. Außerdem wurden die schon in Version 5.3 nicht mehr empfohlene Funktion magic_quotes sowie einige andere obsolete Funktionen entfernt.

Daneben gab es einige weitere Änderungen, die im Detail im Änderungslog (http://www.php.net/releases/NEWS_5_4_0_RC1.txt) nachgelesen werden können. PHP 5.4.0 RC1 steht auf den Seiten der PHP-Testteams zum Download (http://qa.php.net/) bereit.

Quelle : www.pro-linux.de
Titel: Scriptsprache: PHP 5.4.0 veröffentlicht
Beitrag von: ritschibie am 02 März, 2012, 12:17
(http://www.golem.de/1203/90202-31287-i.gif)
PHP 5.4 mit neuen Spracheigenschaften
(Bild: PHP.net)
Knapp drei Jahre nach PHP 5.3.0 wurde nun PHP 5.4.0 veröffentlicht. Die neue Version enthält zahlreiche neue Funktionen und Fehlerkorrekturen sowie neue Spracheigenschaften.

Weniger Speicherbedarf und höhere Leistung verspricht PHP 5.4.0. Zudem stehen nun Multibyte-Sprachen in allen PHP-Builds über einen Runtime-Schalter zur Verfügung. Im Kommandozeilenmodus steht ein integrierter Webserver zur Verfügung, der Entwicklung und Testen vereinfachen soll. Der Webserver ist nicht dafür gedacht, in produktiven Systemen genutzt zu werden.

Der Standardzeichensatz in PHP 5.4.0 ist UTF-8.

Die PHP-Entwickler haben zudem aufgeräumt und diverse veraltete Sprachfunktionen aus dem Code entfernt. So soll die Codebasis von PHP 5.4 deutlich sauberer sein. Beispielsweise wurden Register Globals, Magic Quotes und der Safe Mode entfernt.

Ebenso wurden einige neue Sprachfunktionen eingeführt, darunter Traits, die die Wiederverwendung von Code vereinfachen sollen. Zudem gibt es eine neue Kurzsyntax für Arrays und Closures unterstützt in PHP 5.4 $this. Eine Übersicht der neuen Spracheigenschaften gibt es unter docs.php.net.

PHP 5.4 wird die letzte PHP-Serie sein, die unter Windows XP und Windows Server 2003 läuft. Das PHP-Team will keine Binärversionen kommender PHP-Serien mehr für diese Betriebssysteme anbieten.

PHP 5.4.0 steht unter php.net zum Download bereit. Für Umsteiger von PHP 5.3 gibt es einen Migrationsleitfaden. Eine detaillierte Liste der Neuerungen findet sich im Changelog.

Quelle: www.golem.de
Titel: Skriptsprache PHP jetzt auch via GitHub erhältlich
Beitrag von: SiLæncer am 20 März, 2012, 12:49
Das PHP-Team hat die Migration der Quellen der Skriptsprache PHP von Subversion nach Git abgeschlossen. Damit kann der Sourcode der Sprache nun auch via GitHub eingesehen oder für eigene Entwicklungszweige abgespalten werden. Das PHP Manual und dessen Übersetzungen sollen später ebenfalls auf Git umgestellt werden.

Um das Git-Repository übersichtlicher zu gestalten, wurden verschiedene Branches (Entwicklungszweige, meist einzelner Features) und Tags (Verweise auf bestimmte Commits) umbenannt. Insgesamt soll es PHP-Entwicklern nach der Migration auf das Versionskontrollsystem Git damit leichter fallen, der Entwicklung der Kernkomponenten der Skriptsprache zu folgen. Zugleich soll die Hürde sinken, sich mit eigenem Engagement an der Weiterentwicklung von PHP zu beteiligen. Git genießt einen guten Ruf, Branches oder ganze Forks lassen sich praktisch auf Knopfdruck anlegen und Weiterentwicklungen sich schließlich als Pull-Request dem offiziellen Zweig vorschlagen.

Details zum Workflow hat das PHP-Team in seinem Wiki zusammengetragen. Demnach sollen künftige Release-Tags für die PHP-Hauptversion vom PHP-Development-Team signiert werden, sodass der offizielle Zweig der Entwicklung nachverfolgt werden könne.

Quelle : www.heise.de
Titel: PHP 5.4.1 Final
Beitrag von: SiLæncer am 26 April, 2012, 17:20
ChangeLog

Code: [Auswählen]
Version 5.4.1
26-Apr-2012

    CLI Server
        Fixed bug #61461 (missing checks around malloc() calls).
        Implemented #60850 (Built in web server does not set $_SERVER['SCRIPT_FILENAME'] when using router).

    Core
        Fixed crash in ZTS using same class in many threads.
        Fixed bug #61374 (html_entity_decode tries to decode code points that don't exist in ISO-8859-1).
        Fixed bug #61225 (Incorrect lexing of 0b00*+<NUM>).
        Fixed bug #61106 (Segfault when using header_register_callback).
        Fixed bug #61052 (Missing error check in trait 'insteadof' clause).
        Fixed bug #61011 (Crash when an exception is thrown by __autoload accessing a static property).
        Fixed bug #60978 (exit code incorrect).
        Fixed bug #60911 (Confusing error message when extending traits).
        Fixed bug #60717 (Order of traits in use statement can cause a fatal error).
        Fixed bug #60573 (type hinting with "self" keyword causes weird errors).

    Fileinfo
        Fix fileinfo test problems.

    Intl
        Fixed bug #61487 (Incorrent bounds checking in grapheme_strpos).

    mbstring
        MFH mb_ereg_replace_callback() for security enhancements.

    mysqlnd
        Fixed bug #60948 (mysqlnd FTBFS when -Wformat-security is enabled).

    Standard
        Fixed memory leak in substr_replace.
        Make max_file_uploads ini directive settable outside of php.
        Fixed bug #61409 (Bad formatting on phpinfo()).
        Fixed bug #60222 (time_nanosleep() does validate input params).
        Fixed bug #60106 (stream_socket_server silently truncates long unix socket paths).
http://www.php.net/
Titel: PHP 5.4.3
Beitrag von: SiLæncer am 08 Mai, 2012, 22:29
Version 5.4.3
08-May-2012

    Fixed bug #61807 Buffer Overflow in apache_request_headers, CVE-2012-2329.
    Fixed bug #61910 Improve fix for PHP-CGI query string parameter vulnerability, CVE-2012-2311.

http://www.php.net/
Titel: PHP 5.4.4 erschienen
Beitrag von: SiLæncer am 15 Juni, 2012, 00:08
Changelog:

Code: [Auswählen]
Version 5.4.4

    CLI SAPI
        Implemented FR #61977 (Need CLI web-server support for files with .htm & svg extensions)
        Improved performance while sending error page, this also fixed bug Fixed bug #61785 (Memory leak when access a non-exists file without router)
        Fixed bug #61546 (functions related to current script failed when chdir() in cli sapi)

    Core
        Fixed missing bound check in iptcparse()
        Fixed CVE-2012-2143
        Fixed bug #62097 (fix for for bug #54547)
        Fixed bug #62005 (unexpected behavior when incrementally assigning to a member of a null object)
        Fixed bug #61978 (Object recursion not detected for classes that implement JsonSerializable)
        Fixed bug #61991 (long overflow in realpath_cache_get())
        Fixed bug #61922 (ZTS build doesn't accept zend.script_encoding config)
        Fixed bug #61827 (incorrect \e processing on Windows)
        Fixed bug #61782 (__clone/__destruct do not match other methods when checking access controls)
        Fixed bug #61761 ('Overriding' a private static method with a different signature causes crash)
        Fixed bug #61730 (Segfault from array_walk modifying an array passed by reference)
        Fixed bug #61728 (PHP crash when calling ob_start in request_shutdown phase)
        Fixed bug #61660 (bin2hex(hex2bin($data)) != $data)
        Fixed bug #61650 (ini parser crashes when using ${xxxx} ini variables (without apache2))
        Fixed bug #61605 (header_remove() does not remove all headers)
        Fixed bug #54547 (wrong equality of string numbers)
        Fixed bug #54197 ([PATH=] sections incompatibility with user_ini.filename set to null)
        Changed php://fd to be available only for CLI

    CURL
        Fixed bug #61948 (CURLOPT_COOKIEFILE '' raises open_basedir restriction)

    COM
        Fixed bug #62146 com_dotnet cannot be built shared

    Fileinfo
        Fixed bug #61812 (Uninitialised value used in libmagic)

    FPM
        Fixed bug #61812 (Uninitialised value used in libmagic)
        Fixed bug #61565 where php_stream_open_wrapper_ex tries to open a directory descriptor under windows
        Fixed bug #61566 failure caused by the posix lseek and read versions under windows in cdf_read()

    Iconv
        Fixed a bug that iconv extension fails to link to the correct library when another extension makes use of a library that links to the iconv library. See https://bugs.gentoo.org/show_bug.cgi?id=364139 for detail

    Intl
        Fixed bug #62082 (Memory corruption in internal function get_icu_disp_value_src_php()

    JSON
        Fixed bug #61537 (json_encode() incorrectly truncates/discards information)

    LibXML
        Fixed bug #61617 (Libxml tests failed(ht is already destroyed))

    PDO
        Fixed bug #61755 (A parsing bug in the prepared statements can lead to access violations)

    Phar
        Fixed bug #61065 (Secunia SA44335)

    Streams
        Fixed bug #61961 (file_get_contents leaks when access empty file with maxlen set)

    zlib
        Fixed bug #61820 (using ob_gzhandler will complain about headers already sent when no compression)
        Fixed bug #61443 (can't change zlib.output_compression on the fly)
        Fixed bug #60761 (zlib.output_compression fails on refresh)

http://www.php.net/
Titel: PHP 5.4.5 erschienen
Beitrag von: SiLæncer am 20 Juli, 2012, 19:40
Changelog:

Code: [Auswählen]
Version 5.4.5
19-July-2012

    Core
        Fixed bug #62443 (Crypt SHA256/512 Segfaults With Malformed Salt)
        Fixed bug #62432 (ReflectionMethod random corrupt memory on high concurrent)
        Fixed bug #62373 (serialize() generates wrong reference to the object).
        Fixed bug #62357 (compile failure: (S) Arguments missing for built-in function __memcmp)
        Fixed bug #61998 (Using traits with method aliases appears to result in crash during execution)
        Fixed bug #51094 (parse_ini_file() with INI_SCANNER_RAW cuts a value that includes a semi-colon)
        Fixed potential overflow in _php_stream_scandir (CVE-2012-2688)

    EXIF
        Fixed information leak in ext exi

    FPM
        Fixed bug #62205 (php-fpm segfaults (null passed to strstr)
        Fixed bug #62160 (Add process.priority to set nice(2) priorities)
        Fixed bug #62153 (when using unix sockets, multiples FPM instances)
        Fixed bug #62033 (php-fpm exits with status 0 on some failures to start)
        Fixed bug #61839 (Unable to cross-compile PHP with --enable-fpm)
        Fixed bug #61835 (php-fpm is not allowed to run as root)
        Fixed bug #61295 (php-fpm should not fail with commented 'user'
        Fixed bug #61218 (FPM drops connection while receiving some binary values in FastCGI requests)
        Fixed bug #61045 (fpm don't send error log to fastcgi clients). (fat) for non-root start)
        Fixed bug #61026 (FPM pools can listen on the same address). (fat) can be launched without errors)

    Iconv
        Fixed bug #55042 (Erealloc in iconv.c unsafe)

    Intl
        Fixed bug #62083 (grapheme_extract() memory leaks)
        Fixed bug #62081 (IntlDateFormatter constructor leaks memory when called twice)
        Fixed bug #62070 (Collator::getSortKey() returns garbage)
        Fixed bug #62017 (datefmt_create with incorrectly encoded timezone leaks pattern)
        Fixed bug #60785 (memory leak in IntlDateFormatter constructor)
        ResourceBundle constructor now accepts NULL for the first two arguments

    JSON
        Fixed bug #61359 (json_encode() calls too many reallocs)

    libxml
        Fixed bug #62266 (Custom extension segfaults during xmlParseFile with FPM SAPI)

    Phar
        Fixed bug #62227 (Invalid phar stream path causes crash)

    Readline
        Fixed bug #62186 (readline fails to compile - void function should not return a value)

    Reflection
        Fixed bug #62384 (Attempting to invoke a Closure more than once causes segfault)
        Fixed bug #62202 (ReflectionParameter::getDefaultValue() memory leaks with constant)

    Sockets
        Fixed bug #62025 (__ss_family was changed on AIX 5.3)

    SPL
        Fixed bug #62433 (Inconsistent behavior of RecursiveDirectoryIterator to dot files)
        Fixed bug #62262 (RecursiveArrayIterator does not implement Countable)

    XML Writer
        Fixed bug #62064 (memory leak in the XML Writer module)

    Zip
        Upgraded libzip to 0.10.

http://www.php.net/
Titel: PHP 5.4.6 erschienen
Beitrag von: SiLæncer am 17 August, 2012, 07:30
Changelog:

Code: [Auswählen]
Version 5.4.6
16-August-2012

    CLI Server
        Implemented FR #62700 (have the console output 'Listening on http://localhost:8000').

    Core
        Fixed bug #62661 (Interactive php-cli crashes if include() is used in auto_prepend_file).
        Fixed bug #62653: (unset($array[$float]) causes a crash).
        Fixed bug #62565 (Crashes due non-initialized internal properties_table).
        Fixed bug #60194 (--with-zend-multibyte and --enable-debug reports LEAK with run-test.php).

    CURL
        Fixed bug #62499 (curl_setopt($ch, CURLOPT_COOKIEFILE, "") returns false). (r.hampartsumyan@gmail.

    DateTime
        Fixed bug #62500 (Segfault in DateInterval class when extended).

    Fileinfo
        Fixed bug #61964 (finfo_open with directory causes invalid free). (reeze.xia@gmail.

    Intl
        Fixed bug #62564 (Extending MessageFormatter and adding property causes crash).

    MySQLnd
        Fixed bug #62594 (segfault in mysqlnd_res_meta::set_mode).

    readline
        Fixed bug #62612 (readline extension compilation fails with sapi/cli/cli.h: No such file).

    Reflection
        Implemented FR #61602 (Allow access to name of constant used as default value)
        (reeze.xia@gmail.

    SimpleXML
        Implemented FR #55218 Get namespaces from current node.

    SPL
        Fixed bug #62616 (ArrayIterator::count() from IteratorIterator instance gives Segmentation fault).
        Fixed bug #61527 (ArrayIterator gives misleading notice on next() when moved to the end). (reeze.xia@gmail.

    Streams
        Fixed bug #62597 (segfault in php_stream_wrapper_log_error with ZTS build).

    Zlib
        Fixed bug #55544 (ob_gzhandler always conflicts with zlib.output_compression).

http://www.php.net/
Titel: PHP 5.4.7 erschienen
Beitrag von: SiLæncer am 13 September, 2012, 16:40
Changelog:

Code: [Auswählen]
PHP 5.4.7

- Core:
  . Fixed bug (segfault while build with zts and GOTO vm-kind). (Laruence)
  . Fixed bug #62955 (Only one directive is loaded from "Per Directory Values"
    Windows registry). (Felipe)
  . Fixed bug #62844 (parse_url() does not recognize //). (Andrew Faulds).
  . Fixed bug #62829 (stdint.h included on platform where HAVE_STDINT_H is not
    set). (Felipe)
  . Fixed bug #62763 (register_shutdown_function and extending class).
    (Laruence)
  . Fixed bug #62725 (Calling exit() in a shutdown function does not return
    the exit value). (Laruence)
  . Fixed bug #62744 (dangling pointers made by zend_disable_class). (Laruence)
  . Fixed bug #62716 (munmap() is called with the incorrect length).
    (slangley@google.com)
  . Fixed bug #62358 (Segfault when using traits a lot). (Laruence)
  . Fixed bug #62328 (implementing __toString and a cast to string fails)
    (Laruence)
  . Fixed bug #51363 (Fatal error raised by var_export() not caught by error
    handler). (Lonny Kapelushnik)
  . Fixed bug #40459 (Stat and Dir stream wrapper methods do not call
    constructor). (Stas)

- CURL:
  . Fixed bug #62912 (CURLINFO_PRIMARY_* AND CURLINFO_LOCAL_* not exposed).
    (Pierrick)
  . Fixed bug #62839 (curl_copy_handle segfault with CURLOPT_FILE). (Pierrick)

- DateTime:
  . Fixed bug #62852 (Unserialize invalid DateTime causes crash).
    (reeze.xia@gmail.com)

- Intl:
  . Fixed Spoofchecker not being registered on ICU 49.1. (Gustavo)
  . Fix bug #62933 (ext/intl compilation error on icu 3.4.1). (Gustavo)
  . Fix bug #62915 (defective cloning in several intl classes). (Gustavo)

- Installation:
  . Fixed bug #62460 (php binaries installed as binary.dSYM). (Reeze Xia)

- PCRE:
  . Fixed bug #55856 (preg_replace should fail on trailing garbage).
    (reg dot php at alf dot nu)

- PDO:
  . Fixed bug #62685 (Wrong return datatype in PDO::inTransaction()). (Laruence)

- Reflection:
  . Fixed bug #62892 (ReflectionClass::getTraitAliases crashes on importing
    trait methods as private). (Felipe)
  . Fixed bug #62715 (ReflectionParameter::isDefaultValueAvailable() wrong
    result). (Laruence)

- Session:
  . Fixed bug (segfault due to retval is not initialized). (Laruence)
  . Fixed bug (segfault due to PS(mod_user_implemented) not be reseted
    when close handler call exit). (Laruence)

- SPL:
  . Fixed bug #62904 (Crash when cloning an object which inherits SplFixedArray)
    (Laruence)
  . Implemented FR #62840 (Add sort flag to ArrayObject::ksort). (Laruence)

- Standard:
  . Fixed bug #62836 (Seg fault or broken object references on unserialize()).
    (Laruence)

- FPM:
  . Merged PR 121 by minitux to add support for slow request counting on PHP
    FPM status page. (Lars)
Download: Klick (http://windows.php.net/downloads/releases/php-5.4.7-nts-Win32-VC9-x86.zip)

http://www.php.net/
Titel: Skriptsprachen: PHP 5.5 als erste Alpha veröffentlicht
Beitrag von: ritschibie am 19 November, 2012, 11:37
Der Entwicklungszyklus von PHP 5.5 geht mit der Veröffentlichung einer ersten Alpha in die Endphase. Die Entwickler hoffen auf reges Feedback aus der Community. Der Quellcode liegt offen im Git-Verzeichnis des Projekts.

Mit der Veröffentlichung der ersten Alpha von PHP 5.5 hoffen die Entwickler auf intensive Rückmeldung aus der Gemeinschaft. Der Quellcode liegt offen auf dem Git-Server des Projekts. Mit PHP 5.5 fällt die Unterstützung für Windows XP und Server 2003 weg.

Zu den wesentlichen Neuerungen in PHP 5.5 gehört unter anderem die Umsetzung eines einfachen Verschlüsselungs-APIs, das das bisherige ersetzen soll. Außerdem werden künftig gehashte Passwörter standardmäßig mit Bcrypt generiert. In früheren Versionen griffen viele Entwickler noch auf die beiden unsicheren Hashing-Verfahren Sha1 und Md5 aus Bequemlichkeit zurück. Mit dem einfacher gehaltenen neuen API soll das Hashing nicht nur simpler, sondern auch konfigurierbarer werden.

PHP 5.5 wird auch Generatoren unterstützen, mit denen Iteratoren einfach und schnell erzeugt werden können. Java-Entwickler werden sich über das Schlüsselwort finally freuen, das sich in Try/Catch-Blöcken nutzen lässt. Die Funktion list() lässt sich künftig auch mit foreach nutzen. Außerdem werden Arrays oder Strings konstant dereferenziert.

Die detaillierte Liste der Änderungen haben die Entwickler in einem Dokument auf Pastebin veröffentlicht. Der Quellcode ist als gepacktes Archiv auf der Webseite des Projekts erhältlich. Eine Beschreibung für den Zugang zum Git-Server ist dort ebenfalls zu lesen.

Quelle und weitere Links: http://www.golem.de/news/skriptsprachen-php-5-5-als-erste-alpha-veroeffentlicht-1211-95786.html
Titel: PHP 5.4.9 and PHP 5.3.19 erschienen
Beitrag von: SiLæncer am 23 November, 2012, 18:00
Changelog:

Code: [Auswählen]
22-November-2012

    Core:
        Fixed bug #63305 (zend_mm_heap corrupted with traits).
        Fixed bug #63369 ((un)serialize() leaves dangling pointers, causes crashes).
        Fixed bug #63241 (PHP fails to open Windows deduplicated files).
        Fixed bug #62444 (Handle leak in is_readable on windows).

    Curl:
        Fixed bug #63363 (Curl silently accepts boolean true for SSL_VERIFYHOST).

    Fileinfo:
        Fixed bug #63248 (Load multiple magic files from a directory under Windows).

    Libxml
        Fixed bug #63389 (Missing context check on libxml_set_streams_context() causes memleak).

    Mbstring:
        Fixed bug #63447 (max_input_vars doesn't filter variables when mbstring.encoding_translation = On).

    OCI8:
        Fixed bug #63265 (Add ORA-00028 to the PHP_OCI_HANDLE_ERROR macro)

    PCRE:
        Fixed bug #63180 (Corruption of hash tables).
        Fixed bug #63055 (Segfault in zend_gc with SF2 testsuite).
        Fixed bug #63284 (Upgrade PCRE to 8.31).

    PDO:
        Fixed bug #63235 (buffer overflow in use of SQLGetDiagRec).

    PDO_pgsql:
        Fixed bug #62593 (Emulate prepares behave strangely with PARAM_BOOL).

    Phar:
        Fixed bug #63297 (Phar fails to write an openssl based signature).

    Streams:
        Fixed bug #63240 (stream_get_line() return contains delimiter string).

    Reflection:
        Fixed bug #63399 (ReflectionClass::getTraitAliases() incorrectly resolves traitnames).

Version 5.3.19
22-November-2012

    Core:
        Fixed bug #63241 (PHP fails to open Windows deduplicated files).
        Fixed bug #62444 (Handle leak in is_readable on windows).

    Libxml:
        Fixed bug #63389 (Missing context check on libxml_set_streams_context() causes memleak).

    Mbstring:
        Fixed bug #63447 (max_input_vars doesn't filter variables when mbstring.encoding_translation = On).

    MySQL:
        Fixed compilation failure on mixed 32/64 bit systems.

    OCI8:
        Fixed bug #63265 (Add ORA-00028 to the PHP_OCI_HANDLE_ERROR macro)

    PCRE:
        Fixed bug #63055 (Segfault in zend_gc with SF2 testsuite).
        Fixed bug #63284 (Upgrade PCRE to 8.31).

    PDO:
        Fixed bug #63235 (buffer overflow in use of SQLGetDiagRec).

    PDO_pgsql:
        Fixed bug #62593 (Emulate prepares behave strangely with PARAM_BOOL).

    Phar:
        Fixed bug #63297 (Phar fails to write an openssl based signature).

    Streams:
        Fixed bug #63240 (stream_get_line() return contains delimiter string).
http://www.php.net/
Titel: PHP 5.4.10 & PHP 5.3.20 erschienen
Beitrag von: SiLæncer am 20 Dezember, 2012, 16:44
Code: [Auswählen]
Version 5.4.10
20-December-2012

    Core:
        Fixed bug #63635 (Segfault in gc_collect_cycles).
        Fixed bug #63512 (parse_ini_file() with INI_SCANNER_RAW removes quotes from value).
        Fixed bug #63468 (wrong called method as callback with inheritance).
        Fixed bug #63451 (config.guess file does not have AIX 7 defined, shared objects are not created).
        Fixed bug #61557 (Crasher in tt-rss backend.php).
        Fixed bug #61272 (ob_start callback gets passed empty string).

    Date:
        Fixed bug #63666 (Poor date() performance).
        Fixed bug #63435 (Datetime::format('u') sometimes wrong by 1 microsecond).

    Imap:
        Fixed bug #63126 (DISABLE_AUTHENTICATOR ignores array).

    Json:
        Fixed bug #63588 (use php_next_utf8_char and remove duplicate implementation).

    MySQLi:
        Fixed bug #63361 (missing header).

    MySQLnd:
        Fixed bug #63398 (Segfault when polling closed link).

    Fileinfo:
        Fixed bug #63590 (Different results in TS and NTS under Windows).

    FPM:
        Fixed bug #63581 Possible null dereference and buffer overflow.

    Pdo_sqlite:
        Fixed bug #63149 getColumnMeta should return the table name when system SQLite used.

    Apache2 Handler SAPI:
        Enabled Apache 2.4 configure option for Windows.

    Reflection:
        Fixed bug #63614 (Fatal error on Reflection).

    SOAP:
        Fixed bug #63271 (SOAP wsdl cache is not enabled after initial requests).

    Sockets:
        Fixed bug #49341 (Add SO_REUSEPORT support for socket_set_option()).

Version 5.3.20
20-December-2012

    Zend Engine:
        Fixed bug #63635 (Segfault in gc_collect_cycles).
        Fixed bug #63512 (parse_ini_file() with INI_SCANNER_RAW removes quotes from value).
        Fixed bug #63468 (wrong called method as callback with inheritance).

    Core:
        Fixed bug #63451 (config.guess file does not have AIX 7 defined, shared objects are not created).
        Fixed bug #63377 (Segfault on output buffer).

    Apache2 Handler SAPI:
        Enabled Apache 2.4 configure option for Windows.

    Date:
        Fixed bug #63435 (Datetime::format('u') sometimes wrong by 1 microsecond).

    Fileinfo:
        Fixed bug #63248 (Load multiple magic files from a directory under Windows).
        Fixed bug #63590 (Different results in TS and NTS under Windows).

    FPM:
        Fixed bug #63581 (Possible null dereference and buffer overflow).

    Imap:
        Fixed bug #63126 (DISABLE_AUTHENTICATOR ignores array).

    MySQLnd:
        Fixed bug #63398 (Segfault when polling closed link).

    Reflection:
        Fixed bug #63614 (Fatal error on Reflection).

    SOAP
        Fixed bug #63271 (SOAP wsdl cache is not enabled after initial requests).
http://www.php.net/
Titel: Zend Optimizer+ landet in PHP 5.5
Beitrag von: ritschibie am 11 März, 2013, 11:32
Zeev Suraski, CTO und Mitbegründer des PHP-Unternehmens Zend Enterprise, hat bekanntgegeben, dass der Zend Optimizer+ in das derzeit entwickelte PHP 5.5 einziehen wird. Der Opcode-Cache und Code-Optimierer war erst kürzlich zur Open-Source-Software geworden. Zuvor war er allein Bestandteil des Zend Server. Er verbessert den vom Interpreter aus den PHP-Quelltexten erzeugten Bytecode und ermöglicht das Laden von PHP-Anwendungen. Der Optimizer hilft dadurch, PHP-Programme zu beschleunigen.

Der ganze Artikel (http://www.heise.de/newsticker/meldung/Zend-Optimizer-landet-in-PHP-5-5-1820029.html)

Quelle: www.heise.de
Titel: Erste Beta von PHP 5.5 mit neuem Beschleuniger
Beitrag von: ritschibie am 22 März, 2013, 12:05
Die PHP-Entwickler haben eine erste Beta der Version 5.5 der Skriptsprache veröffentlicht. Das bedeutet, dass nun keine weiteren Neuerungen mehr in das nächste PHP-Release aufgenommen werden. Als letzte wichtige Features sind unter anderem die array_column()-Funktion für ein vereinfachtes Extrahieren von Spalten aus mehrdimensionalen Arrays, die Integration des Zend Optimizer+, die Unterstützung nichtskalarer Iterator-Schlüssel durch die foreach()-Schleife und die Möglichkeit, Titel von Prozessen in CLI/CLI-Server-SAPIs zu ändern, hinzugekommen. Sämtliche Neuerungen listet das News-Dokument auf.

Der ganze Artikel (http://www.heise.de/newsticker/meldung/Erste-Beta-von-PHP-5-5-mit-neuem-Beschleuniger-1827890.html)

Quelle: www.heise.de
Titel: PHP 5.4.14 und PHP 5.3.24 erschienen
Beitrag von: SiLæncer am 12 April, 2013, 06:31
Code: [Auswählen]
Version 5.4.14
11-April-2013

    Core:
        Fixed bug #64529 (Ran out of opcode space).
        Fixed bug #64515 (Memoryleak when using the same variablename two times in function declaration).
        Fixed bug #64432 (more empty delimiter warning in strX methods).
        Fixed bug #64417 (ArrayAccess::&offsetGet() in a trait causes fatal error).
        Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
        Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10 or 5.4.11).
        Fixed bug #63976 (Parent class incorrectly using child constant in class property).
        Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not handle exceptions properly).
        Fixed bug #62343 (Show class_alias In get_declared_classes()).
    PCRE:
        Merged PCRE 8.32.
    SNMP:
        Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly).
    Zip:
        Fixed bug #64452 (Zip crash intermittently). (Anatol)

Version 5.3.24
11-April-2013

    Core:
        Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
        Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not handle exceptions properly).
        Fixed bug #62343 (Show class_alias In get_declared_classes()).
    PCRE:
        Merged PCRE 8.32.
    mysqlnd:
        Fixed bug #63530 (mysqlnd_stmt::bind_one_parameter crashes, uses wrong alloc for stmt->param_bind).
    DateTime:
        Fixed bug #62852 (Unserialize Invalid Date causes crash).
    Zip:
        Fixed bug #64452 (Zip crash intermittently).
http://www.php.net/
Titel: PHP 5.4.15 und PHP 5.3.25 erschienen
Beitrag von: SiLæncer am 09 Mai, 2013, 10:21
Code: [Auswählen]
Version 5.4.15
09-May-2013

    Core:
        Fixed bug #64578 (debug_backtrace in set_error_handler corrupts zend heap: segfault).
        Fixed bug #64458 (dns_get_record result with string of length -1).
        Fixed bug #64433 (follow_location parameter of context is ignored for most response codes).
        Fixed bug #47675 (fd leak on Solaris).
        Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
        Upgraded libmagic to 5.14.
    Streams:
        Fixed Windows x64 version of stream_socket_pair() and improved error handling.
    Zip:
        Fixed bug #64342 (ZipArchive::addFile() has to check for file existence).

Version 5.3.25
09-May-2013

    Core:
        Fixed bug #64578 (debug_backtrace in set_error_handler corrupts zend heap: segfault).
        Fixed bug #64458 (dns_get_record result with string of length -1).
        Fixed bug #47675 (fd leak on Solaris).
        Fixed bug #64577 (fd leak on Solaris).
    Streams:
        Fixed Windows x64 version of stream_socket_pair() and improved error handling.
    Zip:
        Fixed bug #64342 (ZipArchive::addFile() has to check for file existence).
http://www.php.net/
Titel: PHP 5.5.0
Beitrag von: SiLæncer am 21 Juni, 2013, 06:15
Whats new: >>

Zitat
The PHP development team is proud to announce the immediate availability of PHP 5.5.0. This release includes a large number of new features and bug fixes.

The key features of PHP 5.5.0 include:

    Added generators and coroutines.
    Added the finally keyword.
    Added a simplified password hashing API.
    Added support for constant array/string dereferencing.
    Added scalar class name resolution via ::class.
    Added support for using empty() on the result of function calls and other expressions.
    Added support for non-scalar Iterator keys in foreach.
    Added support for list() constructs in foreach statements.
    Added the Zend OPcache extension for opcode caching.
    The GD library has been upgraded to version 2.1 adding new functions and improving existing functionality.
    A lot more improvements and fixes.

Changes that affect compatibility:

    PHP logo GUIDs have been removed.
    Windows XP and 2003 support dropped.
    Case insensitivity is no longer locale specific. All case insensitive matching for function, class and constant names is now performed in a locale independent manner according to ASCII rules.

Full changelog (http://php.net/ChangeLog-5.php#5.5.0)

http://www.php.net/
Titel: PHP 5.5.1 Final
Beitrag von: SiLæncer am 19 Juli, 2013, 14:15
Changelog : http://www.php.net/ChangeLog-5.php#5.5.1

http://www.php.net/
Titel: PHP 5.5.2 Final
Beitrag von: SiLæncer am 16 August, 2013, 13:52
Changelog : http://www.php.net/ChangeLog-5.php#5.5.2

http://www.php.net/
Titel: PHP 5.5.3
Beitrag von: SiLæncer am 22 August, 2013, 13:55
Changelog : http://www.php.net/ChangeLog-5.php#5.5.3

http://www.php.net/
Titel: PHP 5.5.4
Beitrag von: SiLæncer am 19 September, 2013, 13:31
Changelog : http://www.php.net/ChangeLog-5.php#5.5.4

http://www.php.net/
Titel: PHP 5.5.5
Beitrag von: SiLæncer am 17 Oktober, 2013, 09:15
Changelog : http://www.php.net/ChangeLog-5.php#5.5.5

http://www.php.net/
Titel: PHP 5.5.6
Beitrag von: SiLæncer am 14 November, 2013, 16:21
Whats new: >>

Code: [Auswählen]
Core:
Improved performance of array_merge() and func_get_args() by eliminating useless copying.
Fixed bug #65947 (basename is no more working after fgetcsv in certain situation).
Fixed bug #65939 (Space before ";" breaks php.ini parsing).
Fixed bug #65911 (scope resolution operator - strange behavior with $this).
Fixed bug #65936 (dangling context pointer causes crash).
FPM:
Changed default listen() backlog to 65535.
MySQLi:
Fixed bug #66043 (Segfault calling bind_param() on mysqli).
OPCache:
Increased limit for opcache.max_accelerated_files to 1,000,000.
Fixed issue #115 (path issue when using phar).
Fixed issue #149 (Phar mount points not working with OPcache enabled).
ODBC:
Fixed bug #65950 (Field name truncation if the field name is bigger than 32 characters).
PDO:
Fixed bug #66033 (Segmentation Fault when constructor of PDO statement throws an exception).
Fixed bug #65946 (sql_parser permanently converts values bound to strings).
Standard:
Fixed bug #64760 (var_export() does not use full precision for floating-point numbers).
http://www.php.net/
Titel: PHP 5.5.8
Beitrag von: SiLæncer am 12 Januar, 2014, 07:20
Code: [Auswählen]
Version 5.5.8
9-Jan-2014

    Core:
        Disallowed JMP into a finally block.
        Added validation of class names in the autoload process.
        Fixed invalid C code in zend_strtod.c.
        Fixed bug #66041 (list() fails to unpack yielded ArrayAccess object).
        Fixed bug #65764 (generators/throw_rethrow FAIL with ZEND_COMPILE_EXTENDED_INFO).
        Fixed bug #61645 (fopen and O_NONBLOCK).
        Fixed bug #66218 (zend_register_functions breaks reflection).
    Date:
        Fixed bug #66060 (Heap buffer over-read in DateInterval).
        Fixed bug #65768 (DateTimeImmutable::diff does not work).
    DOM:
        Fixed bug #65196 (Passing DOMDocumentFragment to DOMDocument::saveHTML() Produces invalid Markup).
    Exif:
        Fixed bug #65873 (Integer overflow in exif_read_data()).
    Filter:
        Fixed bug #66229 (128.0.0.0/16 isn't reserved any longer).
    GD:
        Fixed bug #64405 (Use freetype-config for determining freetype2 dir(s)).
    PDO_odbc:
        Fixed bug #66311 (Stack smashing protection kills PDO/ODBC queries).
    MySQLi:
        Fixed bug #65486 (mysqli_poll() is broken on win x64).
    OPCache:
        Fixed revalidate_path=1 behavior to avoid caching of symlinks values.
        Fixed Issue #140: "opcache.enable_file_override" doesn't respect "opcache.revalidate_freq".
    SNMP:
        Fixed SNMP_ERR_TOOBIG handling for bulk walk operations.
    SOAP:
        Fixed bug #66112 (Use after free condition in SOAP extension).
    Sockets:
        Fixed bug #65923 (ext/socket assumes AI_V4MAPPED is defined).
    XSL:
        Fixed bug #49634 (Segfault throwing an exception in a XSL registered function).
    ZIP:
        Fixed bug #66321 (ZipArchive::open() ze_obj->filename_len not real).
http://www.php.net/
Titel: PHP 5.5.9 Final
Beitrag von: SiLæncer am 06 Februar, 2014, 13:45
Code: [Auswählen]
Version 5.5.9
6-Feb-2014

    Core:
        Fixed bug #66509 (copy() arginfo has changed starting from 5.4).
    GD:
        Fixed bug #66356 (Heap Overflow Vulnerability in imagecrop()).
    OPCache:
        Fixed bug #66474 (Optimizer bug in constant string to boolean conversion).
        Fixed bug #66461 (PHP crashes if opcache.interned_strings_buffer=0).
        Fixed bug #66298 (ext/opcache/Optimizer/zend_optimizer.c has dos-style ^M as lineend).
    PDO_pgsql:
        Fixed bug #62479 (PDO-pgsql cannot connect if password contains spaces).
    Readline:
        Fixed bug #66412 (readline_clear_history() with libedit causes segfault after #65714).
    Session:
        Fixed bug #66469 (Session module is sending multiple set-cookie headers when session.use_strict_mode=1).
        Fixed bug #66481 (Segfaults on session_name()).
    Standard:
        Fixed bug #66395 (basename function doesn't remove drive letter).
    Sockets:
        Fixed bug #66381 (__ss_family was changed on AIX 5.3).
    Zend Engine:
        Fixed bug #66009 (Failed compilation of PHP extension with C++ std library using VS 2012).

http://www.php.net/
Titel: PHP 5.5.10
Beitrag von: SiLæncer am 06 März, 2014, 17:20
Changelog : http://www.php.net/ChangeLog-5.php#5.5.10

http://www.php.net/
Titel: PHP Handbuch 14.03.2014
Beitrag von: SiLæncer am 15 März, 2014, 21:18
(http://download.winboard.org/uploads/Image/257448350_4019f85705.jpg)
Umfangreiches Handbuch, das Sie über alle Fragen zur Opensource-Scriptsprache PHP aufklärt.

Das Handbuch erläutert Ihnen alles was Sie zu "Hypertext Preprocessor" (PHP) wissen müssen. Nach der allgemeinen Einführung erhalten Sie jede Menge Informationen zu Sprachreferenzen, Sicherheit und zusätzlichen Features von PHP. Hintergrund: Die Programmiersprache PHP wird gewöhnlich dazu verwendet,dynamisch generierte Webseiten in kurzer Zeit zu erzeugen.

Freeware

http://www.php.net/
Titel: PHP 5.5.11
Beitrag von: SiLæncer am 04 April, 2014, 05:10
Changelog : http://www.php.net/ChangeLog-5.php#5.5.11

http://www.php.net/
Titel: PHP 5.5.12
Beitrag von: SiLæncer am 01 Mai, 2014, 11:39
Changelog : http://www.php.net/ChangeLog-5.php#5.5.12

http://www.php.net/
Titel: PHP Handbuch 02.05.2014
Beitrag von: SiLæncer am 03 Mai, 2014, 21:20
(http://download.winboard.org/uploads/Image/257448350_4019f85705.jpg)
Umfangreiches Handbuch, das Sie über alle Fragen zur Opensource-Scriptsprache PHP aufklärt.

Das Handbuch erläutert Ihnen alles was Sie zu "Hypertext Preprocessor" (PHP) wissen müssen. Nach der allgemeinen Einführung erhalten Sie jede Menge Informationen zu Sprachreferenzen, Sicherheit und zusätzlichen Features von PHP. Hintergrund: Die Programmiersprache PHP wird gewöhnlich dazu verwendet,dynamisch generierte Webseiten in kurzer Zeit zu erzeugen.

Freeware

http://www.php.net/
Titel: PHP 5.6.0 Beta 3
Beitrag von: SiLæncer am 29 Mai, 2014, 18:45
Release Notes
Core:
Fixed bug #67169 (array_splice all elements, then []= gives wrong index).
Fixed bug #67198 (php://input regression).
Fixed bug #67247 (spl_fixedarray_resize integer overflow).
Fixed bug #67250 (iptcparse out-of-bounds read).
Fixed bug #67252 (convert_uudecode out-of-bounds read).
Date:
Fixed bug #67251 (date_parse_from_format out-of-bounds read).
Fixed bug #67253 (timelib_meridian_with_check out-of-bounds read).
GD:
Fixed bug #67248 (imageaffinematrixget missing check of parameters).
OpenSSL:
Fixed bug #67224 (Fall back to crypto_type from context if not specified explicitly in stream_socket_enable_crypto).
PCRE:
Fixed bug #67238 (Ungreedy and min/max quantifier bug, applied patch from the upstream).
-bstring:
Fixed bug #67199 (mb_regex_encoding mismatch).
[close]

http://www.php.net/
Titel: PHP 5.5.13 Final
Beitrag von: SiLæncer am 30 Mai, 2014, 12:45
Changelog : http://www.php.net/ChangeLog-5.php#5.5.13

http://www.php.net/
Titel: PHP 5.6.0 Beta 4
Beitrag von: SiLæncer am 06 Juni, 2014, 05:10
Release Notes
Core:
Fixed bug #67249 (printf out-of-bounds read). (Stas)
Date:
Fixed bug #67308 (Serialize of DateTime truncates fractions of second). (Adam)
Fileinfo:
Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS).
Fixed bug #67328 (fileinfo: fileinfo: numerous file_printf calls resulting in performance degradation).
Fixed bug #67326 (fileinfo: cdf_read_short_sector insufficient boundary check).
Fixed bug #67329 (fileinfo: NULL pointer deference flaw by processing certain CDF files).
SPL:
Fixed bug #67359 (Segfault in recursiveDirectoryIterator). (Laruence)
phpdbg:
Fixed bug which caused phpdbg to fail immediately on startup in non-debug builds. (Bob)
[close]

http://www.php.net/
Titel: PHP 5.5.14
Beitrag von: SiLæncer am 26 Juni, 2014, 12:14
Release Notes
Core:
Fixed BC break introduced by patch for bug #67072.
Fixed bug #66622 (Closures do not correctly capture the late bound class
static::) in some cases).
Fixed bug #67390 (insecure temporary file use in the configure script).
CVE-2014-3981)
Fixed bug #67399 (putenv with empty variable may lead to crash).
Fixed bug #67498 (phpinfo() Type Confusion Information Leak Vulnerability).
CLI server:
Fixed Bug #67406 (built-in web-server segfaults on startup).
Date:
Fixed bug #67308 (Serialize of DateTime truncates fractions of second).
Fixed regression in fix for bug #67118 (constructor can't be called twice).
Fileinfo:
Fixed bug #67326 (fileinfo: cdf_read_short_sector insufficient boundary check).
(CVE-2014-0207)
Fixed bug #67410 (fileinfo: mconvert incorrect handling of truncated pascal
string size). (CVE-2014-3478)
Fixed bug #67411 (fileinfo: cdf_check_stream_offset insufficient boundary
check). (CVE-2014-3479)
Fixed bug #67412 (fileinfo: cdf_count_chain insufficient boundary check).
CVE-2014-3480)
Fixed bug #67413 (fileinfo: cdf_read_property_info insufficient boundary
check). (CVE-2014-3487)
Intl:
Fixed bug #67349 (Locale::parseLocale Double Free).
Fixed bug #67397 (Buffer overflow in locale_get_display_name and
uloc_getDisplayName (libicu 4.8.1)).
Network:
Fixed bug #67432 (Fix potential segfault in dns_get_record()).
CVE-2014-4049).
OPCache:
Fixed issue #183 (TMP_VAR is not only used once).
OpenSSL:
Fixed bug #65698 (certificates validity parsing does not work past 2050).
Fixed bug #66636 (openssl_x509_parse warning with (V_ASN1_GENERALIZEDTIME).
PDO-ODBC:
Fixed bug #50444 (PDO-ODBC changes for 64-bit).
SOAP:
Implemented FR #49898 (Add SoapClient::__getCookies()).
SPL:
Fixed bug #66127 (Segmentation fault with ArrayObject unset).
Fixed bug #67359 (Segfault in recursiveDirectoryIterator).
Fixed bug #67360 (Missing element after ArrayObject::getIterator).
Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type
Confusion). (CVE-2014-3515)
[close]

http://www.php.net/
Titel: PHP 5.6.0 RC 2
Beitrag von: SiLæncer am 04 Juli, 2014, 09:30
Release Notes

Core:

Fixed bug #67368 (Memory leak with immediately dereferenced array in class constant).
Fixed bug #67468 (Segfault in highlight_file()/highlight_string()).
Fixed bug #67091 (make install fails to install libphp5.so on FreeBSD 10.0).
Fixed bug #67498 (phpinfo() Type Confusion Information Leak Vulnerability).

FPM:

Fix bug #67531 (syslog cannot be set in pool configuration).
Fix bug #67541 (Fix Apache 2.4.10+ SetHandler proxy:fcgi://
incompatibilities).

Intl:

Fixed bug #67349 (Locale::parseLocale Double Free).
Fixed bug #67397 (Buffer overflow in locale_get_display_name and uloc_getDisplayName (libicu 4.8.1)).
pgsql:
Fix bug #67550 (Error in code "form" instead of "from", pgsql.c, line 756), which affected builds against libpq < 7.3.

phpdbg:

Fix Bug #67499 (readline feature not enabled when build with libedit).
Fix issue krakjoe/phpdbg#94 (List behavior is inconsistent).
Fix issue krakjoe/phpdbg#97 (The prompt should always ensure it is on a newline).
Fix issue krakjoe/phpdbg#98 (break if does not seem to work).
Fix issue krakjoe/phpdbg#99 (register function has the same behavior as run).
Fix issue krakjoe/phpdbg#100 (No way to list the current stack/frames) (Help entry was missing).

SPL:

Fixed bug #67492 (unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion) (CVE-2014-3515).

[close]

http://www.php.net/
Titel: PHP 5.5.15
Beitrag von: SiLæncer am 24 Juli, 2014, 13:37
Release Notes

CLI server:
Fixed bug #67429 (CLI server is missing some new HTTP response codes).
Fixed bug #66830 (Empty header causes PHP built-in web server to hang).
Core:
Fixed bug #67428 (header('Location: foo') will override a 308-399 response code).
Fixed bug #67436 (Autoloader isn't called if two method definitions don't match).
Fixed bug #67091 (make install fails to install libphp5.so on FreeBSD 10.0).
Fixed bug #67497 eval with parse error causes segmentation fault in generator).
Fixed bug #67151 (strtr with empty array crashes).
Fixed bug #67407 (Windows 8.1/Server 2012 R2 reported as Windows 8/Server 2012).
FPM:
Fixed bug #67530 (error_log=syslog ignored).
Fixed bug #67531 (syslog cannot be set in pool configuratio).
Intl:
Fixed bug #66921 (Wrong argument type hint for function intltz_from_date_time_zone).
Fixed bug #67052 (NumberFormatter::parse() resets LC_NUMERIC setting).
OPCache:
Fixed bug #67215 (php-cgi work with opcache, may be segmentation fault happen).
pgsql:
Fixed bug #67550 (Error in code "form" instead of "from", pgsql.c, line 756), which affected builds against libpq < 7.3).
Phar:
Fixed bug #67587 (Redirection loop on nginx with FPM).
SPL:
Fixed bug #67539 (ArrayIterator use-after-free due to object change during sorting).
Fixed bug #67538 (SPL Iterators use-after-free) (CVE-2014-4670).
Streams:
Fixed bug #67430 (http:// wrapper doesn't follow 308 redirects).

[close]

http://www.php.net/
Titel: PHP 5.6.0 RC 3
Beitrag von: SiLæncer am 01 August, 2014, 10:45
Release Notes

Core:

Fixed bug #67497 (eval with parse error causes segmentation fault in generator).
Fixed bug #67151 (strtr with empty array crashes).
Fixed bug #67407 (Windows 8.1/Server 2012 R2 reported as Windows 8/Server 2012).
Fixed bug #66608 (Incorrect behavior with nested "finally" blocks).
Implemented FR #34407 (ucwords and Title Case).

COM:

Fixed missing type checks in com_event_sink.

CLI server:

Fixed bug #66830 (Empty header causes PHP built-in web server to hang).
Fixed bug #67594 (Unable to access to apache_request_headers() elements).

FPM:

Fixed bug #67530 (error_log=syslog ignored).
Fixed bug #67635 (php links to systemd libraries without using pkg-config).

Intl:

Fixed bug #66921 (Wrong argument type hint for function intltz_from_date_time_zone). (Stas)
Fixed bug #67052 (NumberFormatter::parse() resets LC_NUMERIC setting).

pgsql:

Fixed bug #67555 (Cannot build against libpq 7.3).

ODBC:

Fixed bug #60616 (odbc_fetch_into returns junk at end of multi-byte char fields).

OpenSSL:

Fixed missing type checks in OpenSSL options .
Fixed bug #67609 (TLS connections fail behind HTTP proxy).
Fixed broken build against OpenSSL older than 0.9.8 where ECDH unavailable.
Fixed bug #67666 (Subject altNames doesn't support wildcard matching).

Phar:

Fixed bug #67587 (Redirection loop on nginx with FPM).

readline:

Fixed bug #55496 (Interactive mode doesn't force a newline before the prompt).
Fixed bug #67496 (Save command history when exiting interactive shell with control-c).

Reflection:

Implemented FR #67713 (loosen the restrictions on ReflectionClass::newInstanceWithoutConstructor()).

SPL:

Fixed bug #67539 (ArrayIterator use-after-free due to object change during sorting).
Fixed bug #67538 (SPL Iterators use-after-free). (CVE-2014-4670).

Session:

Fixed missing type checks in php_session_create_id.
Fixed bug #66827 (Session raises E_NOTICE when session name variable is array).

OPCache:

Fixed bug #67215 (php-cgi work with opcache, may be segmentation fault happen).
phpdbg
Fixed bug #67575 (Compilation fails for phpdbg when the build directory != src directory).

[close]

http://www.php.net/
Titel: PHP Handbuch 08.08.2014
Beitrag von: SiLæncer am 10 August, 2014, 20:20
(http://download.winboard.org/uploads/Image/257448350_4019f85705.jpg)
Umfangreiches Handbuch, das Sie über alle Fragen zur Opensource-Scriptsprache PHP aufklärt.

Das Handbuch erläutert Ihnen alles was Sie zu "Hypertext Preprocessor" (PHP) wissen müssen. Nach der allgemeinen Einführung erhalten Sie jede Menge Informationen zu Sprachreferenzen, Sicherheit und zusätzlichen Features von PHP. Hintergrund: Die Programmiersprache PHP wird gewöhnlich dazu verwendet,dynamisch generierte Webseiten in kurzer Zeit zu erzeugen.

Freeware

http://www.php.net/
Titel: PHP 5.6.0 RC 4
Beitrag von: SiLæncer am 16 August, 2014, 09:40
Release Notes

COM:
Fixed bug #41577 (DOTNET is successful once per server run)
Core:
Fixed bug #67693 (incorrect push to the empty array).
Removed inconsistency regarding behaviour of array in constants at
run-time.
Fileinfo:
Fixed bug #67705 (extensive backtracking in rule regular expression).
(CVE-2014-3538)
FPM:
Fix bug #67606 (revised fix 67541, broke mod_fastcgi BC).
GD:
Fixed bug #66901 (php-gd 'c_color' NULL pointer dereference).
(CVE-2014-2497)
Milter:
Fixed bug #67715 (php-milter does not build and crashes randomly).
OpenSSL:
Fixed bug #41631 (socket timeouts not honored in blocking SSL reads).
SPL:
Revert fix for bug #67064 (BC issues).
Zlib:
Fixed bug #67724 (chained zlib filters silently fail with large amounts of
data).
Date:
Fixed bug #66091 (memory leaks in DateTime constructor)

[close]

http://www.php.net/
Titel: "End of Life" für PHP 5.3
Beitrag von: SiLæncer am 18 August, 2014, 13:26
Die mittlerweile fünf Jahre alte Version der Skriptsprache erhält fortan keine weiteren Bugfixes mehr. Spätestens jetzt ist es angeraten, auf ein aktuelleres PHP zu wechseln.

Die letzte Woche freigegebene Version PHP 5.3.29 wird aller Voraussicht nach die letzte Ausgabe des 5.3-Release-Strangs der Skriptsprache sein. Das sogenannte End of Life bedeutet, dass die in PHP 5.3.29 eingeflossenen Sicherheits- und Bugfixes die letzten sein werden, die PHP 5.3.x erhalten wird. Für PHP-Entwickler, die mit dieser alten Sprachversion arbeiten, bedeutet das, dass nun der Wechsel auf ein neueres PHP dringend anzuraten ist.

Der ganze Artikel (http://www.heise.de/newsticker/meldung/End-of-Life-fuer-PHP-5-3-2293804.html)

Quelle : www.heise.de
Titel: PHP 5.5.16
Beitrag von: SiLæncer am 24 August, 2014, 17:20
Release Notes

COM:
Fixed missing type checks in com_event_sink.
Core:
Fixed bug #67693 (incorrect push to the empty array).
Fileinfo:
Fixed bug #67705 (extensive backtracking in rule regular expression). (CVE-2014-3538).
Fixed bug #67716 (Segfault in cdf.c). (CVE-2014-3587)).
FPM:
Fixed bug #67635 (php links to systemd libraries without using pkg-config).
GD:
Fixed bug #66901 (php-gd 'c_color' NULL pointer dereference). (CVE-2014-2497).
Fixed bug #67730 (Null byte injection possible with imagexxx functions). (CVE-2014-5120).
Milter:
Fixed bug #67715 (php-milter does not build and crashes randomly).
Network:
Fixed bug #67717 (segfault in dns_get_record). (CVE-2014-3597).
OpenSSL:
Fixed missing type checks in OpenSSL options.
readline:
Fixed bug #55496 (Interactive mode doesn't force a newline before the prompt).
Fixed bug #67496 (Save command history when exiting interactive shell with control-c).
Sessions:
Fixed missing type checks in php_session_create_id.
ODBC:
Fixed bug #60616 (odbc_fetch_into returns junk data at end of multi-byte char fields).

[close]

http://www.php.net/
Titel: PHP 5.6 Final
Beitrag von: SiLæncer am 28 August, 2014, 13:46
Changelog : http://php.net/ChangeLog-5.php#5.6.0

http://www.php.net/
Titel: PHP 5.6.1
Beitrag von: SiLæncer am 25 September, 2014, 18:48
Changelog : http://php.net/ChangeLog-5.php#5.6.1

http://www.php.net/
Titel: PHP 5.6.2
Beitrag von: SiLæncer am 17 Oktober, 2014, 16:15
Changelog : http://php.net/ChangeLog-5.php#5.6.2

http://www.php.net/
Titel: PHP 5.6.3
Beitrag von: SiLæncer am 14 November, 2014, 05:34
Changelog : http://php.net/ChangeLog-5.php#5.6.3

http://www.php.net/
Titel: PHP 5.6.4
Beitrag von: SiLæncer am 18 Dezember, 2014, 18:15
Changelog : http://php.net/ChangeLog-5.php#5.6.4 (sobald verfügbar)

Download (Windows) : http://windows.php.net/downloads/releases/

Download (Linux) : http://de2.php.net/distributions/

http://www.php.net/
Titel: PHP 5.6.5 Final
Beitrag von: SiLæncer am 22 Januar, 2015, 13:24
Changelog
- Core:
  . Upgraded crypt_blowfish to version 1.3. (Leigh)
  . Fixed bug #60704 (unlink() bug with some files path).
  . Fixed bug #65419 (Inside trait, self::class != __CLASS__). (Julien)
  . Fixed bug #68536 (pack for 64bits integer is broken on bigendian). (Remi)
  . Fixed bug #55541 (errors spawn MessageBox, which blocks test automation).
    (Anatol)
  . Fixed bug #68297 (Application Popup provides too few information). (Anatol)
  . Fixed bug #65769 (localeconv() broken in TS builds). (Anatol)
  . Fixed bug #65230 (setting locale randomly broken). (Anatol)
  . Fixed bug #66764 (configure doesn't define EXPANDED_DATADIR / PHP_DATADIR
    correctly). (Ferenc)
  . Fixed bug #68583 (Crash in timeout thread). (Anatol)
  . Fixed bug #65576 (Constructor from trait conflicts with inherited
    constructor). (dunglas at gmail dot com)
  . Fixed bug #68676 (Explicit Double Free). (Kalle)
  . Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()).
    (CVE-2015-0231) (Stefan Esser)

- CGI:
  . Fixed bug #68618 (out of bounds read crashes php-cgi). (CVE-2014-9427)
    (Stas)

- CLI server:
  . Fixed bug #68745 (Invalid HTTP requests make web server segfault). (Adam)

- cURL:
  . Fixed bug #67643 (curl_multi_getcontent returns '' when
    CURLOPT_RETURNTRANSFER isn't set). (Jille Timmermans)

- Date:
  . Implemented FR #68268 (DatePeriod: Getter for start date, end date and
    interval). (Marc Bennewitz)

- EXIF:
  . Fixed bug #68799: Free called on unitialized pointer. (CVE-2015-0232)
    (Stas)

- Fileinfo:
  . Fixed bug #68398 (msooxml matches too many archives). (Anatol)
  . Fixed bug #68665 (invalid free in libmagic). (Joshua Rogers, Anatol Belski)
  . Fixed bug #68671 (incorrect expression in libmagic).
    (Joshua Rogers, Anatol Belski)
  . Removed readelf.c and related code from libmagic sources
    (Remi, Anatol)
  . Fixed bug #68735 (fileinfo out-of-bounds memory access).
    (Anatol)

- FPM:
  . Fixed request #68526 (Implement POSIX Access Control List for UDS). (Remi)
  . Fixed bug #68751 (listen.allowed_clients is broken). (Remi)

- GD:
  . Fixed bug #68601 (buffer read overflow in gd_gif_in.c). (Jan Bee, Remi)
  . Fixed request #68656 (Report gd library version). (Remi)

- mbstring:
  . Fixed bug #68504 (--with-libmbfl configure option not present on Windows).
    (Ashesh Vashi)

- Opcache:
  . Fixed bug #68644 (strlen incorrect : mbstring + func_overload=2 +UTF-8
    + Opcache). (Laruence)
  . Fixed bug #67111 (Memory leak when using "continue 2" inside two foreach
    loops). (Nikita)

- OpenSSL:
  . Improved handling of OPENSSL_KEYTYPE_EC keys. (Dominic Luechinger)

- pcntl:
  . Fixed bug #60509 (pcntl_signal doesn't decrease ref-count of old handler
    when setting SIG_DFL). (Julien)

- PCRE:
  . Fixed bug #66679 (Alignment Bug in PCRE 8.34 upstream).
    (Rainer Jung, Anatol Belski)

- pgsql:
  . Fixed bug #68697 (lo_export return -1 on failure). (Ondřej Surý)

- PDO:
  . Fixed bug #68371 (PDO#getAttribute() cannot be called with platform-specifi
    attribute names). (Matteo)

- PDO_mysql:
  . Fixed bug #68424 (Add new PDO mysql connection attr to control multi
    statements option). (peter dot wolanin at acquia dot com)

- SPL:
  . Fixed bug #66405 (RecursiveDirectoryIterator::CURRENT_AS_PATHNAME
    breaks the RecursiveIterator). (Paul Garvin)
  . Fixed bug #68479 (Added escape parameter to SplFileObject::fputcsv). (Salathe)

- SQLite:
  . Fixed bug #68120 (Update bundled libsqlite to 3.8.7.2). (Anatol)

- Streams:
  . Fixed bug #68532 (convert.base64-encode omits padding bytes).
    (blaesius at krumedia dot de)
[close]

Download (Windows) : http://windows.php.net/downloads/releases/

Download (Linux) : http://de2.php.net/distributions/

http://www.php.net/
Titel: PHP 5.6.6
Beitrag von: SiLæncer am 19 Februar, 2015, 17:20
Changelog
- Core:
  . Removed support for multi-line headers, as the are deprecated by RFC 7230.
    (Stas)
  . Fixed bug #67068 (getClosure returns somethings that's not a closure).
    (Danack at basereality dot com)
  . Fixed bug #68942 (Use after free vulnerability in unserialize() with
    DateTimeZone). (CVE-2015-0273) (Stas)
  . Fixed bug #68925 (Mitigation for CVE-2015-0235 – GHOST: glibc gethostbyname
    buffer overflow). (Stas)
  . Fixed Bug #67988 (htmlspecialchars() does not respect default_charset
    specified by ini_set) (Yasuo)
  . Added NULL byte protection to exec, system and passthru. (Yasuo)

- Dba:
  . Fixed bug #68711 (useless comparisons). (bugreports at internot dot info)

- Enchant:
  . Fixed bug #68552 (heap buffer overflow in enchant_broker_request_dict()).
    (Antony)

- Fileinfo:
  . Fixed bug #68827 (Double free with disabled ZMM). (Joshua Rogers)
  . Fixed bug #67647 (Bundled libmagic 5.17 does not detect quicktime files
    correctly). (Anatol)
  . Fixed bug #68731 (finfo_buffer doesn't extract the correct mime with some
    gifs). (Anatol)

- FPM:
  . Fixed bug #66479 (Wrong response to FCGI_GET_VALUES). (Frank Stolle)
  . Fixed bug #68571 (core dump when webserver close the socket).
    (redfoxli069 at gmail dot com, Laruence)

- JSON:
  . Fixed bug #50224 (json_encode() does not always encode a float as a float)
    by adding JSON_PRESERVE_ZERO_FRACTION. (Juan Basso)

- LIBXML:
  . Fixed bug #64938 (libxml_disable_entity_loader setting is shared
    between threads). (Martin Jansen)

- Mysqli:
  . Fixed bug #68114 (linker error on some OS X machines with fixed
    width decimal support) (Keyur Govande)
  . Fixed bug #68657 (Reading 4 byte floats with Mysqli and libmysqlclient
    has rounding errors) (Keyur Govande)

- Opcache:
  . Fixed bug with try blocks being removed when extended_info opcode
    generation is turned on. (Laruence)

- PDO_mysql:
  . Fixed bug #68750 (PDOMysql with mysqlnd does not allow the usage of
    named pipes). (steffenb198 at aol dot com)

- Phar:
  . Fixed bug #68901 (use after free). (bugreports at internot dot info)

- Pgsql:
  . Fixed Bug #65199 (pg_copy_from() modifies input array variable) (Yasuo)

- Session:
  . Fixed bug #68941 (mod_files.sh is a bash-script) (bugzilla at ii.nl, Yasuo)
  . Fixed Bug #66623 (no EINTR check on flock) (Yasuo)
  . Fixed bug #68063 (Empty session IDs do still start sessions) (Yasuo)

- Sqlite3:
  . Fixed bug #68260 (SQLite3Result::fetchArray declares wrong
    required_num_args). (Julien)

- Standard:
  . Fixed bug #65272 (flock() out parameter not set correctly in windows).
    (Daniel Lowrey)
  . Fixed bug #69033 (Request may get env. variables from previous requests
    if PHP works as FastCGI). (Anatol)

- Streams:
  . Fixed bug which caused call after final close on streams filter. (Bob)
[close]

Download (Windows) : http://windows.php.net/downloads/releases/

Download (Linux) : http://de2.php.net/distributions/

http://www.php.net/
Titel: PHP 5.6.7
Beitrag von: SiLæncer am 20 März, 2015, 17:20
Changelog
Core:
Fixed bug #69174 (leaks when unused inner class use traits precedence).
Fixed bug #69139 (Crash in gc_zval_possible_root on unserialize).
Fixed bug #69121 (Segfault in get_current_user when script owner is not in passwd with ZTS build).
Fixed bug #65593 (Segfault when calling ob_start from output buffering callback).
Fixed bug #68986 (pointer returned by php_stream_fopen_temporary_file not validated in memory.c).
Fixed bug #68166 (Exception with invalid character causes segv).
Fixed bug #69141 (Missing arguments in reflection info for some builtin functions).
Fixed bug #68976 (Use After Free Vulnerability in unserialize()). (CVE-2015-0231)
Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration options).
Fixed bug #69207 (move_uploaded_file allows nulls in path).
CGI:
Fixed bug #69015 (php-cgi's getopt does not see $argv).
CLI:
Fixed bug #67741 (auto_prepend_file messes up __LINE__).
cURL:
Fixed bug #69088 (PHP_MINIT_FUNCTION does not fully initialize cURL on Win32).
Add CURLPROXY_SOCKS4A and CURLPROXY_SOCKS5_HOSTNAME constants if supported by libcurl.
Ereg:
Fixed bug #69248 (heap overflow vulnerability in regcomp.c). (CVE-2015-2305)
FPM:
Fixed bug #68822 (request time is reset too early).
ODBC:
Fixed bug #68964 (Allowed memory size exhausted with odbc_exec).
Opcache:
Fixed bug #69159 (Opcache causes problem when passing a variable variable to a function).
Fixed bug #69125 (Array numeric string as key).
Fixed bug #69038 (switch(SOMECONSTANT) misbehaves).
OpenSSL:
Fixed bug #68912 (Segmentation fault at openssl_spki_new).
Fixed bug #61285, #68329, #68046, #41631 (encrypted streams don't observe socket timeouts).
Fixed bug #68920 (use strict peer_fingerprint input checks) (Daniel Lowrey)
Fixed bug #68879 (IP Address fields in subjectAltNames not used) (Daniel Lowrey)
Fixed bug #68265 (SAN match fails with trailing DNS dot) (Daniel Lowrey)
Fixed bug #67403 (Add signatureType to openssl_x509_parse) (Daniel Lowrey)
Fixed bug #69195 (Inconsistent stream crypto values across versions) (Daniel Lowrey)
pgsql:
Fixed bug #68638 (pg_update() fails to store infinite values).
Readline:
Fixed bug #69054 (Null dereference in readline_(read|write)_history() without parameters).
SOAP:
Fixed bug #69085 (SoapClient's __call() type confusion through unserialize()).
SPL:
Fixed bug #69108 ("Segmentation fault" when (de)serializing SplObjectStorage).
Fixed bug #68557 (RecursiveDirectoryIterator::seek(0) broken after calling getChildren()).
ZIP:
Fixed bug #69253 (ZIP Integer Overflow leads to writing past heap boundary). (CVE-2015-2331)
[close]

Download (Windows) : http://windows.php.net/downloads/releases/

Download (Linux) : http://de2.php.net/distributions/

http://www.php.net/
Titel: PHP 5.5.24
Beitrag von: SiLæncer am 16 April, 2015, 19:20
Changelog
16-Apr-2015
Apache2handler:
Fixed bug #69218 (potential remote code execution with apache 2.4 apache2handler).
Core:
Fixed bug #66609 (php crashes with __get() and ++ operator in some cases).
Fixed bug #67626 (User exceptions not properly handled in streams).
Fixed bug #68021 (get_browser() browser_name_regex returns non-utf-8 characters).
Fixed bug #68917 (parse_url fails on some partial urls).
Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration options).
Additional fix for bug #69152 (Type confusion vulnerability in exception::getTraceAsString).
Fixed bug #69212 (Leaking VIA_HANDLER func when exception thrown in __call/... arg passing).
Fixed bug #69221 (Segmentation fault when using a generator in combination with an Iterator).
Fixed bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability).
Fixed bug #69353 (Missing null byte checks for paths in various PHP extensions).
Curl:
Implemented FR#69278 (HTTP2 support).
Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER).
Date:
Export date_get_immutable_ce so that it can be used by extensions.
Fixed bug #69336 (Issues with "last day of <monthname>").
Enchant:
Fixed bug #65406 (Enchant broker plugins are in the wrong place in windows builds).
Fileinfo:
Fixed bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault).
Filter:
Fixed bug #69202 (FILTER_FLAG_STRIP_BACKTICK ignored unless other flags are used).
Fixed bug #69203 (FILTER_FLAG_STRIP_HIGH doesn't strip ASCII 127).
Mbstring:
Fixed bug #68846 (False detection of CJK Unified Ideographs Extension E).
OPCache:
Fixed bug #68677 (Use After Free).
Fixed bug #69281 (opcache_is_script_cached no longer works).
OpenSSL:
Fixed bug #67403 (Add signatureType to openssl_x509_parse).
Add a check for RAND_egd to allow compiling against LibreSSL.
Phar:
Fixed bug #64343 (PharData::extractTo fails for tarball created by BSD tar).
Fixed bug #64931 (phar_add_file is too restrictive on filename).
Fixed bug #65467 (Call to undefined method cli_arg_typ_string).
Fixed bug #67761 (Phar::mapPhar fails for Phars inside a path containing ".tar").
Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar).
Fixed bug #69441 (Buffer Overflow when parsing tar/zip/phar in phar_set_inode).
Postgres:
Fixed bug #68741 (Null pointer dereference).
SPL:
Fixed bug #69227 (Use after free in zval_scan caused by spl_object_storage_get_gc).
SOAP:
Fixed bug #69293 (NEW segfault when using SoapClient::__setSoapHeader (bisected, regression)).
SQLITE:
Fixed bug #68760 (SQLITE segfaults if custom collator throws an exception).
Fixed bug #69287 (Upgrade bundled sqlite to 3.8.8.3).
[close]

Download (Windows) : http://windows.php.net/downloads/releases/

Download (Linux) : http://de2.php.net/distributions/

http://www.php.net/
Titel: PHP 5.6.8
Beitrag von: SiLæncer am 16 April, 2015, 20:20
Changelog
16-Apr-2015
Core:
Fixed bug #66609 (php crashes with __get() and ++ operator in some cases).
Fixed bug #68021 (get_browser() browser_name_regex returns non-utf-8 characters).
Fixed bug #68917 (parse_url fails on some partial urls).
Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration options).
Additional fix for bug #69152 (Type confusion vulnerability in exception::getTraceAsString).
Fixed bug #69210 (serialize function return corrupted data when sleep has non-string values).
Fixed bug #69212 (Leaking VIA_HANDLER func when exception thrown in __call/... arg passing).
Fixed bug #69221 (Segmentation fault when using a generator in combination with an Iterator).
Fixed bug #69337 (php_stream_url_wrap_http_ex() type-confusion vulnerability).
Fixed bug #69353 (Missing null byte checks for paths in various PHP extensions).
Apache2handler:
Fixed bug #69218 (potential remote code execution with apache 2.4 apache2handler).
cURL:
Implemented FR #69278 (HTTP2 support).
Fixed bug #68739 (Missing break / control flow).
Fixed bug #69316 (Use-after-free in php_curl related to CURLOPT_FILE/_INFILE/_WRITEHEADER).
Date:
Fixed bug #69336 (Issues with "last day of <monthname>").
Enchant:
Fixed bug #65406 (Enchant broker plugins are in the wrong place in windows builds).
Ereg:
Fixed bug #68740 (NULL Pointer Dereference).
Fileinfo:
Fixed bug #68819 (Fileinfo on specific file causes spurious OOM and/or segfault).
Filter:
Fixed bug #69202: (FILTER_FLAG_STRIP_BACKTICK ignored unless other flags are used).
Fixed bug #69203 (FILTER_FLAG_STRIP_HIGH doesn't strip ASCII 127).
OPCache:
Fixed bug #69297 (function_exists strange behavior with OPCache on disabled function).
Fixed bug #69281 (opcache_is_script_cached no longer works).
Fixed bug #68677 (Use After Free). (CVE-2015-1351)
OpenSSL:
Fixed bugs #68853, #65137 (Buffered crypto stream data breaks IO polling in stream_select() contexts) (Chris Wright)
Fixed bug #69197 (openssl_pkcs7_sign handles default value incorrectly) (Daniel Lowrey)
Fixed bug #69215 (Crypto servers should send client CA list) (Daniel Lowrey)
Add a check for RAND_egd to allow compiling against LibreSSL (Leigh)
Phar:
Fixed bug #64343 (PharData::extractTo fails for tarball created by BSD tar).
Fixed bug #64931 (phar_add_file is too restrictive on filename).
Fixed bug #65467 (Call to undefined method cli_arg_typ_string).
Fixed bug #67761 (Phar::mapPhar fails for Phars inside a path containing ".tar").
Fixed bug #69324 (Buffer Over-read in unserialize when parsing Phar).
Fixed bug #69441 (Buffer Overflow when parsing tar/zip/phar in phar_set_inode).
Postgres:
Fixed bug #68741 (Null pointer dereference). (CVE-2015-1352)
SPL:
Fixed bug #69227 (Use after free in zval_scan caused by spl_object_storage_get_gc).
SOAP:
Fixed bug #69293 (NEW segfault when using SoapClient::__setSoapHeader (bisected, regression)).
Sqlite3:
Fixed bug #68760 (SQLITE segfaults if custom collator throws an exception).
Fixed bug #69287 (Upgrade bundled libsqlite to 3.8.8.3).
Fixed bug #66550 (SQLite prepared statement use-after-free).
[close]

Download (Windows) : http://windows.php.net/downloads/releases/

Download (Linux) : http://de2.php.net/distributions/

http://www.php.net/
Titel: PHP 5.6.9
Beitrag von: SiLæncer am 15 Mai, 2015, 11:15
Changelog
Core:
Fixed bug #69467 (Wrong checked for the interface by using Trait).
Fixed bug #69420 (Invalid read in zend_std_get_method).
Fixed bug #60022 ("use statement [...] has no effect" depends on leading backslash).
Fixed bug #67314 (Segmentation fault in gc_remove_zval_from_buffer).
Fixed bug #68652 (segmentation fault in destructor).
Fixed bug #69419 (Returning compatible sub generator produces a warning).
Fixed bug #69472 (php_sys_readlink ignores misc errors from GetFinalPathNameByHandleA).
Fixed bug #69364 (PHP Multipart/form-data remote dos Vulnerability).
Fixed bug #69403 (str_repeat() sign mismatch based memory corruption).
Fixed bug #69418 (CVE-2006-7243 fix regressions in 5.4+).
Fixed bug #69522 (heap buffer overflow in unpack()).
FTP:
Fixed bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow).
ODBC:
Fixed bug #69354 (Incorrect use of SQLColAttributes with ODBC 3.0).
Fixed bug #69474 (ODBC: Query with same field name from two tables returns incorrect result).
Fixed bug #69381 (out of memory with sage odbc driver).
OpenSSL:
Fixed bug #69402 (Reading empty SSL stream hangs until timeout).
PCNTL:
Fixed bug #68598 (pcntl_exec() should not allow null char).
PCRE:
Upgraded pcrelib to 8.37.
Phar:
Fixed bug #69453 (Memory Corruption in phar_parse_tarfile when entry filename starts with null).
[close]

Download (Windows) : http://windows.php.net/downloads/releases/

Download (Linux) : http://de2.php.net/distributions/

http://www.php.net/
Titel: PHP 5.6.10
Beitrag von: SiLæncer am 12 Juni, 2015, 18:15
Changelog
Core:

    Fixed bug #66048 (temp. directory is cached during multiple requests).
    Fixed bug #69566 (Conditional jump or move depends on uninitialised value in extension trait).
    Fixed bug #69599 (Strange generator+exception+variadic crash).
    Fixed bug #69628 (complex GLOB_BRACE fails on Windows).
    Fixed POST data processing slowdown due to small input buffer size on Windows.
    Fixed bug #69646 (OS command injection vulnerability in escapeshellarg).
    Fixed bug #69719 (Incorrect handling of paths with NULs).

FTP:

    Improved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in heap overflow).

GD:

    Fixed bug #69479 (GD fails to build with newer libvpx).

Iconv:

    Fixed bug #48147 (iconv with //IGNORE cuts the string).

Litespeed SAPI:

    Fixed bug #68812 (Unchecked return value).

Mail:

    Fixed bug #68776 (mail() does not have mail header injection prevention for additional headers).

MCrypt:

    Added file descriptor caching to mcrypt_create_iv() (Leigh)

Opcache:

    Fixed bug #69549 (Memory leak with opcache.optimization_level=0xFFFFFFFF).

PCRE:

    Upgraded pcrelib to 8.37. (CVE-2015-2325, CVE-2015-2326)

Phar:

    Fixed bug #69680 (phar symlink in binary directory broken).

Postgres:

    Fixed bug #69667 (segfault in php_pgsql_meta_data).

Sqlite3:

    Upgrade bundled sqlite to 3.8.10.2. (CVE-2015-3414, CVE-2015-3415, CVE-2015-3416)
[close]

Download (Windows) : http://windows.php.net/downloads/releases/

Download (Linux) : http://de2.php.net/distributions/

http://www.php.net/
Titel: PHP 5.6.11
Beitrag von: SiLæncer am 10 Juli, 2015, 13:53
Changelog
Core:

    Fixed bug #69768 (escapeshell*() doesn't cater to !).
    Fixed bug #69703 (Use __builtin_clzl on PowerPC).
    Fixed bug #69732 (can induce segmentation fault with basic php code).
    Fixed bug #69642 (Windows 10 reported as Windows 8).
    Fixed bug #69551 (parse_ini_file() and parse_ini_string() segmentation fault).
    Fixed bug #69781 (phpinfo() reports Professional Editions of Windows 7/8/8.1/10 as "Business").
    Fixed bug #69740 (finally in generator (yield) swallows exception in iteration).
    Fixed bug #69835 (phpinfo() does not report many Windows SKUs).
    Fixed bug #69892 (Different arrays compare indentical due to integer key truncation).
    Fixed bug #69874 (Can't set empty additional_headers for mail()), regression from fix to bug #68776.

GD:

    Fixed bug #61221 (imagegammacorrect function loses alpha channel).

GMP:

    Fixed bug #69803 (gmp_random_range() modifies second parameter if GMP number).

Mysqlnd:

    Fixed bug #69669 (mysqlnd is vulnerable to BACKRONYM) (CVE-2015-3152).

PCRE:

    Fixed bug #53823 (preg_replace: * qualifier on unicode replace garbles the string).
    Fixed bug #69864 (Segfault in preg_replace_callback) (cmb, ab)

PDO_pgsql:

    Fixed bug #69752 (PDOStatement::execute() leaks memory with DML Statements when closeCuror() is u).
    Fixed bug #69362 (PDO-pgsql fails to connect if password contains a leading single quote).
    Fixed bug #69344 (PDO PgSQL Incorrect binding numeric array with gaps).

SimpleXML:

    Refactored the fix for bug #66084 (simplexml_load_string() mangles empty node name).

SPL:

    Fixed bug #69737 (Segfault when SplMinHeap::compare produces fatal error).
    Fixed bug #67805 (SplFileObject setMaxLineLength). (Willian Gustavo Veiga).
    Fixed bug #69970 (Use-after-free vulnerability in spl_recursive_it_move_forward_ex()).

Sqlite3:

    Fixed bug #69972 (Use-after-free vulnerability in sqlite3SafetyCheckSickOrOk()).
[close]

Download (Windows) : http://windows.php.net/downloads/releases/

Download (Linux) : http://de2.php.net/distributions/

http://www.php.net/
Titel: PHP 7.0.0 Beta 1
Beitrag von: SiLæncer am 13 Juli, 2015, 20:15
Whats new:>>

- Improved performance: PHP 7 is up to twice as fast as PHP 5.6
- Consistent 64-bit support
- Many fatal errors are now Exceptions
- Removal of old and unsupported SAPIs and extensions
- The null coalescing operator (??)
- Combined comparison Operator (<=>)
- Return Type Declarations
- Scalar Type Declarations
- Anonymous Classes

Quelle & DL : http://php.net/archive/2015.php#id2015-07-10-4

http://www.php.net/
Titel: PHP 7.0.0 RC 1
Beitrag von: SiLæncer am 22 August, 2015, 06:15
Changelog

Core:

Fixed bug #70288 (Apache crash related to ZEND_SEND_REF).
Fixed bug #70262 (Accessing array crashes PHP 7.0beta3).
Fixed bug #70258 (Segfault if do_resize fails to allocated memory).
Fixed bug #70253 (segfault at _efree () in zend_alloc.c:1389).
Fixed bug #70240 (Segfault when doing unset($var());).
Fixed bug #70223 (Incrementing value returned by magic getter).
Fixed bug #70215 (Segfault when __invoke is static).
Fixed bug #70207 (Finally is broken with opcache).
Fixed bug #70173 (ZVAL_COPY_VALUE_EX broken for 32bit Solaris Sparc).
Fixed bug #69487 (SAPI may truncate POST data).
Fixed bug #70198 (Checking liveness does not work as expected).
Fixed bug #70241/#70293 (Skipped assertions affect Generator returns).
Fixed bug #70239 (Creating a huge array doesn't result in exhausted,
but segfault).

CLI server:

Fixed bug #66606 (Sets HTTP_CONTENT_TYPE but not CONTENT_TYPE).
Fixed bug #70264 (CLI server directory traversal).

Date:

Fixed bug #70245 (strtotime does not emit warning when 2nd parameter is
object or string).
Fixed bug #70266 (DateInterval::__construct.interval_spec is not supposed to
be optional).
Fixed bug #70277 (new DateTimeZone($foo) is ignoring text after null byte).

MCrypt:

Fixed bug #69833 (mcrypt fd caching not working).

Opcache:

Fixed bug #70237 (Empty while and do-while segmentation fault with opcode
on CLI enabled).

PCRE:

Fixed bug #70232 (Incorrect bump-along behavior with \K and empty string
match).

PDO:

Fixed bug #70272 (Segfault in pdo_mysql).
Fixed bug #70221 (persistent sqlite connection + custom function
segfaults).

Phpdbg:

Fixed bug #70214 (FASYNC not defined, needs sys/file.h include).

Standard:

Fixed bug #70250 (extract() turns array elements to references).
Fixed bug #70211 (php 7 ZEND_HASH_IF_FULL_DO_RESIZE use after free).
Fixed bug #70208 (Assert breaking access on objects).
[close]

http://www.php.net/
Titel: PHP 7.0.0 RC2
Beitrag von: SiLæncer am 04 September, 2015, 17:20
Changelog
- Core:
  . Fixed bug #70398 (SIGSEGV, Segmentation fault zend_ast_destroy_ex).
    (Dmitry, Bob, Laruence)
  . Fixed bug #70332 (Wrong behavior while returning reference on object).
    (Laruence, Dmitry)
  . Fixed bug #70300 (Syntactical inconsistency with new group use syntax).
    (marcio dot web2 at gmail dot com)
  . Fixed bug #70321 (Magic getter breaks reference to array property).
    (Laruence)
  . Fixed bug #70187 (Notice: unserialize(): Unexpected end of serialized data)
    (Dmitry)
  . Fixed bug #70145 (From field incorrectly parsed from headers). (Anatol)
  . Fixed bug #70370 (Bundled libtool.m4 doesn't handle FreeBSD 10 when
    building extensions). (Adam)
  . Fixed bug causing exception traces with anon classes to be truncated. (Bob)
  . Fixed bug #70397 (Segmentation fault when using Closure::call and yield).
    (Bob)

- Curl:
  . Fixed bug #70330 (Segmentation Fault with multiple "curl_copy_handle").
    (Laruence)

- EXIF:
  . Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte
    value of 32 bytes). (Stas)

- hash:
  . Fixed bug #70312 (HAVAL gives wrong hashes in specific cases). (letsgolee
    at naver dot com)

- Mysqli:
  . Fixed bug #32490 (constructor of mysqli has wrong name). (cmb)

- Pcntl:
  . Fixed bug #70386 (Can't compile on NetBSD because of missing WCONTINUED
    and WIFCONTINUED). (Matteo)

- PCRE:
  . Fixed bug #70232 (Incorrect bump-along behavior with \K and empty string
    match). (cmb)
  . Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).
    (Anatol Belski)

- PDO:
  - Fixed bug #70389 (PDO constructor changes unrelated variables). (Laruence)

- PDO_OCI:
  . Fixed bug #70308 (PDO::ATTR_PREFETCH is ignored). (Chris Jones)

- SOAP:
  . Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE).
    (Stas)

- SPL:
  . Fixed bug #70303 (Incorrect constructor reflection for ArrayObject). (cmb)

- Standard:
  . Fixed bug #70342 (changing configuration with ignore_user_abort(true) isn't
    working). (Laruence)
  . Fixed bug #70295 (Segmentation fault with setrawcookie). (Bob)
  . Fixed bug #67131 (setcookie() conditional for empty values not met). (cmb)
  . Fixed bug #70365 (Use-after-free vulnerability in unserialize() with
    SplObjectStorage). (taoguangchen at icloud dot com)
  . Fixed bug #70366 (Use-after-free vulnerability in unserialize() with
    SplDoublyLinkedList). (taoguangchen at icloud dot com)

- Reflection:
  . Fixed bug causing bogus traces for ReflectionGenerator::getTrace(). (Bob)

- XSLT:
  . Fixed bug #69782 (NULL pointer dereference). (Stas)

- ZIP:
  . Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when
    creating directories). (neal at fb dot com)
[close]

http://www.php.net/
Titel: PHP 5.6.13
Beitrag von: SiLæncer am 05 September, 2015, 09:39
Changelog
Core:
Fixed bug #69900 (Too long timeout on pipes).
Fixed bug #69487 (SAPI may truncate POST data).
Fixed bug #70198 (Checking liveness does not work as expected).
Fixed bug #70172 (Use After Free Vulnerability in unserialize()).
Fixed bug #70219 (Use after free vulnerability in session deserializer).
CLI server:
Fixed bug #66606 (Sets HTTP_CONTENT_TYPE but not CONTENT_TYPE).
Fixed bug #70264 (CLI server directory traversal).
Date:
Fixed bug #70266 (DateInterval::__construct.interval_spec is not supposed to be optional).
Fixed bug #70277 (new DateTimeZone($foo) is ignoring text after null byte).
EXIF:
Fixed bug #70385 (Buffer over-read in exif_read_data with TIFF IFD tag byte value of 32 bytes).
hash:
Fixed bug #70312 (HAVAL gives wrong hashes in specific cases).
MCrypt:
Fixed bug #69833 (mcrypt fd caching not working).
Opcache:
Fixed bug #70237 (Empty while and do-while segmentation fault with opcode on CLI enabled).
PCRE:
Fixed bug #70232 (Incorrect bump-along behavior with \K and empty string match).
Fixed bug #70345 (Multiple vulnerabilities related to PCRE functions).
SOAP:
Fixed bug #70388 (SOAP serialize_function_call() type confusion / RCE).
SPL:
Fixed bug #70290 (Null pointer deref (segfault) in spl_autoload via ob_start).
Fixed bug #70303 (Incorrect constructor reflection for ArrayObject).
Fixed bug #70365 (Use-after-free vulnerability in unserialize() with SplObjectStorage).
Fixed bug #70366 (Use-after-free vulnerability in unserialize() with SplDoublyLinkedList).
Standard:
Fixed bug #70052 (getimagesize() fails for very large and very small WBMP).
Fixed bug #70157 (parse_ini_string() segmentation fault with INI_SCANNER_TYPED).
XSLT:
Fixed bug #69782 (NULL pointer dereference).
ZIP:
Fixed bug #70350 (ZipArchive::extractTo allows for directory traversal when creating directories).
[close]

http://www.php.net/
Titel: PHP 7.0.0 RC 3
Beitrag von: SiLæncer am 17 September, 2015, 16:15
Changelog
PHP 7.0.0 RC 3 contains fixes for 19 reported bugs and over 100 commits with various improvements.
This release provides a noticeable new Opcache feature which makes possible to move PHP code pages into the huge memory pages. It can be enabled with opcache.huge_code_page=1 in php.ini and can bring about 2% performance gain on supported platforms. Please help us to test this feature by enabling it and providing feedback.

PHP 7.0.0 comes with new version of the Zend Engine with features such as (incomplete list):

Improved performance: PHP 7 is up to twice as fast as PHP 5.6
Consistent 64-bit support
Many fatal errors are now Exceptions
Removal of old and unsupported SAPIs and extensions
The null coalescing operator (??)
Combined comparison Operator ()
Return Type Declarations
Scalar Type Declarations
Anonymous Classes
[close]

http://www.php.net/
Titel: PHP 7.0.0 RC 4
Beitrag von: SiLæncer am 01 Oktober, 2015, 13:14
Changelog
01 Oct 2015, PHP 7.0.0 RC 4

- Core:
  . Added zend_internal_function.reserved[] fields. (Dmitry)
  . Fixed bug #70557 (Memleak on return type verifying failed). (Laruence)
  . Fixed bug #70555 (fun_get_arg() on unsetted vars return UNKNOW). (Laruence)
  . Fixed bug #70548 (Redundant information printed in case of uncaught engine
    exception). (Laruence)
  . Fixed bug #70547 (unsetting function variables corrupts backtrace).
    (Laruence)
  . Fixed bug #70528 (assert() with instanceof adds apostrophes around class
    name). (Laruence)
  . Fixed bug #70481 (Memory leak in auto_global_copy_ctor() in ZTS build).
    (Laruence)

- DOM:
  . Fixed bug #70558 ("Couldn't fetch" error in
    DOMDocument::registerNodeClass()). (Laruence)

- FPM:
  . Fixed bug #70538 ("php-fpm -i" crashes). (rainer dot jung at
    kippdata dot de)
  . Fixed bug #70279 (HTTP Authorization Header is sometimes passed to newer
    reqeusts). (Laruence)

- Opcache
  . Attmpt to fix "Unable to reattach to base address" problem. (Matt Ficken)

- OpenSSL
  . Require at least OpenSSL version 0.9.8. (Jakub Zelenka)
  . Fixed bug #68312 (Lookup for openssl.cnf causes a message box). (Anatol)

- Phpdbg:
  . Fixed bug #70532 (phpdbg must respect set_exception_handler). (Bob)
  . Fixed bug #70531 (Run and quit mode (-qrr) should not fallback to
    interactive mode). (Bob)
  . Fixed bug #70533 (Help overview (-h) does not rpint anything under Windows).
    (Anatol)

- Session:
  . Fixed bug #70529 (Session read causes "String is not zero-terminated" error).
    (Yasuo)

- SQLite3:
  . Fixed bug #70571 (Memory leak in sqlite3_do_callback). (Adam)

-SPL:
  . Fixed bug #70573 (Cloning SplPriorityQueue leads to memory leaks). (Dmitry)

- XMLRPC
  . Fixed bug #70526 (xmlrpc_set_type returns false on success). (Laruence)

- XSL:
  . Fixed bug #70535 (XSLT: free(): invalid pointer). (Laruence)
[close]

http://www.php.net/
Titel: PHP 5.6.14
Beitrag von: SiLæncer am 02 Oktober, 2015, 16:40
Changelog
Core:

Fixed bug #70370 (Bundled libtool.m4 doesn't handle FreeBSD 10 when building extensions).

CLI server:

Fixed bug #68291 (404 on urls with '+').

DOM:

Fixed bug #70001 (Assigning to DOMNode::textContent does additional entity encoding).

Mysqlnd:

Fixed bug #70456 (mysqlnd doesn't activate TCP keep-alive when connecting to a server).

OpenSSL:

Fixed bug #55259 (openssl extension does not get the DH parameters from DH key resource).
Fixed bug #70395 (Missing ARG_INFO for openssl_seal()).
Fixed bug #60632 (openssl_seal fails with AES).
Fixed bug #68312 (Lookup for openssl.cnf causes a message box).

PDO:

Fixed bug #70389 (PDO constructor changes unrelated variables).

Phar:

Fixed bug #69720 (Null pointer dereference in phar_get_fp_offset()).
Fixed bug #70433 (Uninitialized pointer in phar_make_dirstream when zip entry filename is "/").
Phpdbg:

Fix phpdbg_break_next() sometimes not breaking.

Standard:

Fixed bug #67131 (setcookie() conditional for empty values not met).

Streams:

Fixed bug #70361 (HTTP stream wrapper doesn't close keep-alive connections).

Zip:

Fixed bug #70322 (ZipArchive::close() doesn't indicate errors).
[close]

http://www.php.net/
Titel: PHP 7.0.0 RC 5
Beitrag von: SiLæncer am 19 Oktober, 2015, 13:54
Changelog
Core:

Fixed bug #70630 (Closure::call/bind() crash with ReflectionFunction-> getClosure()).
Fixed bug #70662 (Duplicate array key via undefined index error handler).
Fixed bug #70681 (Segfault when binding $this of internal instance method to null).
Fixed bug #70685 (Segfault for getClosure() internal method rebind with invalid $this).

Mcrypt:

Fixed bug #70625 (mcrypt_encrypt() won't return data when no IV was
specified under RC4).
Opcache:

Fixed compatibility with Windows 10 (see also bug #70652).

Phpdbg:

Fixed bug #70614 (incorrect exit code in -rr mode with Exceptions).

Reflection:

Fixed bug #70650 (Wrong docblock assignment).
Fixed bug #70674 (ReflectionFunction::getClosure() leaks memory when used for internal functions).

Standard:

Fixed bug #70667 (strtr() causes invalid writes and a crashes).
Fixed bug #70668 (array_keys() doesn't respect references when $strict is
true).
[close]

http://www.php.net/
Titel: PHP 5.6.15
Beitrag von: SiLæncer am 30 Oktober, 2015, 15:45
Changelog
Core:

Fixed bug #70681 (Segfault when binding $this of internal instance method to null).
Fixed bug #70685 (Segfault for getClosure() internal method rebind with invalid $this).

Date:

Fixed bug #70619 (DateTimeImmutable segfault).

Mcrypt:

Fixed bug #70625 (mcrypt_encrypt() won't return data when no IV was specified under RC4).

Mysqlnd:

Fixed bug #70384 (mysqli_real_query():Unknown type 245 sent by the server).
Fixed bug #70572 segfault in mysqlnd_connect.

Opcache:

Fixed bug #70632 (Third one of segfault in gc_remove_from_buffer).
Fixed bug #70631 (Another Segfault in gc_remove_from_buffer()).
Fixed bug #70601 (Segfault in gc_remove_from_buffer()).
Fixed compatibility with Windows 10 (see also #70652).
[close]

http://www.php.net/
Titel: PHP 7.0.0 RC 7
Beitrag von: SiLæncer am 12 November, 2015, 18:30
Changelog
PHP 7.0.0 RC 7 contains fixes for 17 reported bugs

PHP 7.0.0 comes with new version of the Zend Engine with features such as (incomplete list):

Improved performance: PHP 7 is up to twice as fast as PHP 5.6
Consistent 64-bit support
Many fatal errors are now Exceptions
Removal of old and unsupported SAPIs and extensions
The null coalescing operator (??)
Combined comparison Operator ()
Return Type Declarations
Scalar Type Declarations
Anonymous Classes
[close]

http://www.php.net/
Titel: PHP 7.0.0 RC 8
Beitrag von: SiLæncer am 26 November, 2015, 16:00
Changelog
Improved performance: PHP 7 is up to twice as fast as PHP 5.6
Consistent 64-bit support
Many fatal errors are now Exceptions
Removal of old and unsupported SAPIs and extensions
The null coalescing operator (??)
Combined comparison Operator ()
Return Type Declarations
Scalar Type Declarations
Anonymous Classes
[close]

http://www.php.net/
Titel: PHP 7 freigegeben
Beitrag von: SiLæncer am 03 Dezember, 2015, 13:40
Das PHP-Projekt hat mit einer Woche Verzögerung die offizielle Ausgabe von PHP 7 freigegeben. Gegenüber PHP 5.6 soll PHP 7 die Geschwindigkeit verdoppeln und den Sprachumfang erweitern.

Vor etwa einem Jahr wurde innerhalb von PHP diskutiert, ob die kommende Hauptversion der verbreiteten Programmiersprache die Nummer 6 oder 7 sein sollte. Hintergrund war, dass es bereits zwischen 2006 und 2010 eine Entwicklung von PHP 6 gab, die aber eingestellt wurde, während die meisten vorgesehenen Funktionen in PHP 5 eingeflossen sind. Das Resultat der Diskussion war letztlich, Version 6 kein zweites Mal zu verwenden und die Versionsnummer auf 7 anzuheben.

Zur gleichen Zeit hatten Entwickler bei Zend einen PHP-Interpreter der nächsten Generation, phpng, begonnen. Ziel dieser Entwicklung war, den PHP-Interpreter grundlegend neu zu schreiben, um mehr Geschwindigkeit herauszuholen. Denn der offizielle PHP-Interpreter begann mit Version 5.5 zu stagnieren. Schon nach kurzer Zeit konnten Geschwindigkeitssteigerungen von 10 bis 30% gemessen werden, wobei gleichzeitig weniger Speicher benötigt wurde. In den nachfolgenden Monaten wurde entschieden, phpng zur Basis von PHP 7 zu machen, wie man dem Wiki zu phpng entnehmen kann.

Nun ist PHP 7.0.0 fertiggestellt. Gegenüber der aktuellen Ausgabe PHP 5.6 ist PHP 7 nach Angaben der Entwickler bis zu doppelt so schnell und bringt eine konsistente 64-Bit-Unterstützung. Viele fatale Fehler wurden in Exceptions umgewandelt. Alte und nicht mehr unterstützte SAPIs und Erweiterungen wurden entfernt.

Im Sprachumfang wurden einige Erweiterungen vorgenommen: Die Operatoren ?? und <=> kamen hinzu. Die Ergebnistypen von Funktionen können nun deklariert werden. Außerdem können Variablen als skalar deklariert werden, wofür die Typen string, int, float und bool zur Verfügung stehen. Auch anonyme Klassen sind nun möglich. Sogenannte »Expectations« sind eine rückwärtskompatible Erweiterung von assert, die auch in Produktiv-Code fast keine Geschwindigkeitseinbußen bringen soll. Darüber hinaus gab es zahlreiche weitere Korrekturen und Anpassungen, die im Änderungslog verzeichnet sind.

Für alle Interessierten steht auch eine Liste der beachtenswerten Dinge bei einem Upgrade zur Verfügung. PHP 7.0.0 steht bisher nur auf der Github-Seite zum Download bereit, da die Download-Seite noch nicht aktualisiert wurde. Das Handbuch wurde allerdings bereits an die neue Version angepasst.

Quelle : www.pro-linux.de
Titel: PHP 7.0.1
Beitrag von: SiLæncer am 17 Dezember, 2015, 17:15
Changelog
Core:

    Fixed bug #71105 (Format String Vulnerability in Class Name Error Message).
    Fixed bug #70831 (Compile fails on system with 160 CPUs).
    Fixed bug #71006 (symbol referencing errors on Sparc/Solaris).
    Fixed bug #70997 (When using parentClass:: instead of parent::, static context changed).
    Fixed bug #70970 (Segfault when combining error handler with output buffering).
    Fixed bug #70967 (Weird error handling for __toString when Error is thrown).
    Fixed bug #70958 (Invalid opcode while using ::class as trait method paramater default value).
    Fixed bug #70944 (try{ } finally{} can create infinite chains of exceptions).
    Fixed bug #70931 (Two errors messages are in conflict).
    Fixed bug #70904 (yield from incorrectly marks valid generator as finished).
    Fixed bug #70899 (buildconf failure in extensions).
    Fixed bug #61751 (SAPI build problem on AIX: Undefined symbol: php_register_internal_extensions).
    Fixed \int (or generally every scalar type name with leading backslash) to not be accepted as type name.
    Fixed exception not being thrown immediately into a generator yielding from an array.
    Fixed bug #70987 (static::class within Closure::call() causes segfault).
    Fixed bug #71013 (Incorrect exception handler with yield from).
    Fixed double free in error condition of format printer.

CLI server:

    Fixed bug #71005 (Segfault in php_cli_server_dispatch_router()).

Intl:

    Fixed bug #71020 (Use after free in Collator::sortWithSortKeys).

Mysqlnd:

    Fixed bug #68077 (LOAD DATA LOCAL INFILE / open_basedir restriction).
    Fixed bug #68344 (MySQLi does not provide way to disable peer certificate validation) by introducing MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT connection flag.

OCI8:

    Fixed LOB implementation size_t/zend_long mismatch reported by gcov.

Opcache:

    Fixed #71024 (Unable to use PHP 7.0 x64 side-by-side with PHP 5.6 x32 on the same server).
    Fixed bug #70991 (zend_file_cache.c:710: error: array type has incomplete element type).
    Fixed bug #70977 (Segmentation fault with opcache.huge_code_pages=1).

Phpdbg:

    Fixed stderr being written to stdout.

Reflection:

    Fixed bug #71018 (ReflectionProperty::setValue() behavior changed).
    Fixed bug #70982 (setStaticPropertyValue behaviors inconsistently with 5.6).

SPL:

    Fixed bug #71028 (Undefined index with ArrayIterator).

SQLite3:

    Fixed bug #71049 (SQLite3Stmt::execute() releases bound parameter instead of internal buffer).

Standard:

    Fixed bug #70999 (php_random_bytes: called object is not a function).
    Fixed bug #70960 (ReflectionFunction for array_unique returns wrong number of parameters).

Streams/Socket:

    Add IPV6_V6ONLY constant / make it usable in stream contexts.

Soap:

    Fixed bug #70993 (Array key references break argument processing).

PDO_Firebird:

    Fixed bug #60052 (Integer returned as a 64bit integer on X64_86).
[close]

http://www.php.net/
Titel: PHP 7.0.2
Beitrag von: SiLæncer am 07 Januar, 2016, 12:23
Changelog

Core:
Fixed bug #71165 (-DGC_BENCH=1 doesn't work on PHP7).
Fixed bug #71163 (Segmentation Fault: cleanup_unfinished_calls).
Fixed bug #71109 (ZEND_MOD_CONFLICTS("xdebug") doesn't work).
Fixed bug #71092 (Segmentation fault with return type hinting).
Fixed bug memleak in header_register_callback.
Fixed bug #71067 (Local object in class method stays in memory for each call).
Fixed bug #66909 (configure fails utf8_to_mutf7 test).
Fixed bug #70781 (Extension tests fail on dynamic ext dependency).
Fixed bug #71089 (No check to duplicate zend_extension).
Fixed bug #71086 (Invalid numeric literal parse error within highlight_string() function).
Fixed bug #71154 (Incorrect HT iterator invalidation causes iterator reuse).
Fixed bug #52355 (Negating zero does not produce negative zero).
Fixed bug #66179 (var_export() exports float as integer).
Fixed bug #70804 (Unary add on negative zero produces positive zero).
CURL:
Fixed bug #71144 (Sementation fault when using cURL with ZTS).
DBA:
Fixed key leak with invalid resource.
Filter:
Fixed bug #71063 (filter_input(INPUT_ENV, ..) does not work).
FTP:
Implemented FR #55651 (Option to ignore the returned FTP PASV address).
FPM:
Fixed bug #70755 (fpm_log.c memory leak and buffer overflow).
GD:
Fixed bug #70976 (Memory Read via gdImageRotateInterpolated Array Index Out of Bounds).
Mbstring:
Fixed bug #71066 (mb_send_mail: Program terminated with signal SIGSEGV, Segmentation fault).
Opcache:
Fixed bug #71127 (Define in auto_prepend_file is overwrite).
PCRE:
Fixed bug #71178 (preg_replace with arrays creates
  • in replace array if not already set).

Readline:
Fixed bug #71094 (readline_completion_function corrupts static array on second TAB).
Session:
Fixed bug #71122 (Session GC may not remove obsolete session data).
SPL:
Fixed bug #71077 (ReflectionMethod for ArrayObject constructor returns wrong number of parameters).
Fixed bug #71153 (Performance Degradation in ArrayIterator with large arrays).
Standard:
Fixed bug #71270 (Heap BufferOver Flow in escapeshell functions).
WDDX:
Fixed bug #70661 (Use After Free Vulnerability in WDDX Packet Deserialization).
Fixed bug #70741 (Session WDDX Packet Deserialization Type Confusion Vulnerability).
XMLRPC:
Fixed bug #70728 (Type Confusion Vulnerability in PHP_to_XMLRPC_worker).


[close]

http://www.php.net/
Titel: PHP 7.0.4
Beitrag von: SiLæncer am 03 März, 2016, 13:51
Changelog

Core:

Fixed bug (Low probability segfault in zend_arena).
Fixed bug #71441 (Typehinted Generator with return in try/finally crashes).
Fixed bug #71442 (forward_static_call crash).
Fixed bug #71443 (Segfault using built-in webserver with intl using symfony).
Fixed bug #71449 (An integer overflow bug in php_implode()).
Fixed bug #71450 (An integer overflow bug in php_str_to_str_ex()).
Fixed bug #71474 (Crash because of VM stack corruption on Magento2).
Fixed bug #71485 (Return typehint on internal func causes Fatal error when it throws exception).
Fixed bug #71529 (Variable references on array elements don't work when using count).
Fixed bug #71601 (finally block not executed after yield from).
Fixed bug #71637 (Multiple Heap Overflow due to integer overflows in xml/filter_url/addcslashes).
CLI server:

Fixed bug #71559 (Built-in HTTP server, we can download file in web by bug).

CURL:

Fixed bug #71523 (Copied handle with new option CURLOPT_HTTPHEADER crashes while curl_multi_exec).
Fixed memory leak in curl_getinfo().

Date:

Fixed bug #71525 (Calls to date_modify will mutate timelib_rel_time, causing date_date_set issues).

Fileinfo:

Fixed bug #71434 (finfo throws notice for specific python file).

FPM:

Fixed bug #62172 (FPM not working with Apache httpd 2.4 balancer/fcgi setup).
Fixed bug #71269 (php-fpm dumped core).

Opcache:

Fixed bug #71584 (Possible use-after-free of ZCG(cwd) in Zend Opcache).

PCRE:

Fixed bug #71537 (PCRE segfault from Opcache).

phpdbg:

Fixed inherited functions from unspecified files being included in phpdbg_get_executable().

SOAP:

Fixed bug #71610 (Type Confusion Vulnerability - SOAP / make_http_soap_request()).

Standard:

Fixed bug #71603 (compact() maintains references in php7).
Fixed bug #70720 (strip_tags improper php code parsing).
XMLRPC:

Fixed bug #71501 (xmlrpc_encode_request ignores encoding option).

Zip:

Fixed bug #71561 (NULL pointer dereference in Zip::ExtractTo).

[close]

http://www.php.net/
Titel: PHP 7.0.5
Beitrag von: SiLæncer am 31 März, 2016, 16:45
Changelog

Core:

Huge pages disabled by default.
Added ability to enable huge pages in Zend Memory Manager through the environment variable USE_ZEND_ALLOC_HUGE_PAGES=1.
Fixed bug #71756 (Call-by-reference widens scope to uninvolved functions when used in switch).
Fixed bug #71729 (Possible crash in zend_bin_strtod, zend_oct_strtod, zend_hex_strtod).
Fixed bug #71695 (Global variables are reserved before execution).
Fixed bug #71629 (Out-of-bounds access in php_url_decode in context php_stream_url_wrap_rfc2397).
Fixed bug #71622 (Strings used in pass-as-reference cannot be used to invoke C::$callable()).
Fixed bug #71596 (Segmentation fault on ZTS with date function (setlocale)).
Fixed bug #71535 (Integer overflow in zend_mm_alloc_heap()).
Fixed bug #71470 (Leaked 1 hashtable iterators).
Fixed bug #71575 (ISO C does not allow extra ‘;’ outside of a function).
Fixed bug #71724 (yield from does not count EOLs).
Fixed bug #71767 (ReflectionMethod::getDocComment returns the wrong comment).
Fixed bug #71806 (php_strip_whitespace() fails on some numerical values).
Fixed bug #71624 (`php -R` (PHP_MODE_PROCESS_STDIN) is broken).

CLI Server:

Fixed bug #69953 (Support MKCALENDAR request method).

Curl:

Fixed bug #71694 (Support constant CURLM_ADDED_ALREADY).

Date:

Fixed bug #71635 (DatePeriod::getEndDate segfault).

Fileinfo:

Fixed bug #71527 (Buffer over-write in finfo_open with malformed magic file).

libxml:

Fixed bug #71536 (Access Violation crashes php-cgi.exe).

mbstring:

Fixed bug #71906 (AddressSanitizer: negative-size-param (-1) in mbfl_strcut).

ODBC:

Fixed bug #47803, #69526 (Executing prepared statements is succesfull only for the first two statements).

PCRE:

Fixed bug #71659 (segmentation fault in pcre running twig tests).

PDO_DBlib:

Fixed bug #54648 (PDO::MSSQL forces format of datetime fields).

Phar:

Fixed bug #71625 (Crash in php7.dll with bad phar filename).
Fixed bug #71317 (PharData fails to open specific file).
Fixed bug #71860 (Invalid memory write in phar on filename with \0 in name).

phpdbg:

Fixed crash when advancing (except step) inside an internal function.

Session:

Fixed bug #71683 (Null pointer dereference in zend_hash_str_find_bucket).

SNMP:

Fixed bug #71704 (php_snmp_error() Format String Vulnerability).

SPL:

Fixed bug #71617 (private properties lost when unserializing ArrayObject).

Standard:

Fixed bug #71660 (array_column behaves incorrectly after foreach by reference).
Fixed bug #71798 (Integer Overflow in php_raw_url_encode).

Zip:

Update bundled libzip to 1.1.2.

[close]

http://www.php.net/
Titel: PHP 7.0.6
Beitrag von: SiLæncer am 02 Mai, 2016, 18:45
Changelog

ersion 7.0.6
28 Apr 2016

    Core:
        Fixed bug #71930 (_zval_dtor_func: Assertion `(arr)->gc.refcount <= 1' failed).
        Fixed bug #71922 (Crash on assert(new class{})).
        Fixed bug #71914 (Reference is lost in "switch").
        Fixed bug #71871 (Interfaces allow final and abstract functions).
        Fixed bug #71859 (zend_objects_store_call_destructors operates on realloced memory, crashing).
        Fixed bug #71841 (EG(error_zval) is not handled well).
        Fixed bug #71750 (Multiple Heap Overflows in php_raw_url_encode/ php_url_encode).
        Fixed bug #71731 (Null coalescing operator and ArrayAccess).
        Fixed bug #71609 (Segmentation fault on ZTS with gethostbyname).
        Fixed bug #71428 (inheritance and allow_null).
        Fixed bug #71414 (Inheritance, traits and interfaces).
        Fixed bug #71359 (Null coalescing operator and magic).
        Fixed bug #71334 (Cannot access array keys while uksort()).
        Fixed bug #69659 (ArrayAccess, isset() and the offsetExists method).
        Fixed bug #69537 (__debugInfo with empty string for key gives error).
        Fixed bug #62059 (ArrayObject and isset are not friends).
        Fixed bug #71980 (Decorated/Nested Generator is Uncloseable in Finally).
    BCmath:
        Fixed bug #72093 (bcpowmod accepts negative scale and corrupts _one_ definition).
    Curl:
        Fixed bug #71831 (CURLOPT_NOPROXY applied as long instead of string).
    Date:
        Fixed bug #71889 (DateInterval::format Segmentation fault).
    EXIF:
        Fixed bug #72094 (Out of bounds heap read access in exif header processing).
    GD:
        Fixed bug #71912 (libgd: signedness vulnerability). (CVE-2016-3074)
    Intl:
        Fixed bug #71516 (IntlDateFormatter looses locale if pattern is set via constructor).
        Fixed bug #70455 (Missing constant: IntlChar::NO_NUMERIC_VALUE).
        Fixed bug #70451, #70452 (Inconsistencies in return values of IntlChar methods).
        Fixed bug #68893 (Stackoverflow in datefmt_create).
        Fixed bug #66289 (Locale::lookup incorrectly returns en or en_US if locale is empty).
        Fixed bug #70484 (selectordinal doesn't work with named parameters).
        Fixed bug #72061 (Out-of-bounds reads in zif_grapheme_stripos with negative offset).
    ODBC:
        Fixed bug #63171 (Script hangs after max_execution_time).
    Opcache:
        Fixed bug #71843 (null ptr deref ZEND_RETURN_SPEC_CONST_HANDLER).
    PDO:
        Fixed bug #52098 (Own PDOStatement implementation ignore __call()).
        Fixed bug #71447 (Quotes inside comments not properly handled).
    PDO_DBlib:
        Fixed bug #71943 (dblib_handle_quoter needs to allocate an extra byte).
        Add DBLIB-specific attributes for controlling timeouts.
    PDO_pgsql:
        Fixed bug #62498 (pdo_pgsql inefficient when getColumnMeta() is used).
    Postgres:
        Fixed bug #71820 (pg_fetch_object binds parameters before call constructor).
        Fixed bug #71998 (Function pg_insert does not insert when column type = inet).
    SOAP:
        Fixed bug #71986 (Nested foreach assign-by-reference creates broken variables).
    SPL:
        Fixed bug #71838 (Deserializing serialized SPLObjectStorage-Object can't access properties in PHP).
        Fixed bug #71735 (Double-free in SplDoublyLinkedList::offsetSet).
        Fixed bug #67582 (Cloned SplObjectStorage with overwritten getHash fails offsetExists()).
        Fixed bug #52339 (SPL autoloader breaks class_exists()).
    Standard:
        Fixed bug #72116 (array_fill optimization breaks implementation).
        Fixed bug #71995 (Returning the same var twice from __sleep() produces broken serialized data).
        Fixed bug #71940 (Unserialize crushes on restore object reference).
        Fixed bug #71969 (str_replace returns an incorrect resulting array after a foreach by reference).
        Fixed bug #71891 (header_register_callback() and register_shutdown_function()).
        Fixed bug #71884 (Null pointer deref (segfault) in stream_context_get_default).
        Fixed bug #71840 (Unserialize accepts wrongly data).
        Fixed bug #71837 (Wrong arrays behaviour).
        Fixed bug #71827 (substr_replace bug, string length).
        Fixed bug #67512 (php_crypt() crashes if crypt_r() does not exist or _REENTRANT is not defined).
    XML:
        Fixed bug #72099 (xml_parse_into_struct segmentation fault).
    Zip:
        Fixed bug #71923 (integer overflow in ZipArchive::getFrom*). (CVE-2016-3078)

[close]

http://www.php.net/
Titel: PHP 7.0.7
Beitrag von: SiLæncer am 26 Mai, 2016, 19:20
Changelog

Core:

Fixed bug #72162 (use-after-free - error_reporting).
Add compiler option to disable special case function calls.
Fixed bug #72101 (crash on complex code).
Fixed bug #72100 (implode() inserts garbage into resulting string when joins very big integer).
Fixed bug #72057 (PHP Hangs when using custom error handler and typehint).
Fixed bug #72038 (Function calls with values to a by-ref parameter don't always throw a notice).
Fixed bug #71737 (Memory leak in closure with parameter named $this).
Fixed bug #72059 (?? is not allowed on constant expressions).
Fixed bug #72159 (Imported Class Overrides Local Class Name).

Curl:

Fixed bug #68658 (Define CURLE_SSL_CACERT_BADFILE).

DBA:

Fixed bug #72157 (use-after-free caused by dba_open).

GD:

Fixed bug #72227 (imagescale out-of-bounds read).

Intl:

Fixed bug #72241 (get_icu_value_internal out-of-bounds read).

JSON:

Fixed bug #72069 (Behavior \JsonSerializable different from json_encode).

Mbstring:

Fixed bug #72164 (Null Pointer Dereference - mb_ereg_replace).

OCI8:

Fixed bug #71600 (oci_fetch_all segfaults when selecting more than eight columns).

Opcache:

Fixed bug #72014 (Including a file with anonymous classes multiple times leads to fatal error).

OpenSSL:

Fixed bug #72165 (Null pointer dereference - openssl_csr_new).

PCNTL:

Fixed bug #72154 (pcntl_wait/pcntl_waitpid array internal structure overwrite).

POSIX:

Fixed bug #72133 (php_posix_group_to_array crashes if gr_passwd is NULL).

Postgres:

Fixed bug #72028 (pg_query_params(): NULL converts to empty string).
Fixed bug #71062 (pg_convert() doesn't accept ISO 8601 for datatype timestamp).
Fixed bug #72151 (mysqli_fetch_object changed behaviour).

Reflection:

Fixed bug #72174 (ReflectionProperty#getValue() causes __isset call).

Session:

Fixed bug #71972 (Cyclic references causing session_start(): Failed to decode session object).

Sockets:

Added socket_export_stream() function for getting a stream compatible resource from a socket resource.
SPL:

Fixed bug #72051 (The reference in CallbackFilterIterator doesn't work as expected).

SQLite3:

Fixed bug #68849 (bindValue is not using the right data type).

Standard:

Fixed bug #72075 (Referencing socket resources breaks stream_select).
Fixed bug #72031 (array_column() against an array of objects discards all values matching null).

[close]

http://www.php.net/
Titel: PHP 7.0.8
Beitrag von: SiLæncer am 23 Juni, 2016, 18:15
Changelog

Core:

Fixed bug #72218 (If host name cannot be resolved then PHP 7 crashes).
Fixed bug #72221 (segfault, past-the-end access).
Fixed bug #72268 (Integer Overflow in nl2br()).
Fixed bug #72275 (Integer Overflow in json_encode()/json_decode()/ json_utf8_to_utf16()).
Fixed bug #72400 (Integer Overflow in addcslashes/addslashes).
Fixed bug #72403 (Integer Overflow in Length of String-typed ZVAL).

FPM:

Fixed bug #72308 (fastcgi_finish_request and logging environment variables).

GD:

Fixed bug #72298 (pass2_no_dither out-of-bounds access).
Fixed bug #72337 (invalid dimensions can lead to crash) (Pierre)
Fixed bug #72339 (Integer Overflow in _gd2GetHeader() resulting in heap overflow).
Fixed bug #72407 (NULL Pointer Dereference at _gdScaleVert).
Intl: Fixed bug #64524 (Add intl.use_exceptions to php.ini-*).

mbstring:

Fixed bug #72402 (_php_mb_regex_ereg_replace_exec - double free).

mcrypt:

Fixed bug #72455 (Heap Overflow due to integer overflows).

PCRE:

Fixed bug #72143 (preg_replace uses int instead of size_t).

PDO_pgsql:

Fixed bug #71573 (Segfault (core dumped) if paramno beyond bound).
Fixed bug #72294 (Segmentation fault/invalid pointer in connection with pgsql_stmt_dtor).

Phpdbg:

Fixed bug #72284 (phpdbg fatal errors with coverage).

Postgres:

Fixed bug #72195 (pg_pconnect/pg_connect cause use-after-free).
Fixed bug #72197 (pg_lo_create arbitrary read).

SPL:

Fixed bug #72262 (int/size_t confusion in SplFileObject::fread).
Fixed bug #72433 (Use After Free Vulnerability in PHP's GC algorithm and unserialize).

Standard:

Fixed bug #72017 (range() with float step produces unexpected result).
Fixed bug #72193 (dns_get_record returns array containing elements of type 'unknown').
Fixed bug #72229 (Wrong reference when serialize/unserialize an object).
Fixed bug #72300 (ignore_user_abort(false) has no effect).

XML:

Fixed bug #72206 (xml_parser_create/xml_parser_free leaks mem).

XMLRPC:

Fixed bug #72155 (use-after-free caused by get_zval_xmlrpc_type).

WDDX:

Fixed bug #72340 (Double Free Courruption in wddx_deserialize).

Zip:

Fixed bug #72258 (ZipArchive converts filenames to unrecoverable form).
Fixed bug #72434 (ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize).

[close]

http://www.php.net/
Titel: PHP 7.0.9
Beitrag von: SiLæncer am 25 Juli, 2016, 17:20
Changelog

Core:

    Fixed bug #72508 (strange references after recursive function call and "switch" statement).
    Fixed bug #72513 (Stack-based buffer overflow vulnerability in virtual_file_ex).
    Fixed bug #72573 (HTTP_PROXY is improperly trusted by some PHP libraries and applications).

bz2:

    Fixed bug #72613 (Inadequate error handling in bzread()).

CLI:

    Fixed bug #72484 (SCRIPT_FILENAME shows wrong path if the user specify router.php).

COM:

    Fixed bug #72498 (variant_date_from_timestamp null dereference).

Curl:

    Fixed bug #72541 (size_t overflow lead to heap corruption).

Exif:

    Fixed bug #72603 (Out of bound read in exif_process_IFD_in_MAKERNOTE).
    Fixed bug #72618 (NULL Pointer Dereference in exif_process_user_comment).

GD:

    Fixed bug #43475 (Thick styled lines have scrambled patterns).
    Fixed bug #53640 (XBM images require width to be multiple of 8).
    Fixed bug #64641 (imagefilledpolygon doesn't draw horizontal line).
    Fixed bug #72512 (gdImageTrueColorToPaletteBody allows arbitrary write/read access).
    Fixed bug #72519 (imagegif/output out-of-bounds access).
    Fixed bug #72558 (Integer overflow error within _gdContributionsAlloc()).
    Fixed bug #72482 (Ilegal write/read access caused by gdImageAALine overflow).
    Fixed bug #72494 (imagecropauto out-of-bounds access).

Intl:

    Fixed bug #72533 (locale_accept_from_http out-of-bounds access).

Mbstring:

    Fixed bug #72405 (mb_ereg_replace - mbc_to_code (oniguruma) - oob read access).
    Fixed bug #72399 (Use-After-Free in MBString (search_re)).

mcrypt:

    Fixed bug #72551, bug #72552 (Incorrect casting from size_t to int lead to heap overflow in mdecrypt_generic).

PDO_pgsql:

    Fixed bug #72570 (Segmentation fault when binding parameters on a query without placeholders).

PCRE:

    Fixed bug #72476 (Memleak in jit_stack).
    Fixed bug #72463 (mail fails with invalid argument).

Readline:

    Fixed bug #72538 (readline_redisplay crashes php).

Standard:

    Fixed bug #72505 (readfile() mangles files larger than 2G).
    Fixed bug #72306 (Heap overflow through proc_open and $env parameter).

Session:

    Fixed bug #72531 (ps_files_cleanup_dir Buffer overflow).
    Fixed bug #72562 (Use After Free in unserialize() with Unexpected Session Deserialization).

SNMP:

    Fixed bug #72479 (Use After Free Vulnerability in SNMP with GC and unserialize()).

Streams:

    Fixed bug #72439 (Stream socket with remote address leads to a segmentation fault).

XMLRPC:

    Fixed bug #72606 (heap-buffer-overflow (write) simplestring_addn simplestring.c).

Zip:

    Fixed bug #72520 (Stack-based buffer overflow vulnerability in php_stream_zip_opener).

[close]

http://www.php.net/
Titel: PHP 7.1.0 Beta 2
Beitrag von: SiLæncer am 08 August, 2016, 12:20
Whats new:>>

This release is the second beta for 7.1.0. All users of PHP are encouraged to test this version carefully, and report any bugs and incompatibilities in the bug tracking system.

http://www.php.net/
Titel: PHP 7.0.10 Final
Beitrag von: SiLæncer am 19 August, 2016, 12:15
Changelog

Core:

    Fixed bug #72629 (Caught exception assignment to variables ignores references).
    Fixed bug #72594 (Calling an earlier instance of an included anonymous class fatals).
    Fixed bug #72581 (previous property undefined in Exception after deserialization).
    Fixed bug #72496 (Cannot declare public method with signature incompatible with parent private method).
    Fixed bug #72024 (microtime() leaks memory).
    Fixed bug #71911 (Unable to set --enable-debug on building extensions by phpize on Windows).
    Fixed bug causing ClosedGeneratorException being thrown into the calling code instead of the Generator yielding from.
    Implemented FR #72614 (Support "nmake test" on building extensions by phpize).
    Fixed bug #72641 (phpize (on Windows) ignores PHP_PREFIX).
    Fixed potential segfault in object storage freeing in shutdown sequence.
    Fixed bug #72663 (Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization).
    Fixed bug #72681 (PHP Session Data Injection Vulnerability).
    Fixed bug #72683 (getmxrr broken).
    Fixed bug #72742 (memory allocator fails to realloc small block to large one).

Bz2:

    Fixed bug #72837 (integer overflow in bzdecompress caused heap corruption).

Calendar:

    Fixed bug #67976 (cal_days_month() fails for final month of the French calendar).
    Fixed bug #71894 (AddressSanitizer: global-buffer-overflow in zif_cal_from_jd).

COM:

    Fixed bug #72569 (DOTNET/COM array parameters broke in PHP7).

CURL:

    Fixed bug #71709 (curl_setopt segfault with empty CURLOPT_HTTPHEADER).
    Fixed bug #71929 (CURLINFO_CERTINFO data parsing error).
    Fixed bug #72674 (Heap overflow in curl_escape).

DOM:

    Fixed bug #66502 (DOM document dangling reference).

EXIF:

    Fixed bug #72735 (Samsung picture thumb not read (zero size)).
    Fixed bug #72627 (Memory Leakage In exif_process_IFD_in_TIFF).

Filter:

    Fixed bug #71745 (FILTER_FLAG_NO_RES_RANGE does not cover whole 127.0.0.0/8 range).

FPM:

    Fixed bug #72575 (using --allow-to-run-as-root should ignore missing user).

GD:

    Fixed bug #72596 (imagetypes function won't advertise WEBP support).
    Fixed bug #72604 (imagearc() ignores thickness for full arcs).
    Fixed bug #70315 (500 Server Error but page is fully rendered).
    Fixed bug #43828 (broken transparency of imagearc for truecolor in blendingmode).
    Fixed bug #66555 (Always false condition in ext/gd/libgd/gdkanji.c).
    Fixed bug #68712 (suspicious if-else statements).
    Fixed bug #72697 (select_colors write out-of-bounds).
    Fixed bug #72730 (imagegammacorrect allows arbitrary write access).

Intl:

    Fixed bug #72639 (Segfault when instantiating class that extends IntlCalendar and adds a property).
    Partially fixed Fixed bug #72506 (idn_to_ascii for UTS #46 incorrect for long domain names).

mbstring:

    Fixed bug #72691 (mb_ereg_search raises a warning if a match zero-width).
    Fixed bug #72693 (mb_ereg_search increments search position when a match zero-width).
    Fixed bug #72694 (mb_ereg_search_setpos does not accept a string's last position).
    Fixed bug #72710 (`mb_ereg` causes buffer overflow on regexp compile error).

Mcrypt:

    Fixed bug #72782 (Heap Overflow due to integer overflows).

Opcache:

    Fixed bug #72590 (Opcache restart with kill_all_lockers does not work).

PCRE:

    Fixed bug #72688 (preg_match missing group names in matches).

PDO_pgsql:

    Fixed bug #70313 (PDO statement fails to throw exception).

Reflection:

    Fixed bug #72222 (ReflectionClass::export doesn't handle array constants).

SimpleXML:

    Fixed bug #72588 (Using global var doesn't work while accessing SimpleXML element).

SNMP:

    Fixed bug #72708 (php_snmp_parse_oid integer overflow in memory allocation).

SPL:

    Fixed bug #55701 (GlobIterator throws LogicException).
    Fixed bug #72646 (SplFileObject::getCsvControl does not return the escape character).
    Fixed bug #72684 (AppendIterator segfault with closed generator).

SQLite3:

    Fixed bug #72668 (Spurious warning when exception is thrown in user defined function).
    Fixed bug #72571 (SQLite3::bindValue, SQLite3::bindParam crash).
    Implemented FR #72653 (SQLite should allow opening with empty filename).
    Updated to SQLite3 3.13.0.

Standard:

    Fixed bug #72622 (array_walk + array_replace_recursive create references from nothing).
    Fixed bug #72152 (base64_decode $strict fails to detect null byte).
    Fixed bug #72263 (base64_decode skips a character after padding in strict mode).
    Fixed bug #72264 (base64_decode $strict fails with whitespace between padding).
    Fixed bug #72330 (CSV fields incorrectly split if escape char followed by UTF chars).

Streams:

    Fixed bug #41021 (Problems with the ftps wrapper).
    Fixed bug #54431 (opendir() does not work with ftps:// wrapper).
    Fixed bug #72667 (opendir() with ftp:// attempts to open data stream for non-existent directories).
    Fixed bug #72771 (ftps:// wrapper is vulnerable to protocol downgrade attack).

XMLRPC:

    Fixed bug #72647 (xmlrpc_encode() unexpected output after referencing array elements).

Wddx:

    Fixed bug #72564 (boolean always deserialized as "true") (Remi)
    Fixed bug #72142 (WDDX Packet Injection Vulnerability in wddx_serialize_value()).
    Fixed bug #72749 (wddx_deserialize allows illegal memory access) (Stas)
    Fixed bug #72750 (wddx_deserialize null dereference).
    Fixed bug #72790 (wddx_deserialize null dereference with invalid xml).
    Fixed bug #72799 (wddx_deserialize null dereference in php_wddx_pop_element).

Zip:

    Fixed bug #72660 (NULL Pointer dereference in zend_virtual_cwd).

[close]

http://www.php.net/
Titel: PHP 7.1.0 Beta 3
Beitrag von: SiLæncer am 20 August, 2016, 07:20
Changelog

Core:

Fixed bug #72813 (Segfault with __get returned by ref).
Fixed bug #72767 (PHP Segfaults when trying to expand an infinite operator).
TypeError messages for arg_info type checks will now say "must be ... or null" where the parameter or return type accepts null.
Fixed bug #72857 (stream_socket_recvfrom read access violation).
Fixed bug #72663 (Create an Unexpected Object and Don't Invoke
wakeup() in Deserialization).
Fixed bug #72681 (PHP Session Data Injection Vulnerability).
Fixed bug #72742 (memory allocator fails to realloc small block to large
one).

Bz2:

Fixed bug #72837 (integer overflow in bzdecompress caused heap
corruption).
Curl
Fixed bug #72674 (Heap overflow in curl_escape).

EXIF:

Fixed bug #72735 (Samsung picture thumb not read (zero size)).
Fixed bug #72627 (Memory Leakage In exif_process_IFD_in_TIFF).

FTP:

Fixed bug #70195 (Cannot upload file using ftp_put to FTPES with
require_ssl_reuse).

mbstring:

Fixed bug #72711 (`mb_ereg` does not clear the `$regs` parameter on
failure).

Mcrypt:

Fixed bug #72782 (Heap Overflow due to integer overflows).

OCI8

Fixed invalid handle error with Implicit Result Sets.
Fixed bug #72524 (Binding null values triggers ORA-24816 error).

Opcache:

Fixed bug #72762 (Infinite loop while parsing a file with opcache enabled).

PDO:

Fixed bug #72788 (Invalid memory access when using persistent PDO
connection).
Fixed bug #72791 (Memory leak in PDO persistent connection handling).
Fixed bug #60665 (call to empty() on NULL result using PDO::FETCH_LAZY
returns false).

Reflection:

Implemented request #38992 (invoke() and invokeArgs() static method calls
should match). .
Add ReflectionNamedType::getName() and return leading "?" for nullable types
from ReflectionType::__toString().

Session:

Implemented RFC: Session ID without hashing.
https://wiki.php.net/rfc/session-id-without-hashing

SPL:

Fixed bug #72888 (Segfault on clone on splFileObject).

SQLite3:

Updated to SQLite3 3.14.0.

Standard:

Fixed bug #55451 (substr_compare NULL length interpreted as 0).
Fixed bug #72278 (getimagesize returning FALSE on valid jpg).

Stream:

Fixed bug #72853 (stream_set_blocking doesn't work).
Fixed bug #72743 (Out-of-bound read in php_stream_filter_create).
Implemented FR #27814 (Multiple small packets send for HTTP request).
Fixed bug #72764 (ftps:// opendir wrapper data channel encryption fails
with IIS FTP 7.5, 8.5).
Fixed bug #72810 (Missing SKIP_ONLINE_TESTS checks).

sysvshm:

Fixed bug #72858 (shm_attach null dereference).

XML:

Fixed bug #72085 (SEGV on unknown address zif_xml_parse).

ZIP:

Fixed bug #68302 (impossible to compile php with zip support).

[close]

http://www.php.net/
Titel: PHP 7.1.0 RC 1
Beitrag von: SiLæncer am 02 September, 2016, 04:53
Changelog

Core:
Fixed bug #72944 (Null pointer deref in zval_delref_p). (Dmitry)
Fixed bug #72943 (assign_dim on string doesn't reset hval). (Laruence)
Fixed bug #72598 (Reference is lost after array_slice()) (Nikita)
Fixed bug #72703 (Out of bounds global memory read in BF_crypt triggered by
password_verify). (Anatol)
Implement ArgumentCountError when passing in too few arguments (Davey)
COM:
Fixed bug #72922 (COM called from PHP does not return out parameters).
Anatol)
Dba:
Fixed bug #70825 (Cannot fetch multiple values with group in ini file).
cmb)
GD:
Fixed bug #66005 (imagecopy does not support 1bit transparency on truecolor
images). (cmb)
Fixed bug #72913 (imagecopy() loses single-color transparency on palette
images). (cmb)
Fixed bug #68716 (possible resource leaks in _php_image_convert()). (cmb)
iconv:
Fixed bug #72320 (iconv_substr returns false for empty strings). (cmb)
Intl:
Fixed bug #65732 (grapheme_*() is not Unicode compliant on CR LF
sequence). (cmb)
JSON:
Implemented earlier return when json_encode fails, fixes bugs #68992
Stacking exceptions thrown by JsonSerializable) and #70275 (On recursion
error, json_encode can eat up all system memory). (Jakub Zelenka)
mbstring:
Fixed bug #66797 (mb_substr only takes 32-bit signed integer). (cmb)
Opcache:
Fixed bug #72949 (Typo in opcache error message). (cmb)
PDO_DBlib:
Implemented stringify 'uniqueidentifier' fields.
Alexander Zhuravlev, Adam Baratz)
Reflection:
Reverted prepending for class names. (Trowski)
Session:
Fixed bug #72940 (SID always return "name=ID", even if session
cookie exist). (Yasuo)
Implemented session_gc() and session_create_id() functions. (Yasuo)
SimpleXML:
Fixed bug #72971 (SimpleXML isset/unset do not respect namespace). (Nikita)
Fixed bug #72957 (Null coalescing operator doesn't behave as expected with
SimpleXMLElement). (Nikita)
SOAP:
Fixed bug #71711 (Soap Server Member variables reference bug). (Nikita)
Fixed bug #71996 (Using references in arrays doesn't work like expected).
Nikita)
Standard:
Fixed bug #72920 (Accessing a private constant using constant() creates
an exception AND warning). (Laruence)
Fixed bug #65550 (get_browser() incorrectly parses entries with "+" sign).
cmb)
Fixed bug #71882 (Negative ftruncate() on php://memory exhausts memory).
cmb)
XML:
Fixed bug #72714 (_xml_startElementHandler() segmentation fault). (cmb)

[close]

http://www.php.net/
Titel: PHP 7.1.0 RC 2
Beitrag von: SiLæncer am 17 September, 2016, 17:45
Changelog

CORE:

Fixed bug #73067 (__debugInfo crashes when throwing an exception).
Fixed bug #73025 (Heap Buffer Overflow in virtual_popen of
zend_virtual_cwd.c).
Fixed bug #73058 (crypt broken when salt is 'too' long).

FILTER:

Fixed bug #72972 (Bad filter for the flags FILTER_FLAG_NO_RES_RANGE and
FILTER_FLAG_NO_PRIV_RANGE).
Fixed bug #73054 (default option ignored when object passed to int filter).

GD:

Fixed bug #67325 (imagetruecolortopalette: white is duplicated in palette).

MBSTRING:

Fixed bug #66964 (mb_convert_variables() cannot detect recursion)
Fixed bug #72992 (mbstring.internal_encoding doesn't inherit default_charset).

OPCACHE:

Fixed bug #72982 (Memory leak in zend_accel_blacklist_update_regexp()
function).

OPEN SSL:

Fixed bug #73072 (Invalid path SNI_server_certs causes segfault).

SESSION:

Fixed bug #68015 (Session does not report invalid uid for files save handler).

SQLite3:

Updated to SQLite3 3.14.2.

[close]

http://www.php.net/
Titel: PHP 7.0.12
Beitrag von: SiLæncer am 14 Oktober, 2016, 09:13
Changelog

Core:

    Fixed bug #73025 (Heap Buffer Overflow in virtual_popen of zend_virtual_cwd.c).
    Fixed bug #72703 (Out of bounds global memory read in BF_crypt triggered by password_verify).
    Fixed bug #73058 (crypt broken when salt is 'too' long).
    Fixed bug #69579 (Invalid free in extension trait).
    Fixed bug #73156 (segfault on undefined function).
    Fixed bug #73163 (PHP hangs if error handler throws while accessing undef const in default value).
    Fixed bug #73172 (parse error: Invalid numeric literal).
    Fixed for #73240 (Write out of bounds at number_format).
    Fixed bug #73147 (Use After Free in PHP7 unserialize()).
    Fixed bug #73189 (Memcpy negative size parameter php_resolve_path).

BCmath:

    Fixed bug #73190 (memcpy negative parameter _bc_new_num_ex).

COM:

    Fixed bug #73126 (Cannot pass parameter 1 by reference).

Date:

    Fixed bug #73091 (Unserializing DateInterval object may lead to __toString invocation).

DOM:

    Fixed bug #73150 (missing NULL check in dom_document_save_html).

Filter:

    Fixed bug #72972 (Bad filter for the flags FILTER_FLAG_NO_RES_RANGE and FILTER_FLAG_NO_PRIV_RANGE).
    Fixed bug #73054 (default option ignored when object passed to int filter).

GD:

    Fixed bug #67325 (imagetruecolortopalette: white is duplicated in palette).
    Fixed bug #50194 (imagettftext broken on transparent background w/o alphablending).
    Fixed bug #73003 (Integer Overflow in gdImageWebpCtx of gd_webp.c).
    Fixed bug #53504 (imagettfbbox gives incorrect values for bounding box).
    Fixed bug #73157 (imagegd2() ignores 3rd param if 4 are given).
    Fixed bug #73155 (imagegd2() writes wrong chunk sizes on boundaries).
    Fixed bug #73159 (imagegd2(): unrecognized formats may result in corrupted files).
    Fixed bug #73161 (imagecreatefromgd2() may leak memory).

Intl:

    Fixed bug #73218 (add mitigation for ICU int overflow).

Mbstring:

    Fixed bug #66797 (mb_substr only takes 32-bit signed integer).
    Fixed bug #66964 (mb_convert_variables() cannot detect recursion).
    Fixed bug #72992 (mbstring.internal_encoding doesn't inherit default_charset).

Mysqlnd:

    Fixed bug #72489 (PHP Crashes When Modifying Array Containing MySQLi Result Data).

Opcache:

    Fixed bug #72982 (Memory leak in zend_accel_blacklist_update_regexp() function).

OpenSSL:

    Fixed bug #73072 (Invalid path SNI_server_certs causes segfault).
    Fixed bug #73276 (crash in openssl_random_pseudo_bytes function).
    Fixed bug #73275 (crash in openssl_encrypt function).

PCRE:

    Fixed bug #73121 (Bundled PCRE doesn't compile because JIT isn't supported on s390).
    Fixed bug #73174 (heap overflow in php_pcre_replace_impl).

PDO_DBlib:

    Fixed bug #72414 (Never quote values as raw binary data).
    Allow \PDO::setAttribute() to set query timeouts.
    Handle SQLDECIMAL/SQLNUMERIC types, which are used by later TDS versions.
    Add common PDO test suite.
    Free error and message strings when cleaning up PDO instances.
    Fixed bug #67130 (\PDOStatement::nextRowset() should succeed when all rows in current rowset haven't been fetched).
    Ignore potentially misleading dberr values.

phpdbg:

    Fixed bug #72996 (phpdbg_prompt.c undefined reference to DL_LOAD).
    Fixed next command not stopping when leaving function.

Session:

    Fixed bug #68015 (Session does not report invalid uid for files save handler).
    Fixed bug #73100 (session_destroy null dereference in ps_files_path_create).

SimpleXML:

    Fixed bug #73293 (NULL pointer dereference in SimpleXMLElement::asXML()).

SOAP:

    Fixed bug #71711 (Soap Server Member variables reference bug).
    Fixed bug #71996 (Using references in arrays doesn't work like expected).

SPL:

    Fixed bug #73257, Fixed bug #73258 (SplObjectStorage unserialize allows use of non-object as key).

SQLite3:

    Updated bundled SQLite3 to 3.14.2.

Zip:

    Fixed bug #70752 (Depacking with wrong password leaves 0 length files).

[close]

http://www.php.net/
Titel: PHP 7.1.0 RC 5
Beitrag von: SiLæncer am 28 Oktober, 2016, 16:40
Changelog

Core:

Fixed bug #73350 (Exception::__toString() cause circular references).
Fixed bug #73329 ((Float)"Nano" == NAN).

CLI Server:

Fixed bug #73360 (Unable to work in root with unicode chars). (Anatol)

SQLite3:

Fixed bug #73333 (2147483647 is fetched as string). (cmb)

[close]

http://www.php.net/
Titel: PHP 7.1.0
Beitrag von: SiLæncer am 02 Dezember, 2016, 17:15
Changelog

Core:

Added nullable types.
Added DFA optimization framework based on e-SSA form.
Added specialized opcode handlers (e.g. ZEND_ADD_LONG_NO_OVERFLOW).
Added [] = as alternative construct to list() =.
Added void return type.
Added support for negative string offsets in string offset syntax and various string functions.
Added a form of the list() construct where keys can be specified.
Implemented safe execution timeout handling, that prevents random crashes after "Maximum execution time exceeded" error.
Implemented the RFC `Support Class Constant Visibility`.
Implemented the RFC `Catching multiple exception types`.
Implemented logging to syslog with dynamic error levels.
Implemented FR #72614 (Support "nmake test" on building extensions by phpize).
Implemented RFC: Iterable.
Implemented RFC: Closure::fromCallable (Danack)
Implemented RFC: Replace "Missing argument" warning with "ArgumentCountError" exception.
Implemented RFC: Fix inconsistent behavior of $this variable.
Fixed bug #73585 (Logging of "Internal Zend error - Missing class information" missing class name).
Fixed memory leak(null coalescing operator with Spl hash).
Fixed bug #72736 (Slow performance when fetching large dataset with mysqli / PDO).
Fixed bug #72482 (Ilegal write/read access caused by gdImageAALine overflow).
Fixed bug #72696 (imagefilltoborder stackoverflow on truecolor images).
Fixed bug #73350 (Exception::__toString() cause circular references).
Fixed bug #73329 ((Float)"Nano" == NAN).
Fixed bug #73288 (Segfault in __clone > Exception.toString > __get).
Fixed for #73240 (Write out of bounds at number_format).
Fix pthreads detection when cross-compiling (ffontaine)
Fixed bug #73337 (try/catch not working with two exceptions inside a same operation).
Fixed bug #73156 (segfault on undefined function).
Fixed bug #73163 (PHP hangs if error handler throws while accessing undef const in default value).
Fixed bug #73172 (parse error: Invalid numeric literal).
Fixed bug #73181 (parse_str() without a second argument leads to crash).
Fixed bug #73025 (Heap Buffer Overflow in virtual_popen of zend_virtual_cwd.c).
Fixed bug #73058 (crypt broken when salt is 'too' long).
Fixed bug #72944 (Null pointer deref in zval_delref_p).
Fixed bug #72943 (assign_dim on string doesn't reset hval).
Fixed bug #72598 (Reference is lost after array_slice()) (Nikita)
Fixed bug #72703 (Out of bounds global memory read in BF_crypt triggered by password_verify).
Fixed bug #72813 (Segfault with __get returned by ref).
Fixed bug #72767 (PHP Segfaults when trying to expand an infinite operator).
TypeError messages for arg_info type checks will now say "must be ... or null" where the parameter or return type accepts null.
Fixed bug #72857 (stream_socket_recvfrom read access violation).
Fixed bug #72663 (Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization).
Fixed bug #72681 (PHP Session Data Injection Vulnerability).
Fixed bug #72742 (memory allocator fails to realloc small block to large one).
Fixed URL rewriter. It would not rewrite '//example.com/' URL unconditionally. URL rewrite target hosts whitelist is implemented.
Fixed bug #72641 (phpize (on Windows) ignores PHP_PREFIX).
Fixed bug #72683 (getmxrr broken).
Fixed bug #72629 (Caught exception assignment to variables ignores references).
Fixed bug #72594 (Calling an earlier instance of an included anonymous class fatals).
Fixed bug #72581 (previous property undefined in Exception after deserialization).
Fixed bug #72543 (Different references behavior comparing to PHP 5) (Laruence, Dmitry, Nikita)
Fixed bug #72347 (VERIFY_RETURN type casts visible in finally).
Fixed bug #72216 (Return by reference with finally is not memory safe).
Fixed bug #72215 (Wrong return value if var modified in finally).
Fixed bug #71818 (Memory leak when array altered in destructor).
Fixed bug #71539 (Memory error on $arr[$a] =& $arr[$b] if RHS rehashes) (Dmitry, Nikita)
Added new constant PHP_FD_SETSIZE.
Added optind parameter to getopt().
Added PHP to SAPI error severity mapping for logs.
Fixed bug #71911 (Unable to set --enable-debug on building extensions by phpize on Windows).
Fixed bug #29368 (The destructor is called when an exception is thrown from the constructor).
Implemented RFC: RNG Fixes.
Implemented email validation as per RFC 6531.
Fixed bug #72513 (Stack-based buffer overflow vulnerability in virtual_file_ex).
Fixed bug #72573 (HTTP_PROXY is improperly trusted by some PHP libraries and applications).
Fixed bug #72523 (dtrace issue with reflection (failed test)).
Fixed bug #72508 (strange references after recursive function call and "switch" statement).
Fixed bug #72441 (Segmentation fault: RFC list_keys).
Fixed bug #72395 (list() regression).
Fixed bug #72373 (TypeError after Generator function w/declared return type finishes).
Fixed bug #69489 (tempnam() should raise notice if falling back to temp dir).
Fixed UTF-8 and long path support on Windows.
Fixed bug #53432 (Assignment via string index access on an empty string converts to array).
Fixed bug #62210 (Exceptions can leak temporary variables).
Fixed bug #62814 (It is possible to stiffen child class members visibility).
Fixed bug #69989 (Generators don't participate in cycle GC).
Fixed bug #70228 (Memleak if return in finally block).
Fixed bug #71266 (Missing separation of properties HT in foreach etc).
Fixed bug #71604 (Aborted Generators continue after nested finally).
Fixed bug #71572 (String offset assignment from an empty string inserts null byte).
Fixed bug #71897 (ASCII 0x7F Delete control character permitted in identifiers).
Fixed bug #72188 (Nested try/finally blocks losing return value).
Fixed bug #72213 (Finally leaks on nested exceptions).
Fixed bug #47517 (php-cgi.exe missing UAC manifest).
Change statement and fcall extension handlers to accept frame.
Number operators taking numeric strings now emit E_NOTICEs or E_WARNINGs when given malformed numeric strings.
(int), intval() where $base is 10 or unspecified, settype(), decbin(), decoct(), dechex(), integer operators and other conversions now always respect scientific notation in numeric strings.
Raise a compile-time warning on octal escape sequence overflow.

Apache2handler:

Enable per-module logging in Apache 2.4+.

BCmath:

Fix bug #73190 (memcpy negative parameter _bc_new_num_ex).

Bz2:

Fixed bug #72837 (integer overflow in bzdecompress caused heap corruption).
Fixed bug #72613 (Inadequate error handling in bzread()).

Calendar:

Fix integer overflows (Joshua Rogers)
Fixed bug #67976 (cal_days_month() fails for final month of the French calendar).
Fixed bug #71894 (AddressSanitizer: global-buffer-overflow in zif_cal_from_jd).

CLI Server:

Fixed bug #73360 (Unable to work in root with unicode chars).
Fixed bug #71276 (Built-in webserver does not send Date header).

COM:

Fixed bug #73126 (Cannot pass parameter 1 by reference).
Fixed bug #69579 (Invalid free in extension trait).
Fixed bug #72922 (COM called from PHP does not return out parameters).
Fixed bug #72569 (DOTNET/COM array parameters broke in PHP7).
Fixed bug #72498 (variant_date_from_timestamp null dereference).

Curl:

Implement support for handling HTTP/2 Server Push.
Add curl_multi_errno(), curl_share_errno() and curl_share_strerror() functions.
Fixed bug #72674 (Heap overflow in curl_escape).
Fixed bug #72541 (size_t overflow lead to heap corruption). (Stas).
Fixed bug #71709 (curl_setopt segfault with empty CURLOPT_HTTPHEADER).
Fixed bug #71929 (CURLINFO_CERTINFO data parsing error).

Date:

Fixed bug #69587 (DateInterval properties and isset).
Fixed bug #73426 (createFromFormat with 'z' format char results in incorrect time).
Fixed bug #45554 (Inconsistent behavior of the u format char).
Fixed bug #48225 (DateTime parser doesn't set microseconds for "now").
Fixed bug #52514 (microseconds are missing in DateTime class).
Fixed bug #52519 (microseconds in DateInterval are missing).
Fixed bug #60089 (DateTime::createFromFormat() U after u nukes microtime).
Fixed bug #64887 (Allow DateTime modification with subsecond items).
Fixed bug #68506 (General DateTime improvments needed for microseconds to become useful).
Fixed bug #73109 (timelib_meridian doesn't parse dots correctly).
Fixed bug #73247 (DateTime constructor does not initialise microseconds property).
Fixed bug #73147 (Use After Free in PHP7 unserialize()).
Fixed bug #73189 (Memcpy negative size parameter php_resolve_path).
Fixed bug #66836 (DateTime::createFromFormat 'U' with pre 1970 dates fails parsing).
Invalid serialization data for a DateTime or DatePeriod object will now throw an instance of Error from __wakeup() or __set_state() instead of resulting in a fatal error.
Timezone initialization failure from serialized data will now throw an instance of Error from __wakeup() or __set_state() instead of resulting in a fatal error.
Export date_get_interface_ce() for extension use.
Fixed bug #63740 (strtotime seems to use both sunday and monday as start of week).

Dba:

Fixed bug #70825 (Cannot fetch multiple values with group in ini file).
Data modification functions (e.g.: dba_insert()) now throw an instance of Error instead of triggering a catchable fatal error if the key is does not contain exactly two elements.

DOM:

Fixed bug #73150 (missing NULL check in dom_document_save_html).
Fixed bug #66502 (DOM document dangling reference).
Invalid schema or RelaxNG validation contexts will throw an instance of Error instead of resulting in a fatal error.
Attempting to register a node class that does not extend the appropriate base class will now throw an instance of Error instead of resulting in a fatal error.
Attempting to read an invalid or write to a readonly property will throw an instance of Error instead of resulting in a fatal error.

DTrace:

Disabled PHP call tracing by default (it makes significant overhead). This may be enabled again using envirionment variable USE_ZEND_DTRACE=1.

EXIF:

Fixed bug #72735 (Samsung picture thumb not read (zero size)).
Fixed bug #72627 (Memory Leakage In exif_process_IFD_in_TIFF).
Fixed bug #72603 (Out of bound read in exif_process_IFD_in_MAKERNOTE).
Fixed bug #72618 (NULL Pointer Dereference in exif_process_user_comment).

Filter:

Fixed bug #72972 (Bad filter for the flags FILTER_FLAG_NO_RES_RANGE and FILTER_FLAG_NO_PRIV_RANGE).
Fixed bug #73054 (default option ignored when object passed to int filter).
Fixed bug #71745 (FILTER_FLAG_NO_RES_RANGE does not cover whole 127.0.0.0/8 range).

FPM:

Fixed bug #72575 (using --allow-to-run-as-root should ignore missing user).

FTP:

Fixed bug #70195 (Cannot upload file using ftp_put to FTPES with require_ssl_reuse).
Implemented FR #55651 (Option to ignore the returned FTP PASV address).

GD:

Fixed bug #73213 (Integer overflow in imageline() with antialiasing).
Fixed bug #73272 (imagescale() is not affected by, but affects imagesetinterpolation()).
Fixed bug #73279 (Integer overflow in gdImageScaleBilinearPalette()).
Fixed bug #73280 (Stack Buffer Overflow in GD dynamicGetbuf).
Fixed bug #50194 (imagettftext broken on transparent background w/o alphablending).
Fixed bug #73003 (Integer Overflow in gdImageWebpCtx of gd_webp.c).
Fixed bug #53504 (imagettfbbox gives incorrect values for bounding box).
Fixed bug #73157 (imagegd2() ignores 3rd param if 4 are given).
Fixed bug #73155 (imagegd2() writes wrong chunk sizes on boundaries).
Fixed bug #73159 (imagegd2(): unrecognized formats may result in corrupted files).
Fixed bug #73161 (imagecreatefromgd2() may leak memory).
Fixed bug #67325 (imagetruecolortopalette: white is duplicated in palette).
Fixed bug #66005 (imagecopy does not support 1bit transparency on truecolor images).
Fixed bug #72913 (imagecopy() loses single-color transparency on palette images).
Fixed bug #68716 (possible resource leaks in _php_image_convert()).
Fixed bug #72709 (imagesetstyle() causes OOB read for empty $styles).
Fixed bug #72697 (select_colors write out-of-bounds).
Fixed bug #72730 (imagegammacorrect allows arbitrary write access).
Fixed bug #72596 (imagetypes function won't advertise WEBP support).
Fixed bug #72604 (imagearc() ignores thickness for full arcs).
Fixed bug #70315 (500 Server Error but page is fully rendered).
Fixed bug #43828 (broken transparency of imagearc for truecolor in blendingmode).
Fixed bug #72512 (gdImageTrueColorToPaletteBody allows arbitrary write/read access).
Fixed bug #72519 (imagegif/output out-of-bounds access).
Fixed bug #72558 (Integer overflow error within _gdContributionsAlloc()).
Fixed bug #72482 (Ilegal write/read access caused by gdImageAALine overflow).
Fixed bug #72494 (imagecropauto out-of-bounds access).
Fixed bug #72404 (imagecreatefromjpeg fails on selfie).
Fixed bug #43475 (Thick styled lines have scrambled patterns).
Fixed bug #53640 (XBM images require width to be multiple of 8).
Fixed bug #64641 (imagefilledpolygon doesn't draw horizontal line).

Hash:

Added SHA3 fixed mode algorithms (224, 256, 384, and 512 bit).
Added SHA512/256 and SHA512/224 algorithms.

iconv:

Fixed bug #72320 (iconv_substr returns false for empty strings).

IMAP:

Fixed bug #73418 (Integer Overflow in "_php_imap_mail" leads to crash).
An email address longer than 16385 bytes will throw an instance of Error instead of resulting in a fatal error.

Interbase:

Fixed bug #73512 (Fails to find firebird headers as don't use fb_config output).

Intl:

Fixed bug #73007 (add locale length check).
Fixed bug #73218 (add mitigation for ICU int overflow).
Fixed bug #65732 (grapheme_*() is not Unicode compliant on CR LF sequence).
Fixed bug #73007 (add locale length check).
Fixed bug #72639 (Segfault when instantiating class that extends IntlCalendar and adds a property).
Fixed bug #72658 (Locale::lookup() / locale_lookup() hangs if no match found).
Partially fixed #72506 (idn_to_ascii for UTS #46 incorrect for long domain names).
Fixed bug #72533 (locale_accept_from_http out-of-bounds access).
Failure to call the parent constructor in a class extending Collator before invoking the parent methods will throw an instance of Error instead of resulting in a recoverable fatal error.
Cloning a Transliterator object may will now throw an instance of Error instead of resulting in a fatal error if cloning the internal transliterator fails.
Added IntlTimeZone::getWindowsID() and IntlTimeZone::getIDForWindowsID().
Fixed bug #69374 (IntlDateFormatter formatObject returns wrong utf8 value).
Fixed bug #69398 (IntlDateFormatter formatObject returns wrong value when time style is NONE).

JSON:

Introduced encoder struct instead of global which fixes bugs #66025 and #73254 related to pretty print indentation.
Fixed bug #73113 (Segfault with throwing JsonSerializable).
Implemented earlier return when json_encode fails, fixes bugs #68992 (Stacking exceptions thrown by JsonSerializable) and #70275 (On recursion error, json_encode can eat up all system memory).
Implemented FR #46600 ("_empty_" key in objects).
Exported JSON parser API including json_parser_method that can be used for implementing custom logic when parsing JSON.
Escaped U+2028 and U+2029 when JSON_UNESCAPED_UNICODE is supplied as json_encode options and added JSON_UNESCAPED_LINE_TERMINATORS to restore the previous behaviour.

LDAP:

Providing an unknown modification type to ldap_batch_modify() will now throw an instance of Error instead of resulting in a fatal error.

Mbstring:

Fixed bug #73532 (Null pointer dereference in mb_eregi).
Fixed bug #66964 (mb_convert_variables() cannot detect recursion) (Yasuo)
Fixed bug #72992 (mbstring.internal_encoding doesn't inherit default_charset).
Fixed bug #66797 (mb_substr only takes 32-bit signed integer).
Fixed bug #72711 (`mb_ereg` does not clear the `$regs` parameter on failure).
Fixed bug #72691 (mb_ereg_search raises a warning if a match zero-width).
Fixed bug #72693 (mb_ereg_search increments search position when a match zero-width).
Fixed bug #72694 (mb_ereg_search_setpos does not accept a string's last position).
Fixed bug #72710 (`mb_ereg` causes buffer overflow on regexp compile error).
Deprecated mb_ereg_replace() eval option.
Fixed bug #69151 (mb_ereg should reject ill-formed byte sequence).
Fixed bug #72405 (mb_ereg_replace - mbc_to_code (oniguruma) - oob read access).
Fixed bug #72399 (Use-After-Free in MBString (search_re)).
mb_ereg() and mb_eregi() will now throw an instance of ParseError if an invalid PHP expression is provided and the 'e' option is used.

Mcrypt:

Deprecated ext/mcrypt.
Fixed bug #72782 (Heap Overflow due to integer overflows).
Fixed bug #72551, bug #72552 (In correct casting from size_t to int lead to heap overflow in mdecrypt_generic).
mcrypt_encrypt() and mcrypt_decrypt() will throw an instance of Error instead of resulting in a fatal error if mcrypt cannot be initialized.

Mysqli:

Attempting to read an invalid or write to a readonly property will throw an instance of Error instead of resulting in a fatal error.

Mysqlnd:

Fixed bug #64526 (Add missing mysqlnd.* parameters to php.ini-*).
Fixed bug #71863 (Segfault when EXPLAIN with "Unknown column" error when using MariaDB).
Fixed bug #72701 (mysqli_get_host_info() wrong output).

OCI8:

Fixed bug #71148 (Bind reference overwritten on PHP 7).
Fixed invalid handle error with Implicit Result Sets.
Fixed bug #72524 (Binding null values triggers ORA-24816 error).

ODBC:

Fixed bug #73448 (odbc_errormsg returns trash, always 513 bytes).

Opcache:

Fixed bug #73583 (Segfaults when conditionally declared class and function have the same name).
Fixed bug #69090 (check cached files permissions)
Fixed bug #72982 (Memory leak in zend_accel_blacklist_update_regexp() function).
Fixed bug #72949 (Typo in opcache error message).
Fixed bug #72762 (Infinite loop while parsing a file with opcache enabled).
Fixed bug #72590 (Opcache restart with kill_all_lockers does not work).

OpenSSL:

Fixed bug #73478 (openssl_pkey_new() generates wrong pub/priv keys with Diffie Hellman).
Fixed bug #73276 (crash in openssl_random_pseudo_bytes function).
Fixed bug #73072 (Invalid path SNI_server_certs causes segfault).
Fixed bug #72360 (ext/openssl build failure with OpenSSL 1.1.0).
Bumped a minimal version to 1.0.1.
Dropped support for SSL2.
Implemented FR #61204 (Add elliptic curve support for OpenSSL).
Implemented FR #67304 (Added AEAD support [CCM and GCM modes] to openssl_encrypt and openssl_decrypt).
Implemented error storing to the global queue and cleaning up the OpenSSL error queue (resolves bugs #68276 and #69882).

Pcntl:

Implemented asynchronous signal handling without TICKS.
Added pcntl_signal_get_handler() that returns the current signal handler for a particular signal. Addresses FR #72409.
Add signinfo to pcntl_signal() handler args (Bishop Bettini, David Walker)

PCRE:

Fixed bug #73483 (Segmentation fault on pcre_replace_callback).
Fixed bug #73612 (preg_*() may leak memory).
Fixed bug #73392 (A use-after-free in zend allocator management).
Fixed bug #73121 (Bundled PCRE doesn't compile because JIT isn't supported on s390).
Fixed bug #72688 (preg_match missing group names in matches).
Downgraded to PCRE 8.38.
Fixed bug #72476 (Memleak in jit_stack).
Fixed bug #72463 (mail fails with invalid argument).
Upgraded to PCRE 8.39.

PDO:

Fixed bug #72788 (Invalid memory access when using persistent PDO connection).
Fixed bug #72791 (Memory leak in PDO persistent connection handling).
Fixed bug #60665 (call to empty() on NULL result using PDO::FETCH_LAZY returns false).

PDO_DBlib:

Fixed bug #72414 (Never quote values as raw binary data).
Allow PDO::setAttribute() to set query timeouts.
Handle SQLDECIMAL/SQLNUMERIC types, which are used by later TDS versions.
Add common PDO test suite.
Free error and message strings when cleaning up PDO instances.
Fixed bug #67130 (PDOStatement::nextRowset() should succeed when all rows in current rowset haven't been fetched).
Ignore potentially misleading dberr values.
Implemented stringify 'uniqueidentifier' fields.

PDO_Firebird:

Fixed bug #73087, #61183, #71494 (Memory corruption in bindParam).
Fixed bug #60052 (Integer returned as a 64bit integer on X86_64).

PDO_pgsql:

Fixed bug #70313 (PDO statement fails to throw exception).
Fixed bug #72570 (Segmentation fault when binding parameters on a query without placeholders).
Implemented FR #72633 (Postgres PDO lastInsertId() should work without specifying a sequence).

Phar:

Fixed bug #72928 (Out of bound when verify signature of zip phar in phar_parse_zipfile).
Fixed bug #73035 (Out of bound when verify signature of tar phar in phar_parse_tarfile).

phpdbg:

Added generator command for inspection of currently alive generators.

Postgres:

Fixed bug #73498 (Incorrect SQL generated for pg_copy_to()).
Implemented FR #31021 (pg_last_notice() is needed to get all notice messages).
Implemented FR #48532 (Allow pg_fetch_all() to index numerically).

Readline:

Fixed bug #72538 (readline_redisplay crashes php).

Reflection:

Undo backwards compatiblity break in ReflectionType->__toString() and deprecate via documentation instead.
Reverted prepending for class names.
Implemented request #38992 (invoke() and invokeArgs() static method calls should match). (cmb).
Add ReflectionNamedType::getName(). This method should be used instead of ReflectionType::__toString()
Prepend for class names and ? for nullable types returned from ReflectionType::__toString().
Fixed bug #72661 (ReflectionType::__toString crashes with iterable).
Fixed bug #72222 (ReflectionClass::export doesn't handle array constants).
Failure to retrieve a reflection object or retrieve an object property will now throw an instance of Error instead of resulting in a fatal error.
Fix #72209 (ReflectionProperty::getValue() doesn't fail if object doesn't match type).

Session:

Fixed bug #73273 (session_unset() empties values from all variables in which is $_session stored).
Fixed bug #73100 (session_destroy null dereference in ps_files_path_create).
Fixed bug #68015 (Session does not report invalid uid for files save handler).
Fixed bug #72940 (SID always return "name=ID", even if session cookie exist).
Implemented session_gc() (Yasuo) https://wiki.php.net/rfc/session-create-id
Implemented session_create_id() (Yasuo) https://wiki.php.net/rfc/session-gc
Implemented RFC: Session ID without hashing. (Yasuo) https://wiki.php.net/rfc/session-id-without-hashing
Fixed bug #72531 (ps_files_cleanup_dir Buffer overflow).
Custom session handlers that do not return strings for session IDs will now throw an instance of Error instead of resulting in a fatal error when a function is called that must generate a session ID.
An invalid setting for session.hash_function will throw an instance of Error instead of resulting in a fatal error when a session ID is created.
Fixed bug #72562 (Use After Free in unserialize() with Unexpected Session Deserialization).
Improved fix for bug #68063 (Empty session IDs do still start sessions).
Fixed bug #71038 (session_start() returns TRUE on failure). Session save handlers must return 'string' always for successful read. i.e. Non-existing session read must return empty string. PHP 7.0 is made not to tolerate buggy return value.
Fixed bug #71394 (session_regenerate_id() must close opened session on errors).

SimpleXML:

Fixed bug #73293 (NULL pointer dereference in SimpleXMLElement::asXML()).
Fixed bug #72971 (SimpleXML isset/unset do not respect namespace).
Fixed bug #72957 (Null coalescing operator doesn't behave as expected with SimpleXMLElement).
Fixed bug #72588 (Using global var doesn't work while accessing SimpleXML element).
Creating an unnamed or duplicate attribute will throw an instance of Error instead of resulting in a fatal error.

SNMP:

Fixed bug #72708 (php_snmp_parse_oid integer overflow in memory allocation).
Fixed bug #72479 (Use After Free Vulnerability in SNMP with GC and unserialize()).

Soap:

Fixed bug #73538 (SoapClient::__setSoapHeaders doesn't overwrite SOAP headers).
Fixed bug #73452 (Segfault (Regression for #69152)).
Fixed bug #73037 (SoapServer reports Bad Request when gzipped).
Fixed bug #73237 (Nested object in "any" element overwrites other fields).
Fixed bug #69137 (Peer verification fails when using a proxy with SoapClient) (Keith Smiley)
Fixed bug #71711 (Soap Server Member variables reference bug).
Fixed bug #71996 (Using references in arrays doesn't work like expected).

SPL:

Fixed bug #73423 (Reproducible crash with GDB backtrace).
Fixed bug #72888 (Segfault on clone on splFileObject).
Fixed bug #73029 (Missing type check when unserializing SplArray).
Fixed bug #72646 (SplFileObject::getCsvControl does not return the escape character).
Fixed bug #72684 (AppendIterator segfault with closed generator).
Attempting to clone an SplDirectory object will throw an instance of Error instead of resulting in a fatal error.
Calling ArrayIterator::append() when iterating over an object will throw an instance of Error instead of resulting in a fatal error.
Fixed bug #55701 (GlobIterator throws LogicException).

SQLite3:

Update to SQLite 3.15.1.
Fixed bug #73530 (Unsetting result set may reset other result set).
Fixed bug #73333 (2147483647 is fetched as string).
Fixed bug #72668 (Spurious warning when exception is thrown in user defined function).
Implemented FR #72653 (SQLite should allow opening with empty filename).
Fixed bug #70628 (Clearing bindings on an SQLite3 statement doesn't work).
Implemented FR #71159 (Upgraded bundled SQLite lib to 3.9.2).

Standard:

Fixed bug #73297 (HTTP stream wrapper should ignore HTTP 100 Continue).
Fixed bug #73303 (Scope not inherited by eval in assert()).
Fixed bug #73192 (parse_url return wrong hostname).
Fixed bug #73203 (passing additional_parameters causes mail to fail).
Fixed bug #73203 (passing additional_parameters causes mail to fail).
Fixed bug #72920 (Accessing a private constant using constant() creates an exception AND warning).
Fixed bug #65550 (get_browser() incorrectly parses entries with "+" sign).
Fixed bug #71882 (Negative ftruncate() on php://memory exhausts memory).
Fixed bug #55451 (substr_compare NULL length interpreted as 0).
Fixed bug #72278 (getimagesize returning FALSE on valid jpg).
Fixed bug #61967 (unset array item in array_walk_recursive cause inconsistent array).
Fixed bug #62607 (array_walk_recursive move internal pointer).
Fixed bug #69068 (Exchanging array during array_walk -> memory errors).
Fixed bug #70713 (Use After Free Vulnerability in array_walk()/ array_walk_recursive()).
Fixed bug #72622 (array_walk + array_replace_recursive create references from nothing).
Fixed bug #72330 (CSV fields incorrectly split if escape char followed by UTF chars).
Implemented RFC: More precise float values.
array_multisort now uses zend_sort instead zend_qsort.
Fixed bug #72505 (readfile() mangles files larger than 2G).
assert() will throw a ParseError when evaluating a string given as the first argument if the PHP code is invalid instead of resulting in a catchable fatal error.
Calling forward_static_call() outside of a class scope will now throw an instance of Error instead of resulting in a fatal error.
Added is_iterable() function.
Fixed bug #72306 (Heap overflow through proc_open and $env parameter).
Fixed bug #71100 (long2ip() doesn't accept integers in strict mode).
Implemented FR #55716 (Add an option to pass a custom stream context to get_headers()).
Additional validation for parse_url() for login/pass components).
Implemented FR #69359 (Provide a way to fetch the current environment variables).
unpack() function accepts an additional optional argument $offset.
Implemented #51879 stream context socket option tcp_nodelay (Joe)

Streams:

Fixed bug #73586 (php_user_filter::$stream is not set to the stream the filter is working on).
Fixed bug #72853 (stream_set_blocking doesn't work).
Fixed bug #72743 (Out-of-bound read in php_stream_filter_create).
Implemented FR #27814 (Multiple small packets send for HTTP request).
Fixed bug #72764 (ftps:// opendir wrapper data channel encryption fails with IIS FTP 7.5, 8.5).
Fixed bug #72810 (Missing SKIP_ONLINE_TESTS checks).
Fixed bug #41021 (Problems with the ftps wrapper).
Fixed bug #54431 (opendir() does not work with ftps:// wrapper).
Fixed bug #72667 (opendir() with ftp:// attempts to open data stream for non-existent directories).
Fixed bug #72771 (ftps:// wrapper is vulnerable to protocol downgrade attack).
Fixed bug #72534 (stream_socket_get_name crashes).
Fixed bug #72439 (Stream socket with remote address leads to a segmentation fault).

sysvshm:

Fixed bug #72858 (shm_attach null dereference).

Tidy:

Implemented support for libtidy 5.0.0 and above.
Creating a tidyNode manually will now throw an instance of Error instead of resulting in a fatal error.

Wddx:

Fixed bug #73331 (NULL Pointer Dereference in WDDX Packet Deserialization with PDORow).
Fixed bug #72142 (WDDX Packet Injection Vulnerability in wddx_serialize_value()).
Fixed bug #72749 (wddx_deserialize allows illegal memory access) (Stas)
Fixed bug #72750 (wddx_deserialize null dereference).
Fixed bug #72790 (wddx_deserialize null dereference with invalid xml).
Fixed bug #72799 (wddx_deserialize null dereference in php_wddx_pop_element).
Fixed bug #72860 (wddx_deserialize use-after-free).
Fixed bug #73065 (Out-Of-Bounds Read in php_wddx_push_element).
Fixed bug #72564 (boolean always deserialized as "true") (Remi)
A circular reference when serializing will now throw an instance of Error instead of resulting in a fatal error.

XML:

Fixed bug #72135 (malformed XML causes fault) (edgarsandi)
Fixed bug #72714 (_xml_startElementHandler() segmentation fault).
Fixed bug #72085 (SEGV on unknown address zif_xml_parse).

XMLRPC:

Fixed bug #72647 (xmlrpc_encode() unexpected output after referencing array elements).
Fixed bug #72606 (heap-buffer-overflow (write) simplestring_addn simplestring.c).
A circular reference when serializing will now throw an instance of Error instead of resulting in a fatal error.

Zip:

Fixed bug #68302 (impossible to compile php with zip support).
Fixed bug #72660 (NULL Pointer dereference in zend_virtual_cwd).
Fixed bug #72520 (Stack-based buffer overflow vulnerability in php_stream_zip_opener).
ZipArchive::addGlob() will throw an instance of Error instead of resulting in a fatal error if glob support is not available.

[close]

http://www.php.net/
Titel: Ende des aktiven Supports für PHP 5
Beitrag von: SiLæncer am 01 Januar, 2017, 18:41
PHP 5.6 erhält ab sofort nur noch Sicherheitspatches, ältere PHP-5-Versionen sind komplett aus dem Support gelaufen. Trotzdem wird das aktuelle PHP 7 noch recht wenig eingesetzt.

PHP 5 hat zum 1. Januar 2017 das Ende der aktiven Supportphase erreicht: Die anstehende Version 5.6.30 wird das letzte reguläre PHP-5-Release sein. Eine Weiterentwicklung von PHP 5 findet ab sofort nicht mehr statt. Die Entwickler versprechen allerdings, kritische Sicherheitslöcher in PHP 5.6 noch bis Ende 2019 zu stopfen.

Alle älteren PHP-5-Versionen sind bereits komplett aus dem Support gelaufen und erhalten auch keine Sicherheitspatches mehr. Nutzer älterer PHP-5-Versionen sollten daher dringend auf PHP 5.6 upgraden – oder gleich auf die die im Dezember 2015 veröffentlichte aktuelle PHP-Version 7 springen. Für Letzteres spricht, dass erste PHP-Frameworks bereits das Ende der PHP-5- Unterstützung in Aussicht stellen.

Noch viel PHP 5 im Einsatz

Die Web-Statistiker von W3tech finden PHP 7 lediglich auf 2,5% der untersuchten Websites, die PHP nutzen. PHP 5.6 ist auf 21% der PHP-Sites im Einsatz, der Rest verteilt sich auf ältere, nicht mehr gepflegte PHP-Versionen. Laut W3tech nutzen über 80% der 10 Millionen populärsten Websites PHP.

Ein etwas freundlicheres Bild zeichnet die Statistik von packagist.org, dem Standard-Repository des PHP-Package-Managers Compose: Hier kamen PHP 7.0 und 7.1 im November 2016 zusammen immerhin auf gut 36% der Zugriffe, PHP 5.6 auf 37%. Aber auch bei packagist.org erfolgen ein Viertel der Zugriffe mit veralteten PHP-Versionen.

Quelle : www.heise.de
Titel: PHP 7.1.1
Beitrag von: SiLæncer am 19 Januar, 2017, 13:45
Changelog

Version 7.1.1
19 Jan 2017

    Core
        Fixed bug #73792 (invalid foreach loop hangs script).
        Fixed bug #73686 (Adding settype()ed values to ArrayObject results in references).
        Fixed bug #73663 ("Invalid opcode 65/16/8" occurs with a variable created with list()).
        Fixed bug #73727 (ZEND_MM_BITSET_LEN is "undefined symbol" in zend_bitset.h).
        Fixed bug #73753 (unserialized array pointer not advancing).
        Fixed bug #73783 (SIG_IGN doesn't work when Zend Signals is enabled).
        Fixed bug #73825 (Heap out of bounds read on unserialize in finish_nested_data()).
        Fixed bug #73831 (NULL Pointer Dereference while unserialize php object).
        Fixed bug #73832 (Use of uninitialized memory in unserialize()).
    CLI
        Fixed bug #72555 (CLI output(japanese) on Windows).
    COM
        Fixed bug #73679 (DOTNET read access violation using invalid codepage).
    DOM
        Fixed bug #67474 (getElementsByTagNameNS filter on default ns).
    EXIF
        Fixed bug #73737 (FPE when parsing a tag format).
    GD
        Fixed bug #73869 (Signed Integer Overflow gd_io.c).
        Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()).
    mbstring
        Fixed bug #73646 (mb_ereg_search_init null pointer dereference).
    MySQLi
        Fixed bug #73462 (Persistent connections don't set $connect_errno).
    mysqlnd
        Optimized handling of BIT fields - less memory copies and lower memory usage.
        Fixed bug #73800 (sporadic segfault with MYSQLI_OPT_INT_AND_FLOAT_NATIVE).
    opcache
        Fixed bug #73789 (Strange behavior of class constants in switch/case block).
        Fixed bug #73746 (Method that returns string returns UNKNOWN:0 instead).
        Fixed bug #73654 (Segmentation fault in zend_call_function).
        Fixed bug #73668 ("SIGFPE Arithmetic exception" in opcache when divide by minus 1).
        Fixed bug #73847 (Recursion when a variable is redefined as array).
    PDO Firebird
        Fixed bug #72931 (PDO_FIREBIRD with Firebird 3.0 not work on returning statement).
    phpdbg
        Fixed bug #73794 (Crash (out of memory) when using run and # command separator).
        Fixed bug #73704 (phpdbg shows the wrong line in files with shebang).
    SQLite3
        Reverted fix for Fixed bug #73530 (Unsetting result set may reset other result set).
    Standard
        Fixed bug #73594 (dns_get_record does not populate $additional out parameter).
        Fixed bug #70213 (Unserialize context shared on double class lookup).
        Fixed bug #73154 (serialize object with __sleep function crash).
        Fixed bug #70490 (get_browser function is very slow).
        Fixed bug #73265 (Loading browscap.ini at startup causes high memory usage).
        (add subject to mail log).
        Fixed bug #31875 (get_defined_functions additional param to exclude disabled functions).
    zlib
        Fixed bug #73373 (deflate_add does not verify that output was not truncated).

[close]

http://www.php.net/
Titel: PHP 7.1.3
Beitrag von: SiLæncer am 16 März, 2017, 13:46
Changelog

Core:
Fixed bug #73989 (PHP 7.1 Segfaults within Symfony test suite).
Fixed bug #74084 (Out of bound read - zend_mm_alloc_small).
Fixed bug #73807 (Performance problem with processing large post request).
Fixed bug #73998 (array_key_exists fails on arrays created by get_object_vars).
Fixed bug #73954 (NAN check fails on Alpine Linux with musl).
Fixed bug #74039 (is_infinite(-INF) returns false).
Fixed bug #73677 (Generating phar.phar core dump with gcc ASAN enabled build).
Apache:
Fixed bug #61471 (Incomplete POST does not timeout but is passed to PHP).
Date:
Fixed bug #72719 (Relative datetime format ignores weekday on sundays only).
Fixed bug #73294 (DateTime wrong when date string is negative).
Fixed bug #73489 (wrong timestamp when call setTimeZone multi times with UTC offset).
Fixed bug #73858 (first/last day of' flag is not being reset).
Fixed bug #73942 ($date->modify('Friday this week') doesn't return a Friday if $date is a Sunday).
Fixed bug #74057 (wrong day when using "this week" in strtotime).
FPM:
Fixed bug #69860 (php-fpm process accounting is broken with keepalive).
Hash:
Fixed bug #73127 (gost-crypto hash incorrect if input data contains long 0xFF sequence).
GD:
Fixed bug #74031 (ReflectionFunction for imagepng is missing last two parameters).
Mysqlnd:
Fixed bug #74021 (fetch_array broken data. Data more then MEDIUMBLOB).
Opcache:
Fixed bug #74152 (if statement says true to a null variable).
Fixed bug #74019 (Segfault with list).
OpenSSL:
Fixed bug #74022 (PHP Fast CGI crashes when reading from a pfx file).
Standard:
Fixed bug #74148 (ReflectionFunction incorrectly reports the number of arguments).
Fixed bug #74005 (mail.add_x_header causes RFC-breaking lone line feed).
Fixed bug #73118 (is_callable callable name reports misleading value for anonymous classes).
Fixed bug #74105 (PHP on Linux should use /dev/urandom when getrandom is not available).
Streams:
Fixed bug #73496 (Invalid memory access in zend_inline_hash_func).
Fixed bug #74090 (stream_get_contents maxlength>-1 returns empty string).

[close]

http://www.php.net/
Titel: PHP 7.1.4
Beitrag von: SiLæncer am 12 April, 2017, 20:15
Changelog

Core:
Fixed bug #74149 (static embed SAPI linkage error).
Fixed bug #73370 (falsely exits with "Out of Memory" when using
USE_ZEND_ALLOC=0).
Fixed bug #73960 (Leak with instance method calling static method with
referenced return).
Fixed bug #69676 (Resolution of self::FOO in class constants not correct).
Fixed bug #74265 (Build problems after 7.0.17 release: undefined reference
to `isfinite').
Fixed bug #74302 (yield fromLABEL is over-greedy).
Apache:
Reverted patch for bug #61471, fixes bug #74318.
Date:
Fixed bug #72096 (Swatch time value incorrect for dates before 1970).
DOM:
Fixed bug #74004 (LIBXML_NOWARNING flag ingnored on loadHTML*).
iconv:
Fixed bug #74230 (iconv fails to fail on surrogates).
Opcache:
Fixed bug #74250 (OPcache compilation performance regression in PHP 5.6/7 with huge classes).
OpenSSL:
Fixed bug #72333 (fwrite() on non-blocking SSL sockets doesn't work).
PDO MySQL:
Fixed bug #71003 (Expose MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT to PDO interface).
SPL:
Fixed bug #74058 (ArrayObject can not notice changes).
Sqlite:
Implemented FR #74217 (Allow creation of deterministic sqlite functions).
Streams:
Fixed bug #74216 (Correctly fail on invalid IP address ports).
Zlib:
Fixed bug #74240 (deflate_add can allocate too much memory).

[close]

http://www.php.net/
Titel: PHP 7.1.20
Beitrag von: SiLæncer am 07 Juni, 2017, 12:35
Changelog

Core:
Fixed bug #74600 (crash (SIGSEGV) in _zend_hash_add_or_update_i).
(Laruence)
Fixed bug #74546 (SIGILL in ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_CONST).
(Laruence)
intl:
Fixed bug #74468 (wrong reflection on Collator::sortWithSortKeys)(villfa)
MySQLi:
Fixed bug #74547 (mysqli::change_user() doesn't accept null as $database
argument w/strict_types)(Anatol)
Opcache:
Fixed bug #74596 (SIGSEGV with opcache.revalidate_path enabled)(Laruence)
phar:
Fixed bug #51918 (Phar::webPhar() does not handle requests sent through PUT
and DELETE method)(Christian Weiske)
Standard:
Fixed bug #74510 (win32/sendmail.c anchors CC header but not BCC).
(Damian Wadley, Anatol)
xmlreader:
Fixed bug #74457 (Wrong reflection on XMLReader::expand)(villfa)

[close]

http://www.php.net/
Titel: PHP 7.1.6
Beitrag von: SiLæncer am 12 Juni, 2017, 13:19
Changelog

Core:
Fixed bug #74600 (crash (SIGSEGV) in _zend_hash_add_or_update_i).
Fixed bug #74546 (SIGILL in ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_CONST).
Fixed bug #74589 (__DIR__ wrong for unicode character).
intl:
Fixed bug #74468 (wrong reflection on Collator::sortWithSortKeys).
MySQLi:
Fixed bug #74547 (mysqli::change_user() doesn't accept null as $database argument w/strict_types).
Opcache:
Fixed bug #74596 (SIGSEGV with opcache.revalidate_path enabled).
phar:
Fixed bug #51918 (Phar::webPhar() does not handle requests sent through PUT and DELETE method).
Readline:
Fixed bug #74490 (readline() moves the cursor to the beginning of the line).
Standard:
Fixed bug #74510 (win32/sendmail.c anchors CC header but not BCC).
xmlreader:
Fixed bug #74457 (Wrong reflection on XMLReader::expand).

[close]

http://www.php.net/
Titel: PHP 7.1.7
Beitrag von: SiLæncer am 07 Juli, 2017, 04:40
Changelog

Core:

    Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly parsed).
    Fixed bug #74658 (Undefined constants in array properties result in broken properties).
    Fixed misparsing of abstract unix domain socket names.
    Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
    Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in zval_get_type).
    Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from unserialize).
    Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via php_parse_date()).

Date:

    Fixed bug #74639 (implement clone for DatePeriod and DateInterval).

DOM:

    Fixed bug #69373 (References to deleted XPath query results).

GD:

    Fixed bug #74435 (Buffer over-read into uninitialized memory).

Intl:

    Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message).
    Fixed bug #74705 (Wrong reflection on Collator::getSortKey and collator_get_sort_key).

Mbstring:

    Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

OCI8:

    Add TAF callback (PR #2459).

Opcache:

    Fixed bug #74663 (Segfault with opcache.memory_protect and validate_timestamp).
    Revert opcache.enable_cli to default disabled.

OpenSSL:

    Fixed bug #74720 (pkcs7_en/decrypt does not work if \x1a is used in content).
    Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).

PDO_OCI:

    Support Instant Client 12.2 in --with-pdo-oci configure option.

Reflection:

    Fixed bug #74673 (Segfault when cast Reflection object to string with undefined constant).

SPL:

    Fixed bug #74478 (null coalescing operator failing with SplFixedArray).

FTP:

    Fixed bug #74598 (ftp:// wrapper ignores context arg).

PHAR:

    Fixed bug #74386 (Phar::__construct reflection incorrect).

SOAP:

    Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY).

Streams:

    Fixed bug #74556 (stream_socket_get_name() returns '\0').

[close]

http://www.php.net/
Titel: PHP 7.2.0 Beta 1
Beitrag von: SiLæncer am 20 Juli, 2017, 18:15
Whats new :>>

The much anticipated Sodium extension
Opcache improvements
Countable support for DOMNodeList and DOMNamedNodeMap
Improved handling for invalid UTF8 in json_decode()
And many bugfixes

http://www.php.net/
Titel: PHP 7.1.9
Beitrag von: SiLæncer am 31 August, 2017, 12:22
Changelog

Core:
Fixed bug #74947 (Segfault in scanner on INF number).
Fixed bug #74954 (null deref and segfault in zend_generator_resume()).
Fixed bug #74725 (html_errors=1 breaks unhandled exceptions).
Fixed bug #75063 (Main CWD initialized with wrong codepage).
cURL:
Fixed bug #74125 (Fixed finding CURL on systems with multiarch support).
Date:
Fixed bug #75002 (Null Pointer Dereference in timelib_time_clone).
Intl:
Fixed bug #74993 (Wrong reflection on some locale_* functions).
Mbstring:
Fixed bug #71606 (Segmentation fault mb_strcut with HTML-ENTITIES encoding).
cmb)
Fixed bug #62934 (mb_convert_kana() does not convert iteration marks).
Nikita)
Fixed bug #75001 (Wrong reflection on mb_eregi_replace).
MySQLi:
Fixed bug #74968 (PHP crashes when calling mysqli_result::fetch_object with an abstract class).
OCI8:
Expose oci_unregister_taf_callback()
Opcache:
Fixed bug #74980 (Narrowing occurred during type inference).
phar:
Fixed bug #74991 (include_path has a 4096 char limit in some cases).
Reflection:
Fixed bug #74949 (null pointer dereference in _function_string).
Session:
Fixed bug #74892 (Url Rewriting (trans_sid) not working on urls that start with "#").
Fixed bug #74833 (SID constant created with wrong module number).
SimpleXML:
Fixed bug #74950 (nullpointer deref in simplexml_element_getDocNamespaces).
SPL:
Fixed bug #75049 (spl_autoload_unregister can't handle spl_autoload_functions results).
Fixed bug #74669 (Unserialize ArrayIterator broken).
Fixed bug #74977 (Appending AppendIterator leads to segfault).
Fixed bug #75015 (Crash in recursive iterator destructors).
Standard:
Fixed bug #75075 (unpack with X* causes infinity loop).
Fixed bug #74103 (heap-use-after-free when unserializing invalid array size).
Fixed bug #75054 (A Denial of Service Vulnerability was found when performing deserialization).
WDDX:
Fixed bug #73793 (WDDX uses wrong decimal seperator).
XMLRPC:
Fixed bug #74975 (Incorrect xmlrpc serialization for classes with declared properties).

[close]

http://www.php.net/
Titel: PHP 7.2.0 RC 2
Beitrag von: SiLæncer am 22 September, 2017, 13:26
Infos zu dieser Version: http://php.net/archive/2017.php#id2017-09-14-1

http://www.php.net/
Titel: PHP 7.1.10
Beitrag von: SiLæncer am 27 September, 2017, 13:40
Changelog

Core:

Fixed bug #75042 (run-tests.php issues with EXTENSION block).

BCMath:

Fixed bug #44995 (bcpowmod() fails if scale != 0).
Fixed bug #46781 (BC math handles minus zero incorrectly).
Fixed bug #54598 (bcpowmod() may return 1 if modulus is 1).
Fixed bug #75178 (bcpowmod() misbehaves for non-integer base or modulus).

CLI server:

Fixed bug #70470 (Built-in server truncates headers spanning over TCP packets).

CURL:

Fixed bug #75093 (OpenSSL support not detected).

GD:

Fixed bug #75124 (gdImageGrayScale() may produce colors).
Fixed bug #75139 (libgd/gd_interpolation.c:1786: suspicious if ?).

Gettext:

Fixed bug #73730 (textdomain(null) throws in strict mode).

Intl:

Fixed bug #75090 (IntlGregorianCalendar doesn't have constants from parent class).
Fixed bug #75193 (segfault in collator_convert_object_to_string).

PDO_OCI:

Fixed bug #74631 (PDO_PCO with PHP-FPM: OCI environment initialized before PHP-FPM sets it up).

SPL:

Fixed bug #75155 (AppendIterator::append() is broken when appending another AppendIterator).
Fixed bug #75173 (incorrect behavior of AppendIterator::append in foreach loop).

Standard:

Fixed bug #75152 (signed integer overflow in parse_iv).
Fixed bug #75097 (gethostname fails if your host name is 64 chars long).

[close]

http://www.php.net/
Titel: PHP 7.2.0 RC 4
Beitrag von: SiLæncer am 12 Oktober, 2017, 12:36
Changelog

Core
Fixed bug #75220 (Segfault when calling is_callable on parent)
(andrewnester)
Fixed bug #75290 (debug info of Closures of internal functions contain
garbage argument names)(Andrea)
Apache2Handler:
Fixed bug #75311 (error: 'zend_hash_key' has no member named 'arKey' in
apache2handler)(mcarbonneaux)
Date:
Fixed bug #75222 (DateInterval microseconds property always 0)(jhdxr)
Hash:
Fixed Bug #75284 (sha3 is not supported on bigendian machine)(Remi)
Intl:
Fixed bug #75318 (The parameter of UConverter::getAliases() is not
optional)(cmb)
litespeed:
Fixed bug #75248 (Binary directory doesn't get created when building
only litespeed SAPI)(petk)
Fixed bug #75251 (Missing program prefix and suffix)(petk)
OCI8:
Fixed incorrect reference counting(Dmitry, Tianfang Yang)
Opcache
Fixed bug #75255 (Request hangs and not finish)(Dmitry)
PCRE:
Fixed bug #75285 (Broken build when system libpcre don't have jit support).
(Remi)
Sodium:
Added missing bindings for libsodium > 1.0.13(Frank)

[close]

http://www.php.net/
Titel: PHP 7.0.25
Beitrag von: SiLæncer am 26 Oktober, 2017, 13:49
Changelog

Core:

    Fixed bug #75241 (Null pointer dereference in zend_mm_alloc_small()).
    Fixed bug #75236 (infinite loop when printing an error-message).
    Fixed bug #75252 (Incorrect token formatting on two parse errors in one request).
    Fixed bug #75220 (Segfault when calling is_callable on parent).
    Fixed bug #75290 (debug info of Closures of internal functions contain garbage argument names).

Apache2Handler:

    Fixed bug #75311 (error: 'zend_hash_key' has no member named 'arKey' in apache2handler).

Date:

    Fixed bug #75055 (Out-Of-Bounds Read in timelib_meridian()).

Intl:

    Fixed bug #75318 (The parameter of UConverter::getAliases() is not optional).

mcrypt:

    Fixed bug #72535 (arcfour encryption stream filter crashes php).

OCI8:

    Fixed incorrect reference counting.

PCRE:

    Fixed bug #75207 (applied upstream patch for CVE-2016-1283).

litespeed:

    Fixed bug #75248 (Binary directory doesn't get created when building only litespeed SAPI).
    Fixed bug #75251 (Missing program prefix and suffix).

SPL:

    Fixed bug #73629 (SplDoublyLinkedList::setIteratorMode masks intern flags).

[close]

http://www.php.net/
Titel: PHP 7.2.0 RC 5
Beitrag von: SiLæncer am 27 Oktober, 2017, 13:37
Changelog

- Core:
  . Fixed bug #75368 (mmap/munmap trashing on unlucky allocations). (Nikita,
    Dmitry)

- CLI:
  . Fixed bug #75287 (Builtin webserver crash after chdir in a shutdown
    function). (Laruence)

- Date:
  . Fixed bug #75055 (Out-Of-Bounds Read in timelib_meridian()). (Derick)

- Enchant:
  . Fixed bug #53070 (enchant_broker_get_path crashes if no path is set). (jelle
    van der Waa, cmb)
  . Fixed bug #75365 (Enchant still reports version 1.1.0). (cmb)

- Exif:
  . Fixed bug #75301 (Exif extension has built in revision version). (Peter
    Kokot)

- Fileinfo:
  . Upgrade bundled libmagic to 5.31. (Anatol)

- GD:
  . Fixed bug #65148 (imagerotate may alter image dimensions). (cmb)

- Intl:
  . Fixed bug #75378 ([REGRESSION] IntlDateFormatter::parse() does not change
    $position argument). (Laruence)
  . Fixed bug #75317 (UConverter::setDestinationEncoding changes source instead
    of destination). (andrewnester)

- JSON:
  . Fixed bug #68567 (JSON_PARTIAL_OUTPUT_ON_ERROR can result in JSON with null
    key). (Jakub Zelenka)

- OCI8:
  . Fixed valgrind issue. (Tianfang Yang)

- Opcache:
  . Fixed bug (assertion fails with extended info generated). (Laruence)
  . Fixed bug (Phi sources removel). (Laruence)
  . Fixed bug #75370 (Webserver hangs on valid PHP text). (Laruence)
  . Fixed bug #75357 (segfault loading WordPress wp-admin). (Laruence)
  . Fixed bug #75373 (Warning Internal error: wrong size calculation). (Laruence, Dmitry)

- Openssl:
  . Fixed bug #75363 (openssl_x509_parse leaks memory). (Bob)

- PCRE:
  . Fixed bug #75207 (applied upstream patch for CVE-2016-1283). (Anatol)

- PGSQL:
  . Fixed bug #75419 (Default link incorrectly cleared/linked by pg_close()). (Sara)

- Standard:
  . Fixed bug #75221 (Argon2i always throws NUL at the end). (cmb)

- Zlib:
  . Fixed bug #75299 (Wrong reflection on inflate_init and inflate_add). (Fabien
Villepinte)

[close]

http://www.php.net/
Titel: PHP 5.6.32
Beitrag von: SiLæncer am 27 Oktober, 2017, 17:15
Changelog

Date:

    Fixed bug #75055 (Out-Of-Bounds Read in timelib_meridian()).

mcrypt:

    Fixed bug #72535 (arcfour encryption stream filter crashes php).

PCRE:

    Fixed bug #75207 (applied upstream patch for CVE-2016-1283).

[close]

http://www.php.net/
Titel: PHP 7.1.11
Beitrag von: SiLæncer am 27 Oktober, 2017, 17:45
Changelog

Core:

    Fixed bug #75241 (Null pointer dereference in zend_mm_alloc_small()).
    Fixed bug #75236 (infinite loop when printing an error-message).
    Fixed bug #75252 (Incorrect token formatting on two parse errors in one request).
    Fixed bug #75220 (Segfault when calling is_callable on parent).
    Fixed bug #75290 (debug info of Closures of internal functions contain garbage argument names).

Date:

    Fixed bug #75055 (Out-Of-Bounds Read in timelib_meridian()).

Apache2Handler:

    Fixed bug #75311 (error: 'zend_hash_key' has no member named 'arKey' in apache2handler).

Hash:

    Fixed bug #75303 (sha3 hangs on bigendian).

Intl:

    Fixed bug #75318 (The parameter of UConverter::getAliases() is not optional).

litespeed:

    Fixed bug #75248 (Binary directory doesn't get created when building only litespeed SAPI).
    Fixed bug #75251 (Missing program prefix and suffix).

mcrypt:

    Fixed bug #72535 (arcfour encryption stream filter crashes php).

MySQLi:

    Fixed bug #75018 (Data corruption when reading fields of bit type).

OCI8:

    Fixed incorrect reference counting.

Opcache:

    Fixed bug #75255 (Request hangs and not finish).

PCRE:

    Fixed bug #75207 (applied upstream patch for CVE-2016-1283).

PDO_mysql:

    Fixed bug #75177 (Type 'bit' is fetched as unexpected string).

SPL:

    Fixed bug #73629 (SplDoublyLinkedList::setIteratorMode masks intern flags).

[close]

http://www.php.net/
Titel: PHP 7.2.0 RC 6
Beitrag von: SiLæncer am 09 November, 2017, 16:15
Changelog

Core:
Fixed bug #75420 (Crash when modifing property name in __isset for BP_VAR_IS).
GD:
Fixed bug #75437 (Wrong reflection on imagewebp).
interbase:
Fixed bug #75453 (Incorrect reflection for ibase_[p]connect).
Mysqli:
Fixed bug #75434 (Wrong reflection for mysqli_fetch_all function).
SOAP:
Fixed bug #75464 (Wrong reflection on SoapClient::__setSoapHeaders).

[close]

http://www.php.net/
Titel: PHP 7.1.12
Beitrag von: SiLæncer am 24 November, 2017, 17:15
Changelog

Core:

    Fixed bug #75420 (Crash when modifing property name in __isset for BP_VAR_IS).
    Fixed bug #75368 (mmap/munmap trashing on unlucky allocations).

CLI:

    Fixed bug #75287 (Builtin webserver crash after chdir in a shutdown function).

Enchant:

    Fixed bug #53070 (enchant_broker_get_path crashes if no path is set).
    Fixed bug #75365 (Enchant still reports version 1.1.0).

Exif:

    Fixed bug #75301 (Exif extension has built in revision version).

GD:

    Fixed bug #65148 (imagerotate may alter image dimensions).
    Fixed bug #75437 (Wrong reflection on imagewebp).

intl:

    Fixed bug #75317 (UConverter::setDestinationEncoding changes source instead of destination).

interbase:

    Fixed bug #75453 (Incorrect reflection for ibase_[p]connect).

Mysqli:

    Fixed bug #75434 (Wrong reflection for mysqli_fetch_all function).

OCI8:

    Fixed valgrind issue.

OpenSSL:

    Fixed bug #75363 (openssl_x509_parse leaks memory).
    Fixed bug #75307 (Wrong reflection for openssl_open function).

Opcache:

    Fixed bug #75373 (Warning Internal error: wrong size calculation).

PGSQL:

    Fixed bug #75419 (Default link incorrectly cleared/linked by pg_close()).

SOAP:

    Fixed bug #75464 (Wrong reflection on SoapClient::__setSoapHeaders).

Zlib:

    Fixed bug #75299 (Wrong reflection on inflate_init and inflate_add).

[close]

http://www.php.net/
Titel: PHP 7.2.0 Final
Beitrag von: SiLæncer am 30 November, 2017, 18:15
Changelog

BCMath:

    Fixed bug #46564 (bcmod truncates fractionals).

CLI:

    Fixed bug #74849 (Process is started as interactive shell in PhpStorm).
    Fixed bug #74979 (Interactive shell opening instead of script execution with -f flag).

CLI server:

    Fixed bug #60471 (Random "Invalid request (unexpected EOF)" using a router script).

Core:

    Added ZEND_COUNT, ZEND_GET_CLASS, ZEND_GET_CALLED_CLASS, ZEND_GET_TYPE, ZEND_FUNC_NUM_ARGS, ZEND_FUNC_GET_ARGS instructions, to implement corresponding builtin functions.
    "Countable" interface is moved from SPL to Core.
    Added ZEND_IN_ARRAY instruction, implementing optimized in_array() builtin function, through hash lookup in flipped array.
    Removed IS_TYPE_IMMUTABLE (it's the same as COPYABLE & !REFCOUNTED).
    Removed the sql.safe_mode directive.
    Removed support for Netware.
    Renamed ReflectionClass::isIterateable() to ReflectionClass::isIterable() (alias original name for BC).
    Fixed bug #54535 (WSA cleanup executes before MSHUTDOWN).
    Implemented FR #69791 (Disallow mail header injections by extra headers) (Yasuo)
    Implemented FR #49806 (proc_nice() for Windows).
    Fix pthreads detection when cross-compiling (ffontaine)
    Fixed memory leaks caused by exceptions thrown from destructors. (Bob, Dmitry).
    Fixed bug #73215 (uniqid() should use better random source).
    Implemented FR #72768 (Add ENABLE_VIRTUAL_TERMINAL_PROCESSING flag for php.exe).
    Implemented "Convert numeric keys in object/array casts" RFC, fixes bugs #53838, #61655, #66173, #70925, #72254, etc.
    Implemented "Deprecate and Remove Bareword (Unquoted) Strings" RFC.
    Raised minimum supported Windows versions to Windows 7/Server 2008 R2.
    Implemented minor optimization in array_keys/array_values().
    Added PHP_OS_FAMILY constant to determine on which OS we are.
    Fixed bug #73987 (Method compatibility check looks to original definition and not parent).
    Fixed bug #73991 (JSON_OBJECT_AS_ARRAY not respected).
    Fixed bug #74053 (Corrupted class entries on shutdown when a destructor spawns another object).
    Fixed bug #73971 (Filename got limited to MAX_PATH on Win32 when scan directory).
    Fixed bug #72359, bug #72451, bug #73706, bug #71115 and others related to interned strings handling in TS builds.
    Implemented "Trailing Commas In List Syntax" RFC for group use lists only.
    Fixed bug #74269 (It's possible to override trait property with different loosely-equal value).
    Fixed bug #61970 (Restraining __construct() access level in subclass gives a fatal error).
    Fixed bug #63384 (Cannot override an abstract method with an abstract method).
    Fixed bug #74607 (Traits enforce different inheritance rules).
    Fixed misparsing of abstract unix domain socket names.
    Change PHP_OS_FAMILY value from "OSX" to "Darwin".
    Allow loading PHP/Zend extensions by name in ini files (extension=<name>).
    Added object type annotation.
    Fixed bug #74815 (crash with a combination of INI entries at startup).
    Fixed bug #74836 (isset on zero-prefixed numeric indexes in array broken).
    Added new VM instuctions ISSET_ISEMPTY_CV and UNSET_CV. Previously they were implemented as ISSET_ISEMPTY_VAR and UNSET_VAR variants with ZEND_QUICK_SET flag.
    Fixed bug #49649 (unserialize() doesn't handle changes in property visibility).
    Fixed bug #74866 (extension_dir = "./ext" now use current directory for base).
    Implemented FR #74963 (Improved error message on fetching property of non-object).
    Fixed bug #75142 (buildcheck.sh check for autoconf version needs to be updated for v2.64).
    Fixed bug #74878 (Data race in ZTS builds).
    Fixed bug #75515 ("stream_copy_to_stream" doesn't stream anymore).

cURL:

    Fixed bug #75093 (OpenSSL support not detected).
    Better fix for #74125 (use pkg-config instead of curl-config).

Date:

    Fixed bug #55407 (Impossible to prototype DateTime::createFromFormat).
    Implemented FR #71520 (Adding the DateTime constants to the DateTimeInterface interface).
    Fixed bug #75149 (redefinition of typedefs ttinfo and t1info).
    Fixed bug #75222 (DateInterval microseconds property always 0).

Dba:

    Fixed bug #72885 (flatfile: dba_fetch() fails to read replaced entry).

DOM:

    Implemented FR #74837 (Implement Countable for DomNodeList and DOMNamedNodeMap).

EXIF:

    Added support for vendor specific tags for the following formats: Samsung, DJI, Panasonic, Sony, Pentax, Minolta, Sigma/Foveon, AGFA, Kyocera, Ricoh & Epson.
    Fixed bug #72682 (exif_read_data() fails to read all data for some images).
    Fixed bug #71534 (Type confusion in exif_read_data() leading to heap overflow in debug mode).
    Fixed bug #68547 (Exif Header component value check error).
    Fixed bug #66443 (Corrupt EXIF header: maximum directory nesting level reached for some cameras).
    Fixed Redhat bug #1362571 (PHP not returning full results for exif_read_data function).
    Implemented FR #65187 (exif_read_data/thumbnail: add support for stream resource).
    Deprecated the read_exif_data() alias.
    Fixed bug #74428 (exif_read_data(): "Illegal IFD size" warning occurs with correct exif format).
    Fixed bug #72819 (EXIF thumbnails not read anymore).
    Fixed bug #62523 (php crashes with segfault when exif_read_data called).
    Fixed bug #50660 (exif_read_data(): Illegal IFD offset (works fine with other exif readers).

Fileinfo:

    Upgrade bundled libmagic to 5.31.

FPM:

    Configuration to limit fpm slow log trace callers.
    Fixed bug #75212 (php_value acts like php_admin_value).

FTP:

    Implement MLSD for structured listing of directories.
    Added ftp_append() function.

GD:

    Implemented imageresolution as getter and setter (Christoph)
    Fixed bug #74744 (gd.h: stdarg.h include missing for va_list use in gdErrorMethod).
    Fixed bug #75111 (Memory disclosure or DoS via crafted .bmp image).

GMP:

    Fixed bug #70896 (gmp_fact() silently ignores non-integer input).

Hash:

    Changed HashContext from resource to object.
    Disallowed usage of non-cryptographic hash functions with HMAC and PBKDF2.
    Fixed bug #75284 (sha3 is not supported on bigendian machine).

IMAP:

    Fixed bug #72324 (imap_mailboxmsginfo() return wrong size).

Intl:

    Fixed bug #63790 (test using Spoofchecker which may be unavailable).
    Fixed bug #75378 ([REGRESSION] IntlDateFormatter::parse() does not change $position argument).

JSON:

    Add JSON_INVALID_UTF8_IGNORE and JSON_INVALID_UTF8_SUBSTITUTE options for json_encode and json_decode to ignore or replace invalid UTF-8 byte sequences - it addresses request #65082.
    Fixed bug #75185 (Buffer overflow in json_decode() with JSON_INVALID_UTF8_IGNORE or JSON_INVALID).
    Fixed bug #68567 (JSON_PARTIAL_OUTPUT_ON_ERROR can result in JSON with null key).

LDAP:

    Implemented FR #69445 (Support for LDAP EXOP operations)
    Fixed support for LDAP_OPT_SERVER_CONTROLS and LDAP_OPT_CLIENT_CONTROLS in ldap_get_option
    Fixed passing an empty array to ldap_set_option for client or server controls.

Mbstring:

    Implemented FR #66024 (mb_chr() and mb_ord()).
    Implemented FR #65081 (mb_scrub()).
    Implemented FR #69086 (enhancement for mb_convert_encoding() that handles multibyte replacement char nicely).
    Added array input support to mb_convert_encoding().
    Added array input support to mb_check_encoding().
    Fixed bug #69079 (enhancement for mb_substitute_character).
    Update to oniguruma version 6.3.0.
    Fixed bug #69267 (mb_strtolower fails on titlecase characters).

Mcrypt:

    The deprecated mcrypt extension has been moved to PECL.

Opcache:

    Added global optimisation passes based on data flow analysis using Single Static Assignment (SSA) form: Sparse Conditional Constant Propagation (SCCP), Dead Code Elimination (DCE), and removal of unused local variables (Nikita, Dmitry)
    Fixed incorect constant conditional jump elimination.
    Fixed bug #75230 (Invalid opcode 49/1/8 using opcache).
    Fixed bug (assertion fails with extended info generated).
    Fixed bug (Phi sources removel).
    Fixed bug #75370 (Webserver hangs on valid PHP text).
    Fixed bug #75357 (segfault loading WordPress wp-admin).

OpenSSL:

    Use TLS_ANY for default ssl:// and tls:// negotiation.
    Fix leak in openssl_spki_new().
    Added openssl_pkcs7_read() and pk7 parameter to openssl_pkcs7_verify().
    Add ssl security_level stream option to support OpenSSL security levels. (Jakub Zelenka).
    Allow setting SNI cert and private key in separate files.
    Fixed bug #74903 (openssl_pkcs7_encrypt() uses different EOL than before).
    Automatically load OpenSSL configuration file.

PCRE:

    Added support for PCRE JIT fast path API.
    Fixed bug #61780 (Inconsistent PCRE captures in match results).
    Fixed bug #74873 (Minor BC break: PCRE_JIT changes output of preg_match()).
    Fixed bug #75089 (preg_grep() is not reporting PREG_BAD_UTF8_ERROR after first input string).
    Fixed bug #75223 (PCRE JIT broken in 7.2).
    Fixed bug #75285 (Broken build when system libpcre don't have jit support).

phar:

    Fixed bug #74196 (phar does not correctly handle names containing dots).

PDO:

    Add "Sent SQL" to debug dump for emulated prepares.
    Add parameter types for national character set strings.

PDO_DBlib:

    Fixed bug #73234 (Emulated statements let value dictate parameter type).
    Fixed bug #73396 (bigint columns are returned as strings).
    Expose DB-Library version as \PDO::DBLIB_ATTR_VERSION attribute on \PDO instance.
    Add test coverage for bug #72969.

PDO_OCI:

    Fixed bug #74537 (Align --with-pdo-oci configure option with --with-oci8 syntax).

PDO_Sqlite:

    Switch to sqlite3_prepare_v2() and sqlite3_close_v2() functions (rasmus)

PHPDBG:

    Added extended_value to opcode dump output.

Session:

    Fixed bug #73461 (Prohibit session save handler recursion).
    PR #2233 Removed register_globals related code and "!" can be used as $_SESSION key name.
    Improved bug #73100 fix. 'user' save handler can only be set by session_set_save_handler()
    Fixed bug #74514 (5 session functions incorrectly warn when calling in read-only/getter mode).
    Fixed bug #74936 (session_cache_expire/cache_limiter/save_path() trigger a warning in read mode).
    Fixed bug #74941 (session fails to start after having headers sent).

Sodium:

    New cryptographic extension
    Added missing bindings for libsodium > 1.0.13.

SPL:

    Fixed bug #71412 (Incorrect arginfo for ArrayIterator::__construct).
    Added spl_object_id().

SQLite3:

    Implement writing to blobs.
    Update to Sqlite 3.20.1.

Standard:

    Fixed bug #69442 (closing of fd incorrect when PTS enabled).
    Fixed bug #74300 (unserialize accepts two plus/minus signs for float number exponent part).
    Compatibility with libargon2 versions 20161029 and 20160821.
    Fixed bug #74737 (mysqli_get_client_info reflection info).
    Add support for extension name as argument to dl().
    Fixed bug #74851 (uniqid() without more_entropy performs badly).
    Fixed bug #74103 (heap-use-after-free when unserializing invalid array size).
    Fixed bug #75054 (A Denial of Service Vulnerability was found when performing deserialization).
    Fixed bug #75170 (mt_rand() bias on 64-bit machines).
    Fixed bug #75221 (Argon2i always throws NUL at the end).

Streams:

    Default ssl/single_dh_use and ssl/honor_cipher_order to true.

XML:

    Moved utf8_encode() and utf8_decode() to the Standard extension.

XMLRPC:

    Use Zend MM for allocation in bundled libxmlrpc (Joe)

ZIP:

    Add support for encrypted archives.
    Use of bundled libzip is deprecated, --with-libzip option is recommended.
    Fixed bug #73803 (Reflection of ZipArchive does not show public properties).
    ZipArchive implements countable, added ZipArchive::count() method.
    Fix segfault in php_stream_context_get_option call.
    Fixed bug #75143 (new method setEncryptionName() seems not to exist in ZipArchive).

zlib:

    Expose inflate_get_status() and inflate_get_read_len() functions.

[close]

http://www.php.net/
Titel: PHP 7.2.1
Beitrag von: SiLæncer am 04 Januar, 2018, 20:45
Changelog

Core:

    Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26).
    Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
    Fixed bug #75525 (Access Violation in vcruntime140.dll).
    Fixed bug #74862 (Unable to clone instance when private __clone defined).
    Fixed bug #75074 (php-process crash when is_file() is used with strings longer 260 chars).

CLI server:

    Fixed bug #73830 (Directory does not exist).

FPM:

    Fixed bug #64938 (libxml_disable_entity_loader setting is shared between requests).

GD:

    Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).

Opcache:

    Fixed bug #75608 ("Narrowing occurred during type inference" error).
    Fixed bug #75579 (Interned strings buffer overflow may cause crash).
    Fixed bug #75570 ("Narrowing occurred during type inference" error).
    Fixed bug #75556 (Invalid opcode 138/1/1).

PCRE:

    Fixed bug #74183 (preg_last_error not returning error code after error).

Phar:

    Fixed bug #74782 (remove file name from output to avoid XSS).

Standard:

    Fixed bug #75511 (fread not free unused buffer).
    Fixed bug #75514 (mt_rand returns value outside [$min,$max]+ on 32-bit) (Remi)
    Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP segment fault).
    Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing).
    Fixed bug #73124 (php_ini_scanned_files() not reporting correctly).
    Fixed bug #75574 (putenv does not work properly if parameter contains non-ASCII unicode character).

Zip:

    Fixed bug #75540 (Segfault with libzip 1.3.1).

[close]

http://www.php.net/
Titel: PHP 7.2.2
Beitrag von: SiLæncer am 01 Februar, 2018, 09:03
Changelog

Core:
Fixed bug #75742 (potential memleak in internal classes's static members).
Fixed bug #75679 (Path 260 character problem).
Fixed bug #75614 (Some non-portable == in shell scripts).
Fixed bug #75786 (segfault when using spread operator on generator passed by reference).
Fixed bug #75799 (arg of get_defined_functions is optional).
Fixed bug #75396 (Exit inside generator finally results in fatal error).
FCGI:
Fixed bug #75794 (getenv() crashes on Windows 7.2.1 when second parameter is false).
IMAP:
Fixed bug #75774 (imap_append HeapCorruction).
Opcache:
Fixed bug #75720 (File cache not populated after SHM runs full).
Fixed bug #75687 (var 8 (TMP) has array key type but not value type).
Fixed bug #75698 (Using @ crashes php7.2-fpm).
Fixed bug #75579 (Interned strings buffer overflow may cause crash).
PDO:
Fixed bug #75616 (PDO extension doesn't allow to be built shared on Darwin).
PDO MySQL:
Fixed bug #75615 (PDO Mysql module can't be built as module).
PGSQL:
Fixed bug #75671 (pg_version() crashes when called on a connection to cockroach).
Readline:
Fixed bug #75775 (readline_read_history segfaults with empty file).
SAPI:
Fixed bug #75735 ([embed SAPI] Segmentation fault in sapi_register_post_entry).
SOAP:
Fixed bug #70469 (SoapClient generates E_ERROR even if exceptions=1 is used).
Fixed bug #75502 (Segmentation fault in zend_string_release).
SPL:
Fixed bug #75717 (RecursiveArrayIterator does not traverse arrays by reference).
Fixed bug #75242 (RecursiveArrayIterator doesn't have constants from parent class).
Fixed bug #73209 (RecursiveArrayIterator does not iterate object properties)
Standard:
Fixed bug #75781 (substr_count incorrect result).
Fixed bug #75653 (array_values don't work on empty array).
Zip:
Display headers (buildtime) and library (runtime) versions in phpinfo with libzip >= 1.3.1)

[close]

http://www.php.net/
Titel: PHP 7.2.3
Beitrag von: SiLæncer am 02 März, 2018, 05:25
Changelog

Core:

    Fixed bug #75864 ("stream_isatty" returns wrong value on s390x).

Apache2Handler:

    Fixed bug #75882 (a simple way for segfaults in threadsafe php just with configuration).

Date:

    Fixed bug #75857 (Timezone gets truncated when formatted).
    Fixed bug #75928 (Argument 2 for `DateTimeZone::listIdentifiers()` should accept `null`).
    Fixed bug #68406 (calling var_dump on a DateTimeZone object modifies it).

LDAP:

    Fixed bug #49876 (Fix LDAP path lookup on 64-bit distros).

libxml2:

    Fixed bug #75871 (use pkg-config where available).

PGSQL:

    Fixed bug #75838 (Memory leak in pg_escape_bytea()).

Phar:

    Fixed bug #54289 (Phar::extractTo() does not accept specific directories to be extracted).
    Fixed bug #65414 (deal with leading slash while adding files correctly).
    Fixed bug #65414 (deal with leading slash when adding files correctly).

ODBC:

    Fixed bug #73725 (Unable to retrieve value of varchar(max) type).

Opcache:

    Fixed bug #75729 (opcache segfault when installing Bitrix).
    Fixed bug #75893 (file_get_contents $http_response_header variable bugged with opcache).
    Fixed bug #75938 (Modulus value not stored in variable).

SPL:

    Fixed bug #74519 (strange behavior of AppendIterator).

Standard:

    Fixed bug #75916 (DNS_CAA record results contain garbage).
    Fixed bug #75981 (Prevent reading beyond buffer start in http wrapper).

[close]

http://www.php.net/
Titel: PHP 7.2.5
Beitrag von: SiLæncer am 26 April, 2018, 16:15
Changelog

Core:

    Fixed bug #75722 (Convert valgrind detection to configure option).

Date:

    Fixed bug #76131 (mismatch arginfo for date_create).

Exif:

    Fixed bug #76130 (Heap Buffer Overflow (READ: 1786) in exif_iif_add_value).

FPM:

    Fixed bug #68440 (ERROR: failed to reload: execvp() failed: Argument list too long).
    Fixed incorrect write to getenv result in FPM reload.

GD:

    Fixed bug #52070 (imagedashedline() - dashed line sometimes is not visible).

iconv:

    Fixed bug #76249 (stream filter convert.iconv leads to infinite loop on invalid sequence).

intl:

    Fixed bug #76153 (Intl compilation fails with icu4c 61.1).

ldap:

    Fixed bug #76248 (Malicious LDAP-Server Response causes Crash).

mbstring:

    Fixed bug #75944 (Wrong cp1251 detection).
    Fixed bug #76113 (mbstring does not build with Oniguruma 6.8.1).

ODBC:

    Fixed bug #76088 (ODBC functions are not available by default on Windows).

Opcache:

    Fixed bug #76094 (Access violation when using opcache).

Phar:

    Fixed bug #76129 (fix for CVE-2018-5712 may not be complete).

phpdbg:

    Fixed bug #76143 (Memory corruption: arbitrary NUL overwrite).

SPL:

    Fixed bug #76131 (mismatch arginfo for splarray constructor).

standard:

    Fixed bug #74139 (mail.add_x_header default inconsistent with docs).
    Fixed bug #75996 (incorrect url in header for mt_rand).

[close]

http://www.php.net/
Titel: PHP 7.0.30
Beitrag von: SiLæncer am 26 April, 2018, 18:46
Changelog

Exif:

    Fixed bug #76130 (Heap Buffer Overflow (READ: 1786) in exif_iif_add_value).

iconv:

    Fixed bug #76249 (stream filter convert.iconv leads to infinite loop on invalid sequence).

LDAP:

    Fixed bug #76248 (Malicious LDAP-Server Response causes Crash).

Phar:

    Fixed bug #76129 (fix for CVE-2018-5712 may not be complete).

[close]

http://www.php.net/
Titel: PHP 7.2.6
Beitrag von: SiLæncer am 25 Mai, 2018, 13:33
Changelog

EXIF:

Fixed bug #76164 (exif_read_data zend_mm_heap corrupted).

FPM:

Fixed bug #76075 --with-fpm-acl wrongly tries to find libacl on FreeBSD.

intl:

Fixed bug #74385 (Locale::parseLocale() broken with some arguments).

Opcache:

Fixed bug #76205 (PHP-FPM sporadic crash when running Infinitewp).
Fixed bug #76275 (Assertion failure in file cache when unserializing empty try_catch_array).
Fixed bug #76281 (Opcache causes incorrect "undefined variable" errors).

Reflection:

Fixed arginfo of array_replace(_recursive) and array_merge(_recursive).

Session:

Fixed bug #74892 (Url Rewriting (trans_sid) not working on urls that start with "#").

[close]

http://www.php.net/
Titel: PHP 7.2.7 für Windows
Beitrag von: SiLæncer am 20 Juni, 2018, 19:15
Changelog

- Core:
  . Fixed bug #76337 (segfault when opcache enabled + extension use
    zend_register_class_alias). (xKhorasan)

- CLI Server:
  . Fixed bug #76333 (PHP built-in server does not find files if root path
    contains special characters). (Anatol)

- OpenSSL:
  . Fixed bug #76296 (openssl_pkey_get_public does not respect open_basedir).
    (Erik Lax, Jakub Zelenka)
  . Fixed bug #76174 (openssl extension fails to build with LibreSSL 2.7).
    (Jakub Zelenka)

- SPL:
  . Fixed bug #76367 (NoRewindIterator segfault 11). (Laruence)

- Standard:
  . Fixed bug #76410 (SIGV in zend_mm_alloc_small). (Laruence)
  . Fixed bug #76335 ("link(): Bad file descriptor" with non-ASCII path).
    (Anatol)

24 May 2018, PHP 7.2.6

- EXIF:
  . Fixed bug #76164 (exif_read_data zend_mm_heap corrupted). (cmb)

- FPM:
  . Fixed bug #76075 --with-fpm-acl wrongly tries to find libacl on FreeBSD.
    (mgorny)

- intl:
  . Fixed bug #74385 (Locale::parseLocale() broken with some arguments).
    (Anatol)

- Opcache:
  . Fixed bug #76205 (PHP-FPM sporadic crash when running Infinitewp). (Dmitry)
  . Fixed bug #76275 (Assertion failure in file cache when unserializing empty
    try_catch_array). (Nikita)
  . Fixed bug #76281 (Opcache causes incorrect "undefined variable" errors).
    (Nikita)

- Reflection:
  . Fixed arginfo of array_replace(_recursive) and array_merge(_recursive).
    (carusogabriel)

- Session:
  . Fixed bug #74892 (Url Rewriting (trans_sid) not working on urls that start
    with "#"). (Andrew Nester)

26 Apr 2018, PHP 7.2.5

- Core:
  . Fixed bug #75722 (Convert valgrind detection to configure option).
    (Michael Heimpold)

- Date:
  . Fixed bug #76131 (mismatch arginfo for date_create). (carusogabriel)

- Exif:
  . Fixed bug #76130 (Heap Buffer Overflow (READ: 1786) in exif_iif_add_value).
    (Stas)

- FPM:
  . Fixed bug #68440 (ERROR: failed to reload: execvp() failed: Argument list
    too long). (Jacob Hipps)
  . Fixed incorrect write to getenv result in FPM reload. (Jakub Zelenka)

- GD:
  . Fixed bug #52070 (imagedashedline() - dashed line sometimes is not visible).
    (cmb)

- iconv:
  . Fixed bug #76249 (stream filter convert.iconv leads to infinite loop on
    invalid sequence). (Stas)

- intl:
  . Fixed bug #76153 (Intl compilation fails with icu4c 61.1). (Anatol)

- ldap:
  . Fixed bug #76248 (Malicious LDAP-Server Response causes Crash). (Stas)

- mbstring:
  . Fixed bug #75944 (Wrong cp1251 detection). (dmk001)
  . Fixed bug #76113 (mbstring does not build with Oniguruma 6.8.1).
    (chrullrich, cmb)

- ODBC:
  . Fixed bug #76088 (ODBC functions are not available by default on Windows).
    (cmb)

- Opcache:
  . Fixed bug #76094 (Access violation when using opcache). (Laruence)

- Phar:
  . Fixed bug #76129 (fix for CVE-2018-5712 may not be complete). (Stas)

- phpdbg:
  . Fixed bug #76143 (Memory corruption: arbitrary NUL overwrite). (Laruence)

- SPL:
  . Fixed bug #76131 (mismatch arginfo for splarray constructor).
    (carusogabriel)

- standard:
  . Fixed bug #74139 (mail.add_x_header default inconsistent with docs). (cmb)
  . Fixed bug #75996 (incorrect url in header for mt_rand). (tatarbj)

[close]

Download : https://windows.php.net/downloads/releases/

Titel: PHP 7.2.8
Beitrag von: SiLæncer am 19 Juli, 2018, 19:15
Changelog

Core:

    Fixed bug #76534 (PHP hangs on 'illegal string offset on string references with an error handler).
    Fixed bug #76520 (Object creation leaks memory when executed over HTTP).
    Fixed bug #76502 (Chain of mixed exceptions and errors does not serialize properly).

Date:

    Fixed bug #76462 (Undefined property: DateInterval::$f).

EXIF:

    Fixed bug #76409 (heap use after free in _php_stream_free).
    Fixed bug #76423 (Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.c).
    Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while reading exif data).

FPM:

    Fixed bug #73342 (Vulnerability in php-fpm by changing stdin to non-blocking).

GMP:

    Fixed bug #74670 (Integer Underflow when unserializing GMP and possible other classes).

intl:

    Fixed bug #76556 (get_debug_info handler for BreakIterator shows wrong type).

mbstring:

    Fixed bug #76532 (Integer overflow and excessive memory usage in mb_strimwidth).

Opcache:

    Fixed bug #76477 (Opcache causes empty return value).

PGSQL:

    Fixed bug #76548 (pg_fetch_result did not fetch the next row).

phpdbg:

    Fix arginfo wrt. optional/required parameters.

Reflection:

    Fixed bug #76536 (PHP crashes with core dump when throwing exception in error handler).
    Fixed bug #75231 (ReflectionProperty#getValue() incorrectly works with inherited classes).

Standard:

    Fixed bug #76505 (array_merge_recursive() is duplicating sub-array keys).
    Fixed bug #71848 (getimagesize with $imageinfo returns false).

Win32:

    Fixed bug #76459 (windows linkinfo lacks openbasedir check).

ZIP:

    Fixed bug #76461 (OPSYS_Z_CPM defined instead of OPSYS_CPM).

[close]

http://www.php.net/
Titel: PHP 7.1.21
Beitrag von: SiLæncer am 30 August, 2018, 20:30
Changelog

Calendar:

Fixed bug #52974 (jewish.c: compile error under Windows with GBK charset).

Filter:

Fixed bug #76366 (References in sub-array for filtering breaks the filter).

PDO_Firebird:

Fixed bug #76488 (Memory leak when fetching a BLOB field).

PDO_PgSQL:

Fixed bug #75402 (Possible Memory Leak using PDO::CURSOR_SCROLL option).

SQLite3:

Fixed bug #76665 (SQLite3Stmt::bindValue() with SQLITE3_FLOAT doesn't juggle).

Standard:

Fixed bug #68553 (array_column: null values in $index_key become incrementing keys in result).
Fixed bug #73817 (Incorrect entries in get_html_translation_table).
Fixed bug #76643 (Segmentation fault when using `output_add_rewrite_var`).

Zip:

Fixed bug #76524 (ZipArchive memory leak (OVERWRITE flag and empty archive)).

[close]

http://www.php.net/
Titel: PHP 7.3.0 RC1
Beitrag von: SiLæncer am 13 September, 2018, 13:38
Changelog

    Core:
    Fixed bug #76825 (Undefined symbols ___cpuid_count). (Laruence)
    Fixed bug #76820 (Z_COPYABLE invalid definition). (mvdwerve, cmb)
    Fixed bug #76510 (file_exists() stopped working for phar://). (cmb)
    intl:
    Fixed bug #76829 (Incorrect validation of domain on idn_to_utf8() function). (Anatol)
    MBString:
    Updated to Oniguruma 6.9.0. (cmb)
    Opcache:
    Fixed bug #76832 (ZendOPcache.MemoryBase periodically deleted by the OS). (Anatol)
    Fixed bug #76796 (Compile-time evaluation of disabled function in opcache causes segfault). (Nikita)
    POSIX:
    Fixed bug #75696 (posix_getgrnam fails to print details of group). (cmb)
    Reflection:
    Fixed bug #74454 (Wrong exception being thrown when using ReflectionMethod). (cmb)
    Standard:
    Fixed bug #76803 (ftruncate changes file pointer). (Anatol)
    Fixed bug #76818 (Memory corruption and segfault). (Remi)
    Fixed bug #73457 (Wrong error message when fopen FTP wrapped fails to open data connection). (Ville Hukkamäki)
    Zlib:
    Fixed bug #75273 (php_zlib_inflate_filter() may not update bytes_consumed). (Martin Burke, cmb)

[close]

http://www.php.net/
Titel: PHP 7.2.10
Beitrag von: SiLæncer am 13 September, 2018, 16:40
Changelog

    Core:
        Fixed bug #76754 (parent private constant in extends class memory leak).
        Fixed bug #72443 (Generate enabled extension).
        Fixed bug #75797 (Memory leak when using class_alias() in non-debug mode).
    Apache2:
        Fixed bug #76582 (Apache bucket brigade sometimes becomes invalid).
    Bz2:
        Fixed arginfo for bzcompress.
    gettext:
        Fixed bug #76517 (incorrect restoring of LDFLAGS).
    iconv:
        Fixed bug #68180 (iconv_mime_decode can return extra characters in a header).
        Fixed bug #63839 (iconv_mime_decode_headers function is skipping headers).
        Fixed bug #60494 (iconv_mime_decode does ignore special characters).
        Fixed bug #55146 (iconv_mime_decode_headers() skips some headers).
    intl:
        Fixed bug #74484 (MessageFormatter::formatMessage memory corruption with 11+ named placeholders).
    libxml:
        Fixed bug #76777 ("public id" parameter of libxml_set_external_entity_loader callback undefined).
    mbstring:
        Fixed bug #76704 (mb_detect_order return value varies based on argument type).
    Opcache:
        Fixed bug #76747 (Opcache treats path containing "test.pharma.tld" as a phar file).
    OpenSSL:
        Fixed bug #76705 (unusable ssl => peer_fingerprint in stream_context_create()).
    phpdbg:
        Fixed bug #76595 (phpdbg man page contains outdated information).
    SPL:
        Fixed bug #68825 (Exception in DirectoryIterator::getLinkTarget()).
        Fixed bug #68175 (RegexIterator pregFlags are NULL instead of 0).
    Standard:
        Fixed bug #76778 (array_reduce leaks memory if callback throws exception).
    zlib:
        Fixed bug #65988 (Zlib version check fails when an include/zlib/ style dir is passed to the --with-zlib configure option).
        Fixed bug #76709 (Minimal required zlib library is 1.2.0.4).

[close]

http://www.php.net/
Titel: PHP 7.2.11 / 7.1.23
Beitrag von: SiLæncer am 12 Oktober, 2018, 13:20
Changelog

    Core:
    Fixed bug #76901 (method_exists on SPL iterator passthrough method corrupts memory).
    Fixed bug #76846 (Segfault in shutdown function after memory limit error).
    CURL:
    Fixed bug #76480 (Use curl_multi_wait() so that timeouts are respected).
    iconv:
    Fixed bug #66828 (iconv_mime_encode Q-encoding longer than it should be).
    Opcache:
    Fixed bug #76832 (ZendOPcache.MemoryBase periodically deleted by the OS).
    POSIX:
    Fixed bug #75696 (posix_getgrnam fails to print details of group).
    Reflection:
    Fixed bug #74454 (Wrong exception being thrown when using ReflectionMethod).
    Standard:
    Fixed bug #73457 (Wrong error message when fopen FTP wrapped fails to open data connection).
    Fixed bug #74764 (Bindto IPv6 works with file_get_contents but fails with stream_socket_client).
    Fixed bug #75533 (array_reduce is slow when $carry is large array).
    Zlib:
    Fixed bug #75273 (php_zlib_inflate_filter() may not update bytes_consumed).

New in PHP 7.2.11

    Core:
    Fixed bug #76800 (foreach inconsistent if array modified during loop).
    Fixed bug #76901 (method_exists on SPL iterator passthrough method corrupts memory).
    CURL:
    Fixed bug #76480 (Use curl_multi_wait() so that timeouts are respected).
    iconv:
    Fixed bug #66828 (iconv_mime_encode Q-encoding longer than it should be).
    Opcache:
    Fixed bug #76832 (ZendOPcache.MemoryBase periodically deleted by the OS).
    Fixed bug #76796 (Compile-time evaluation of disabled function in opcache causes segfault).
    POSIX:
    Fixed bug #75696 (posix_getgrnam fails to print details of group).
    Reflection:
    Fixed bug #74454 (Wrong exception being thrown when using ReflectionMethod).
    Standard:
    Fixed bug #73457 (Wrong error message when fopen FTP wrapped fails to open data connection).
    Fixed bug #74764 (Bindto IPv6 works with file_get_contents but fails with stream_socket_client).
    Fixed bug #75533 (array_reduce is slow when $carry is large array).
    XMLRPC:
    Fixed bug #76886 (Can't build xmlrpc with expat).
    Zlib:
    Fixed bug #75273 (php_zlib_inflate_filter() may not update bytes_consumed).

[close]

http://www.php.net/
Titel: PHP 7.2.12
Beitrag von: SiLæncer am 08 November, 2018, 16:40
Changelog

Core:

    Fixed bug #76846 (Segfault in shutdown function after memory limit error).
    Fixed bug #76946 (Cyclic reference in generator not detected).
    Fixed bug #77035 (The phpize and ./configure create redundant .deps file).
    Fixed bug #77041 (buildconf should output error messages to stderr) (Mizunashi Mana)

Date:

    Upgraded timelib to 2017.08.
    Fixed bug #75851 (Year component overflow with date formats "c", "o", "r" and "y").
    Fixed bug #77007 (fractions in `diff()` are not correctly normalized).

FCGI:

    Fixed bug #76948 (Failed shutdown/reboot or end session in Windows).
    Fixed bug #76954 (apache_response_headers removes last character from header name).

FTP:

    Fixed bug #76972 (Data truncation due to forceful ssl socket shutdown).

intl:

    Fixed bug #76942 (U_ARGUMENT_TYPE_MISMATCH).

Reflection:

    Fixed bug #76936 (Objects cannot access their private attributes while handling reflection errors).
    Fixed bug #66430 (ReflectionFunction::invoke does not invoke closure with object scope).

Sodium:

    Some base64 outputs were truncated; this is not the case any more.
    block sizes >= 256 bytes are now supposed by sodium_pad() even when an old version of libsodium has been installed.
    Fixed bug #77008 (sodium_pad() could read (but not return nor write) uninitialized memory when trying to pad an empty input).

Standard:

    Fixed bug #76965 (INI_SCANNER_RAW doesn't strip trailing whitespace).

Tidy:

    Fixed bug #77027 (tidy::getOptDoc() not available on Windows).

XML:

    Fixed bug #30875 (xml_parse_into_struct() does not resolve entities).
    Add support for getting SKIP_TAGSTART and SKIP_WHITE options.

XMLRPC:

    Fixed bug #75282 (xmlrpc_encode_request() crashes).

[close]

http://www.php.net/
Titel: PHP 7.3.0
Beitrag von: SiLæncer am 06 Dezember, 2018, 18:45
Changelog

    Core:
        Improved PHP GC.
        Redesigned the old ext_skel program written in PHP, run: 'php ext_skel.php' for all options. This means there are no dependencies, thus making it work on Windows out of the box.
        Removed support for BeOS.
        Add PHP_VERSION to phpinfo() <title/>.
        Add net_get_interfaces().
        Implemented flexible heredoc and nowdoc syntax, per RFC https://wiki.php.net/rfc/flexible_heredoc_nowdoc_syntaxes.
        Added support for references in list() and array destructuring, per RFC https://wiki.php.net/rfc/list_reference_assignment.
        Improved effectiveness of ZEND_SECURE_ZERO for NetBSD and systems without native similar feature.
        Added syslog.facility and syslog.ident INI entries for customizing syslog logging.
        Fixed bug #75683 (Memory leak in zend_register_functions() in ZTS mode).
        Fixed bug #75031 (support append mode in temp/memory streams).
        Fixed bug #74860 (Uncaught exceptions not being formatted properly when error_log set to "syslog").
        Fixed bug #75220 (Segfault when calling is_callable on parent).
        Fixed bug #69954 (broken links and unused config items in distributed ini files).
        Fixed bug #74922 (Composed class has fatal error with duplicate, equal const properties).
        Fixed bug #63911 (identical trait methods raise errors during composition).
        Fixed bug #75677 (Clang ignores fastcall calling convention on variadic function).
        Fixed bug #54043 (Remove inconsitency of internal exceptions and user defined exceptions).
        Fixed bug #53033 (Mathematical operations convert objects to integers).
        Fixed bug #73108 (Internal class cast handler uses integer instead of float).
        Fixed bug #75765 (Fatal error instead of Error exception when base class is not found).
        Fixed bug #76198 (Wording: "iterable" is not a scalar type).
        Fixed bug #76137 (config.guess/config.sub do not recognize RISC-V).
        Fixed bug #76427 (Segfault in zend_objects_store_put).
        Fixed bug #76422 (ftruncate fails on files > 2GB).
        Fixed bug #76509 (Inherited static properties can be desynchronized from their parent by ref).
        Fixed bug #76439 (Changed behaviour in unclosed HereDoc).
        Fixed bug #63217 (Constant numeric strings become integers when used as ArrayAccess offset).
        Fixed bug #33502 (Some nullary functions don't check the number of arguments).
        Fixed bug #76392 (Error relocating sapi/cli/php: unsupported relocation type 37).
        The declaration and use of case-insensitive constants has been deprecated.
        Added syslog.filter INI entry for syslog filtering.
        Fixed bug #76667 (Segfault with divide-assign op and __get + __set).
        Fixed bug #76030 (RE2C_FLAGS rarely honoured) (Cristian Rodríguez)
        Fixed broken zend_read_static_property (Laruence)
        Fixed bug #76773 (Traits used on the parent are ignored for child classes).
        Fixed bug #76767 (‘asm’ operand has impossible constraints in zend_operators.h).
        Fixed bug #76752 (Crash in ZEND_COALESCE_SPEC_TMP_HANDLER - assertion in _get_zval_ptr_tmp failed).
        Fixed bug #76820 (Z_COPYABLE invalid definition).
        Fixed bug #76510 (file_exists() stopped working for phar://).
        Fixed bug #76869 (Incorrect bypassing protected method accessibilty check).
        Fixed bug #72635 (Undefined class used by class constant in constexpr generates fatal error).
        Fixed bug #76947 (file_put_contents() blocks the directory of the file (__DIR__)).
        Fixed bug #76979 (define() error message does not mention resources as valid values).
        Fixed bug #76825 (Undefined symbols ___cpuid_count).
        Fixed bug #77110 (undefined symbol zend_string_equal_val in C++ build).
        Fixed bug #77231 (Segfault when using convert.quoted-printable-encode filter).
    BCMath:
        Implemented FR #67855 (No way to get current scale in use).
        Fixed bug #66364 (BCMath bcmul ignores scale parameter).
        Fixed bug #75164 (split_bc_num() is pointless).
        Fixed bug #75169 (BCMath errors/warnings bypass PHP's error handling).
    CLI:
        Fixed bug #44217 (Output after stdout/stderr closed cause immediate exit with status 0).
        Fixed bug #77111 (php-win.exe corrupts unicode symbols from cli parameters).
    cURL:
        Expose curl constants from curl 7.50 to 7.61.
        Fixed bug #74125 (Fixed finding CURL on systems with multiarch support).
    Date:
        Implemented FR #74668: Add DateTime::createFromImmutable() method.
        Fixed bug #75222 (DateInterval microseconds property always 0).
        Fixed bug #68406 (calling var_dump on a DateTimeZone object modifies it).
        Fixed bug #76131 (mismatch arginfo for date_create).
        Updated timelib to 2018.01RC1 to address several bugs:
        Fixed bug #75577 (DateTime::createFromFormat does not accept 'v' format specifier).
        Fixed bug #75642 (Wrap around behaviour for microseconds is not working).
        Fixed bug #77097 (DateTime::diff gives wrong diff when the actual diff is less than 1 second).
    DBA:
        Fixed bug #75264 (compiler warnings emitted).
    DOM:
        Fixed bug #76285 (DOMDocument::formatOutput attribute sometimes ignored).
    Fileinfo:
        Fixed bug #77095 (slowness regression in 7.2/7.3 (compared to 7.1)).
    Filter:
        Added the 'add_slashes' sanitization mode (FILTER_SANITIZE_ADD_SLASHES).
    FPM:
        Added fpm_get_status function.
        Fixed bug #62596 (getallheaders() missing with PHP-FPM).
        Fixed bug #69031 (Long messages into stdout/stderr are truncated incorrectly) - added new log related FPM configuration options: log_limit, log_buffering and decorate_workers_output.
    ftp:
        Fixed bug #77151 (ftp_close(): SSL_read on shutdown).
    GD:
        Added support for WebP in imagecreatefromstring().
    GMP:
        Export internal structures and accessor helpers for GMP object.
        Added gmp_binomial(n, k).
        Added gmp_lcm(a, b).
        Added gmp_perfect_power(a).
        Added gmp_kronecker(a, b).
    iconv:
        Fixed bug #53891 (iconv_mime_encode() fails to Q-encode UTF-8 string).
        Fixed bug #77147 (Fixing 60494 ignored ICONV_MIME_DECODE_CONTINUE_ON_ERROR).
    IMAP:
        Fixed bug #77153 (imap_open allows to run arbitrary shell commands via mailbox parameter).
        Fixed bug #77020 (null pointer dereference in imap_mail).
    Interbase:
        Fixed bug #75453 (Incorrect reflection for ibase_[p]connect).
        Fixed bug #76443 (php+php_interbase.dll crash on module_shutdown).
    intl:
        Fixed bug #75317 (UConverter::setDestinationEncoding changes source instead of destination).
        Fixed bug #76829 (Incorrect validation of domain on idn_to_utf8() function).
    JSON:
        Added JSON_THROW_ON_ERROR flag.
    LDAP:
        Added ldap_exop_refresh helper for EXOP REFRESH operation with dds overlay.
        Added full support for sending and parsing ldap controls.
        Fixed bug #49876 (Fix LDAP path lookup on 64-bit distros).
    libxml2:
        Fixed bug #75871 (use pkg-config where available).
    litespeed:
        Fixed bug #75248 (Binary directory doesn't get created when building only litespeed SAPI).
        Fixed bug #75251 (Missing program prefix and suffix).
    MBstring:
        Updated to Oniguruma 6.9.0.
        Fixed bug #65544 (mb title case conversion-first word in quotation isn't capitalized).
        Fixed bug #71298 (MB_CASE_TITLE misbehaves with curled apostrophe/quote).
        Fixed bug #73528 (Crash in zif_mb_send_mail).
        Fixed bug #74929 (mbstring functions version 7.1.1 are slow compared to 5.3 on Windows).
        Fixed bug #76319 (mb_strtolower with invalid UTF-8 causes segmentation fault).
        Fixed bug #76574 (use of undeclared identifiers INT_MAX and LONG_MAX).
        Fixed bug #76594 (Bus Error due to unaligned access in zend_ini.c OnUpdateLong).
        Fixed bug #76706 (mbstring.http_output_conv_mimetypes is ignored).
        Fixed bug #76958 (Broken UTF7-IMAP conversion).
        Fixed bug #77025 (mb_strpos throws Unknown encoding or conversion error).
        Fixed bug #77165 (mb_check_encoding crashes when argument given an empty array).
    Mysqlnd:
        Fixed bug #76386 (Prepared Statement formatter truncates fractional seconds from date/time column).
    ODBC:
        Removed support for ODBCRouter.
        Removed support for Birdstep.
        Fixed bug #77079 (odbc_fetch_object has incorrect type signature).
    Opcache:
        Fixed bug #76466 (Loop variable confusion).
        Fixed bug #76463 (var has array key type but not value type).
        Fixed bug #76446 (zend_variables.c:73: zend_string_destroy: Assertion `!(zval_gc_flags((str)->gc)).
        Fixed bug #76711 (OPcache enabled triggers false-positive "Illegal string offset").
        Fixed bug #77058 (Type inference in opcache causes side effects).
        Fixed bug #77092 (array_diff_key() - segmentation fault).
    OpenSSL:
        Added openssl_pkey_derive function.
        Add min_proto_version and max_proto_version ssl stream options as well as related constants for possible TLS protocol values.
    PCRE:
        Implemented https://wiki.php.net/rfc/pcre2-migration.
        Upgrade PCRE2 to 10.32.
        Fixed bug #75355 (preg_quote() does not quote # control character).
        Fixed bug #76512 (\w no longer includes unicode characters).
        Fixed bug #76514 (Regression in preg_match makes it fail with PREG_JIT_STACKLIMIT_ERROR).
        Fixed bug #76909 (preg_match difference between 7.3 and < 7.3).
    PDO_DBlib:
        Implemented FR #69592 (allow 0-column rowsets to be skipped automatically).
        Expose TDS version as \PDO::DBLIB_ATTR_TDS_VERSION attribute on \PDO instance.
        Treat DATETIME2 columns like DATETIME.
        Fixed bug #74243 (allow locales.conf to drive datetime format).
    PDO_Firebird:
        Fixed bug #74462 (PDO_Firebird returns only NULLs for results with boolean for FIREBIRD >= 3.0).
    PDO_OCI:
        Fixed bug #74631 (PDO_PCO with PHP-FPM: OCI environment initialized before PHP-FPM sets it up).
    PDO SQLite:
        Add support for additional open flags
    pgsql:
        Added new error constants for pg_result_error(): PGSQL_DIAG_SCHEMA_NAME, PGSQL_DIAG_TABLE_NAME, PGSQL_DIAG_COLUMN_NAME, PGSQL_DIAG_DATATYPE_NAME, PGSQL_DIAG_CONSTRAINT_NAME and PGSQL_DIAG_SEVERITY_NONLOCALIZED.
        Fixed bug #77047 (pg_convert has a broken regex for the 'TIME WITHOUT TIMEZONE' data type).
    phar:
        Fixed bug #74991 (include_path has a 4096 char limit in some cases).
        Fixed bug #65414 (deal with leading slash when adding files correctly).
        Fixed bug #77022 (PharData always creates new files with mode 0666).
        Fixed bug #77143 (Heap Buffer Overflow (READ: 4) in phar_parse_pharfile).
    readline:
        Added completion_append_character and completion_suppress_append options to readline_info() if linked against libreadline.
    Session:
        Fixed bug #74941 (session fails to start after having headers sent).
    SimpleXML:
        Fixed bug #54973 (SimpleXML casts integers wrong).
        Fixed bug #76712 (Assignment of empty string creates extraneous text node).
    Sockets:
        Fixed bug #67619 (Validate length on socket_write).
    SOAP:
        Fixed bug #75464 (Wrong reflection on SoapClient::__setSoapHeaders).
        Fixed bug #70469 (SoapClient generates E_ERROR even if exceptions=1 is used).
        Fixed bug #50675 (SoapClient can't handle object references correctly).
        Fixed bug #76348 (WSDL_CACHE_MEMORY causes Segmentation fault).
        Fixed bug #77141 (Signedness issue in SOAP when precision=-1).
    SPL:
        Fixed bug #74977 (Appending AppendIterator leads to segfault).
        Fixed bug #75173 (incorrect behavior of AppendIterator::append in foreach loop).
        Fixed bug #74372 (autoloading file with syntax error uses next autoloader, may hide parse error).
        Fixed bug #75878 (RecursiveTreeIterator::setPostfix has wrong signature).
        Fixed bug #74519 (strange behavior of AppendIterator).
        Fixed bug #76131 (mismatch arginfo for splarray constructor).
    SQLite3:
        Updated bundled libsqlite to 3.24.0.
    Standard:
        Added is_countable() function.
        Added support for the SameSite cookie directive, including an alternative signature for setcookie(), setrawcookie() and session_set_cookie_params().
        Remove superfluous warnings from inet_ntop()/inet_pton().
        Fixed bug #75916 (DNS_CAA record results contain garbage).
        Fixed unserialize(), to disable creation of unsupported data structures through manually crafted strings.
        Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator that getrandom() is missing).
        Fixed bug #74719 (fopen() should accept NULL as context).
        Fixed bug #69948 (path/domain are not sanitized in setcookie).
        Fixed bug #75996 (incorrect url in header for mt_rand).
        Added hrtime() function, to get high resolution time.
        Fixed bug #48016 (stdClass::__setState is not defined although var_export() uses it).
        Fixed bug #76136 (stream_socket_get_name should enclose IPv6 in brackets).
        Fixed bug #76688 (Disallow excessive parameters after options array).
        Fixed bug #76713 (Segmentation fault caused by property corruption).
        Fixed bug #76755 (setcookie does not accept "double" type for expire time).
        Fixed bug #76674 (improve array_* failure messages exposing what was passed instead of an array).
        Fixed bug #76803 (ftruncate changes file pointer).
        Fixed bug #76818 (Memory corruption and segfault).
        Fixed bug #77081 (ftruncate() changes seek pointer in c mode).
    Testing:
        Implemented FR #62055 (Make run-tests.php support --CGI-- sections).
    Tidy:
        Support using tidyp instead of tidy.
        Fixed bug #74707 (Tidy has incorrect ReflectionFunction param counts for functions taking tidy).
        Fixed arginfo for tidy::__construct().
    Tokenizer:
        Fixed bug #76437 (token_get_all with TOKEN_PARSE flag fails to recognise close tag).
        Fixed bug #75218 (Change remaining uncatchable fatal errors for parsing into ParseError).
        Fixed bug #76538 (token_get_all with TOKEN_PARSE flag fails to recognise close tag with newline).
        Fixed bug #76991 (Incorrect tokenization of multiple invalid flexible heredoc strings).
    XML:
        Fixed bug #71592 (External entity processing never fails).
    Zlib:
        Added zlib/level context option for compress.zlib wrapper.


[close]

http://www.php.net/
Titel: PHP 7.3.1
Beitrag von: SiLæncer am 10 Januar, 2019, 16:15
Changelog

Core:

    Fixed bug #76654 (Build failure on Mac OS X on 32-bit Intel).
    Fixed bug #71041 (zend_signal_startup() needs ZEND_API).
    Fixed bug #76046 (PHP generates "FE_FREE" opcode on the wrong line).
    Fixed bug #77291 (magic methods inherited from a trait may be ignored).

CURL:

    Fixed bug #77264 (curl_getinfo returning microseconds, not seconds).

COM:

    Fixed bug #77177 (Serializing or unserializing COM objects crashes).

Exif:

    Fixed bug #77184 (Unsigned rational numbers are written out as signed rationals).

GD:

    Fixed bug #77195 (Incorrect error handling of imagecreatefromjpeg()).
    Fixed bug #77198 (auto cropping has insufficient precision).
    Fixed bug #77200 (imagecropauto(…, GD_CROP_SIDES) crops left but not right).
    Fixed bug #77269 (efree() on uninitialized Heap data in imagescale leads to use-after-free).
    Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap).

MBString:

    Fixed bug #77367 (Negative size parameter in mb_split).
    Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token).
    Fixed bug #77371 (heap buffer overflow in mb regex functions - compile_string_node).
    Fixed bug #77381 (heap buffer overflow in multibyte match_at).
    Fixed bug #77382 (heap buffer overflow due to incorrect length in expand_case_fold_string).
    Fixed bug #77385 (buffer overflow in fetch_token).
    Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode).
    Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code).

OCI8:

    Fixed bug #76804 (oci_pconnect with OCI_CRED_EXT not working).
    Added oci_set_call_timeout() for call timeouts.
    Added oci_set_db_operation() for the DBOP end-to-end-tracing attribute.

Opcache:

    Fixed bug #77215 (CFG assertion failure on multiple finalizing switch frees in one block).
    Fixed bug #77275 (OPcache optimization problem for ArrayAccess->offsetGet).

PCRE:

    Fixed bug #77193 (Infinite loop in preg_replace_callback).

PDO:

    Handle invalid index passed to PDOStatement::fetchColumn() as error.

Phar:

    Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext).

Soap:

    Fixed bug #77088 (Segfault when using SoapClient with null options).

Sockets:

    Fixed bug #77136 (Unsupported IPV6_RECVPKTINFO constants on macOS).

Sodium:

    Fixed bug #77297 (SodiumException segfaults on PHP 7.3).

SPL:

    Fixed bug #77359 (spl_autoload causes segfault).
    Fixed bug #77360 (class_uses causes segfault).

SQLite3:

    Fixed bug #77051 (Issue with re-binding on SQLite3).

Xmlrpc:

    Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()).
    Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code).

[close]

http://www.php.net/
Titel: PHP 7.3.3
Beitrag von: SiLæncer am 07 März, 2019, 17:15
Changelog

Core:

    Fixed bug #77589 (Core dump using parse_ini_string with numeric sections).
    Fixed bug #77329 (Buffer Overflow via overly long Error Messages).
    Fixed bug #77494 (Disabling class causes segfault on member access).
    Fixed bug #77498 (Custom extension Segmentation fault when declare static property).
    Fixed bug #77530 (PHP crashes when parsing `(2)::class`).
    Fixed bug #77546 (iptcembed broken function).
    Fixed bug #77630 (rename() across the device may allow unwanted access during processing).

COM:

    Fixed bug #77621 (Already defined constants are not properly reported).
    Fixed bug #77626 (Persistence confusion in php_com_import_typelib()).

EXIF:

    Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).
    Fixed bug #77540 (Invalid Read on exif_process_SOFn).
    Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
    Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).

Mbstring:

    Fixed bug #77514 (mb_ereg_replace() with trailing backslash adds null byte).

MySQL:

    Disabled LOCAL INFILE by default, can be enabled using php.ini directive mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE attribute for pdo_mysql.

OpenSSL:

    Fixed bug #77390 (feof might hang on TLS streams in case of fragmented TLS records).

PDO_OCI:

    Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO, and CLIENT_IDENTIFIER.

PHAR:

    Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename).
    Fixed bug #77586 (phar_tar_writeheaders_int() buffer overflow).

phpdbg:

    Fixed bug #76596 (phpdbg support for display_errors=stderr).

SPL:

    Fixed bug #51068 (DirectoryIterator glob:// don't support current path relative queries).
    Fixed bug #77431 (openFile() silently truncates after a null byte).

Standard:

    Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions).
    Fixed bug #77612 (setcookie() sets incorrect SameSite header if all of its options filled).

[close]

http://www.php.net/
Titel: PHP 7.3.4
Beitrag von: SiLæncer am 05 April, 2019, 20:40
Changelog

Core:

    Fixed bug #77738 (Nullptr deref in zend_compile_expr).
    Fixed bug #77660 (Segmentation fault on break 2147483648).
    Fixed bug #77652 (Anonymous classes can lose their interface information).
    Fixed bug #77345 (Stack Overflow caused by circular reference in garbage collection).
    Fixed bug #76956 (Wrong value for 'syslog.filter' documented in php.ini).

Apache2Handler:

    Fixed bug #77648 (BOM in sapi/apache2handler/php_functions.c).

Bcmath:

    Fixed bug #77742 (bcpow() implementation related to gcc compiler optimization).

CLI Server:

    Fixed bug #77722 (Incorrect IP set to $_SERVER['REMOTE_ADDR'] on the localhost).

COM:

    Fixed bug #77578 (Crash when php unload).

EXIF:

    Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s).
    Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value).

FPM:

    Fixed bug #77677 (FPM fails to build on AIX due to missing WCOREDUMP).

GD:

    Fixed bug #77700 (Writing truecolor images as GIF ignores interlace flag).

MySQLi:

    Fixed bug #77597 (mysqli_fetch_field hangs scripts).

Opcache:

    Fixed bug #77743 (Incorrect pi node insertion for jmpznz with identical successors).

PCRE:

    Fixed bug #76127 (preg_split does not raise an error on invalid UTF-8).

Phar:

    Fixed bug #77697 (Crash on Big_Endian platform).

phpdbg:

    Fixed bug #77767 (phpdbg break cmd aliases listed in help do not match actual aliases).

sodium:

    Fixed bug #77646 (sign_detached() strings not terminated).

SQLite3:

    Added sqlite3.defensive INI directive.

Standard:

    Fixed bug #77664 (Segmentation fault when using undefined constant in custom wrapper).
    Fixed bug #77669 (Crash in extract() when overwriting extracted array).
    Fixed bug #76717 (var_export() does not create a parsable value for PHP_INT_MIN).
    Fixed bug #77765 (FTP stream wrapper should set the directory as executable).

[close]

http://www.php.net/
Titel: PHP 7.3.6
Beitrag von: SiLæncer am 30 Mai, 2019, 18:15
Changelog

    cURL:
        Implemented FR #72189 (Add missing CURL_VERSION_* constants).
    EXIF:
        Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16).
    FPM:
        Fixed bug #77934 (php-fpm kill -USR2 not working).
        Fixed bug #77921 (static.php.net doesn't work anymore).
    GD:
        Fixed bug #77943 (imageantialias($image, false); does not work).
        Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm).
    Iconv:
        Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow).
    JSON:
        Fixed bug #77843 (Use after free with json serializer).
    Opcache:
        Fixed possible crashes, because of inconsistent PCRE cache and opcache SHM reset.
    PDO_MySQL:
        Fixed bug #77944 (Wrong meta pdo_type for bigint on LLP64).
    Reflection:
        Fixed bug #75186 (Inconsistent reflection of Closure:::__invoke()).
    Session:
        Fixed bug #77911 (Wrong warning for session.sid_bits_per_character).
    SOAP:
        Fixed bug #77945 (Segmentation fault when constructing SoapClient with WSDL_CACHE_BOTH).
    SPL:
        Fixed bug #77024 (SplFileObject::__toString() may return array).
    SQLite:
        Fixed bug #77967 (Bypassing open_basedir restrictions via file uris).
    Standard:
        Fixed bug #77931 (Warning for array_map mentions wrong type).
        Fixed bug #78003 (strip_tags output change since PHP 7.3).

[close]

www.php.net/
Titel: PHP 7.4.0
Beitrag von: SiLæncer am 28 November, 2019, 05:15
Changelog

PHP                                                                        NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
28 Nov 2019, PHP 7.4.0


- Core:
  . Implemented RFC: Deprecate curly brace syntax for accessing array elements
    and string offsets.
    https://wiki.php.net/rfc/deprecate_curly_braces_array_access (Andrey Gromov)
  . Implemented RFC: Deprecations for PHP 7.4.
    https://wiki.php.net/rfc/deprecations_php_7_4 (Kalle, Nikita)
  . Fixed bug #52752 (Crash when lexing). (Nikita)
  . Fixed bug #60677 (CGI doesn't properly validate shebang line contains #!).
    (Nikita)
  . Fixed bug #71030 (Self-assignment in list() may have inconsistent behavior).
    (Nikita)
  . Fixed bug #72530 (Use After Free in GC with Certain Destructors). (Nikita)
  . Fixed bug #75921 (Inconsistent: No warning in some cases when stdObj is
    created on the fly). (David Walker)
  . Implemented FR #76148 (Add array_key_exists() to the list of specially
    compiled functions). (Majkl578)
  . Fixed bug #76430 (__METHOD__ inconsistent outside of method).
    (Ryan McCullagh, Nikita)
  . Fixed bug #76451 (Aliases during inheritance type checks affected by
    opcache). (Nikita)
  . Implemented FR #77230 (Support custom CFLAGS and LDFLAGS from environment).
    (cmb)
  . Fixed bug #77345 (Stack Overflow caused by circular reference in garbage
    collection). (Alexandru Patranescu, Nikita, Dmitry)
  . Fixed bug #77812 (Interactive mode does not support PHP 7.3-style heredoc).
    (cmb, Nikita)
  . Fixed bug #77877 (call_user_func() passes $this to static methods).
    (Dmitry)
  . Fixed bug #78066 (PHP eats the first byte of a program that comes from
    process substitution). (Nikita)
  . Fixed bug #78151 (Segfault caused by indirect expressions in PHP 7.4a1).
    (Nikita)
  . Fixed bug #78154 (SEND_VAR_NO_REF does not always send reference). (Nikita)
  . Fixed bug #78182 (Segmentation fault during by-reference property
    assignment). (Nikita)
  . Fixed bug #78212 (Segfault in built-in webserver). (cmb)
  . Fixed bug #78220 (Can't access OneDrive folder). (cmb, ab)
  . Fixed bug #78226 (Unexpected __set behavior with typed properties). (Nikita)
  . Fixed bug #78239 (Deprecation notice during string conversion converted to
    exception hangs). (Nikita)
  . Fixed bug #78335 (Static properties/variables containing cycles report as
    leak). (Nikita)
  . Fixed bug #78340 (Include of stream wrapper not reading whole file).
    (Nikita)
  . Fixed bug #78344 (Segmentation fault on zend_check_protected). (Nikita)
  . Fixed bug #78356 (Array returned from ArrayAccess is incorrectly unpacked
    as argument). (Nikita)
  . Fixed bug #78379 (Cast to object confuses GC, causes crash). (Dmitry)
  . Fixed bug #78386 (fstat mode has unexpected value on PHP 7.4). (cmb)
  . Fixed bug #78396 (Second file_put_contents in Shutdown hangs script).
    (Nikita)
  . Fixed bug #78406 (Broken file includes with user-defined stream filters).
    (Nikita)
  . Fixed bug #78438 (Corruption when __unserializing deeply nested structures).
    (cmb, Nikita)
  . Fixed bug #78441 (Parse error due to heredoc identifier followed by digit).
    (cmb)
  . Fixed bug #78454 (Consecutive numeric separators cause OOM error).
    (Theodore Brown)
  . Fixed bug #78460 (PEAR installation failure). (Peter Kokot, L. Declercq)
  . Fixed bug #78531 (Crash when using undefined variable as object). (Dmitry)
  . Fixed bug #78535 (auto_detect_line_endings value not parsed as bool).
    (bugreportuser)
  . Fixed bug #78604 (token_get_all() does not properly tokenize FOO<?php with
    short_open_tag=0). (Nikita)
  . Fixed bug #78614 (Does not compile with DTRACE anymore).
    (tz at FreeBSD dot org)
  . Fixed bug #78620 (Out of memory error). (cmb, Nikita)
  . Fixed bug #78632 (method_exists() in php74 works differently from php73 in
    checking priv. methods). (Nikita)
  . Fixed bug #78644 (SEGFAULT in ZEND_UNSET_OBJ_SPEC_VAR_CONST_HANDLER).
    (Nikita)
  . Fixed bug #78658 (Memory corruption using Closure::bindTo). (Nikita)
  . Fixed bug #78656 (Parse errors classified as highest log-level). (Erik
    Lundin)
  . Fixed bug #78662 (stream_write bad error detection). (Remi)
  . Fixed bug #78768 (redefinition of typedef zend_property_info). (Nikita)
  . Fixed bug #78788 (./configure generates invalid php_version.h). (max)
  . Fixed incorrect usage of QM_ASSIGN instruction. It must not return IS_VAR.
    As a side effect, this allowed passing left hand list() "by reference",
    instead of compile-time error. (Dmitry)

- CLI:
  . The built-in CLI server now reports the request method in log files.
    (Simon Welsh)

- COM:
  . Deprecated registering of case-insensitive constants from typelibs. (cmb)
  . Fixed bug #78650 (new COM Crash). (cmb)
  . Fixed bug #78694 (Appending to a variant array causes segfault). (cmb)

- CURL:
  . Fixed bug #76480 (Use curl_multi_wait() so that timeouts are respected).
    (Pierrick)
  . Implemented FR #77711 (CURLFile should support UNICODE filenames). (cmb)
  . Deprecated CURLPIPE_HTTP1. (cmb)
  . Deprecated $version parameter of curl_version(). (cmb)

- Date:
  . Updated timelib to 2018.02. (Derick)
  . Fixed bug #69044 (discrepency between time and microtime). (krakjoe)
  . Fixed bug #70153 (\DateInterval incorrectly unserialized). (Maksim Iakunin)
  . Fixed bug #75232 (print_r of DateTime creating side-effect). (Nikita)
  . Fixed bug #78383 (Casting a DateTime to array no longer returns its
    properties). (Nikita)
  . Fixed bug #78751 (Serialising DatePeriod converts DateTimeImmutable). (cmb)

- Exif:
  . Fixed bug #78333 (Exif crash (bus error) due to wrong alignment and
    invalid cast). (Nikita)
  . Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment).
    (CVE-2019-11042) (Stas)
  . Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail).
    (CVE-2019-11041) (Stas)

- Fileinfo:
  . Fixed bug #78075 (finfo_file treats JSON file as text/plain). (Anatol)
  . Fixed bug #78183 (finfo_file shows wrong mime-type for .tga file).
   (Anatol)

- Filter:
  . The filter extension no longer has the --with-pcre-dir on Unix builds,
    allowing the extension to be once more compiled as shared using
    ./configure. (Kalle)

- FFI:
  . Added FFI extension. (Dmitry)
  . Fixed bug #78488 (OOB in ZEND_FUNCTION(ffi_trampoline)). (Dmitry)
  . Fixed bug #78543 (is_callable() on FFI\CData throws Exception). (cmb)
  . Fixed bug #78716 (Function name mangling is wrong for some parameter
    types). (cmb)
  . Fixed bug #78762 (Failing FFI::cast() may leak memory). (cmb)
  . Fixed bug #78761 (Zend memory heap corruption with preload and casting).
    (cmb)
  . Implement FR #78270 (Support __vectorcall convention with FFI). (cmb)
  . Added missing FFI::isNull(). (Philip Hofstetter)

- FPM:
  . Implemented FR #72510 (systemd service should be hardened). (Craig Andrews)
  . Fixed bug #74083 (master PHP-fpm is stopped on multiple reloads).
    (Maksim Nikulin)
  . Fixed bug #78334 (fpm log prefix message includes wrong stdout/stderr
    notation). (Tsuyoshi Sadakata)
  . Fixed bug #78599 (env_path_info underflow in fpm_main.c can lead to RCE).
    (CVE-2019-11043) (Jakub Zelenka)

- GD:
  . Implemented the scatter filter (IMG_FILTER_SCATTER). (Kalle)
  . The bundled libgd behaves now like system libgd wrt. IMG_CROP_DEFAULT never
    falling back to IMG_CROP_SIDES.
  . The default $mode parameter of imagecropauto() has been changed to
    IMG_CROP_DEFAULT; passing -1 is now deprecated.
  . Added support for aspect ratio preserving scaling to a fixed height for
    imagescale(). (Andreas Treichel)
  . Added TGA read support. (cmb)
  . Fixed bug #73291 (imagecropauto() $threshold differs from external libgd).
    (cmb)
  . Fixed bug #76324 (cannot detect recent versions of freetype with
    pkg-config). (Eli Schwartz)
  . Fixed bug #78314 (missing freetype support/functions with external gd).
    (Remi)

- GMP:
  . Fixed bug #78574 (broken shared build). (Remi)

- Hash:
  . The hash extension is now an integral part of PHP and cannot be disabled
    as per RFC: https://wiki.php.net/rfc/permanent_hash_ext. (Kalle)
  . Implemented FR #71890 (crc32c checksum algorithm). (Andrew Brampton)

- Iconv:
  . Fixed bug #78342 (Bus error in configure test for iconv //IGNORE). (Rainer
    Jung)
  . Fixed bug #78642 (Wrong libiconv version displayed). (gedas at martynas,
    cmb).

- Libxml:
  . Fixed bug #78279 (libxml_disable_entity_loader settings is shared between
    requests (cgi-fcgi)). (Nikita)

- InterBase:
  . Unbundled the InterBase extension and moved it to PECL. (Kalle)

- Intl:
  . Raised requirements to ICU ≥ 50.1. (cmb)
  . Changed ResourceBundle to implement Countable. (LeSuisse)
  . Changed default of $variant parameter of idn_to_ascii() and idn_to_utf8().
    (cmb)

- LDAP:
  . Deprecated ldap_control_paged_result_response and ldap_control_paged_result

- LiteSpeed:
  . Updated to LiteSpeed SAPI V7.5 (Fixed clean shutdown). (George Wang)
  . Updated to LiteSpeed SAPI V7.4.3 (increased response header count limit from
    100 to 1000, added crash handler to cleanly shutdown PHP request, added
    CloudLinux mod_lsapi mode). (George Wang)
  . Fixed bug #76058 (After "POST data can't be buffered", using php://input
    makes huge tmp files). (George Wang)

- MBString:
  . Fixed bug #77907 (mb-functions do not respect default_encoding). (Nikita)
  . Fixed bug #78579 (mb_decode_numericentity: args number inconsistency).
    (cmb)
  . Fixed bug #78609 (mb_check_encoding() no longer supports stringable
    objects). (cmb)

- MySQLi:
  . Fixed bug #67348 (Reading $dbc->stat modifies $dbc->affected_rows).
    (Derick)
  . Fixed bug #76809 (SSL settings aren't respected when persistent connections
    are used). (fabiomsouto)
  . Fixed bug #78179 (MariaDB server version incorrectly detected). (cmb)
  . Fixed bug #78213 (Empty row pocket). (cmb)

- MySQLnd:
  . Fixed connect_attr issues and added the _server_host connection attribute.
    (Qianqian Bu)
  . Fixed bug #60594 (mysqlnd exposes 160 lines of stats in phpinfo). (PeeHaa)

- ODBC:
  . Fixed bug #78473 (odbc_close() closes arbitrary resources). (cmb)

- Opcache:
  . Implemented preloading RFC: https://wiki.php.net/rfc/preload. (Dmitry)
  . Add opcache.preload_user INI directive. (Dmitry)
  . Added new INI directive opcache.cache_id (Windows only). (cmb)
  . Fixed bug #78106 (Path resolution fails if opcache disabled during request).
    (Nikita)
  . Fixed bug #78175 (Preloading segfaults at preload time and at runtime).
    (Dmitry)
  . Fixed bug #78202 (Opcache stats for cache hits are capped at 32bit NUM).
    (cmb)
  . Fixed bug #78271 (Invalid result of if-else). (Nikita)
  . Fixed bug #78341 (Failure to detect smart branch in DFA pass). (Nikita)
  . Fixed bug #78376 (Incorrect preloading of constant static properties).
    (Dmitry)
  . Fixed bug #78429 (opcache_compile_file(__FILE__); segfaults). (cmb)
  . Fixed bug #78512 (Cannot make preload work). (Dmitry)
  . Fixed bug #78514 (Preloading segfaults with inherited typed property).
    (Nikita)
  . Fixed bug #78654 (Incorrectly computed opcache checksum on files with
    non-ascii characters). (mhagstrand)

- OpenSSL:
  . Added TLS 1.3 support to streams including new tlsv1.3 stream.
    (Codarren Velvindron, Jakub Zelenka)
  . Added openssl_x509_verify function. (Ben Scholzen)
  . openssl_random_pseudo_bytes() now throws in error conditions.
    (Sammy Kaye Powers)
  . Changed the default config path (Windows only). (cmb)
  . Fixed bug #78231 (Segmentation fault upon stream_socket_accept of exported
    socket-to-stream). (Nikita)
  . Fixed bug #78391 (Assertion failure in openssl_random_pseudo_bytes).
    (Nikita)
  . Fixed bug #78775 (TLS issues from HTTP request affecting other encrypted
    connections). (Nikita)

- Pcntl:
  . Fixed bug #77335 (PHP is preventing SIGALRM from specifying SA_RESTART).
    (Nikita)

- PCRE:
  . Implemented FR #77094 (Support flags in preg_replace_callback). (Nikita)
  . Fixed bug #72685 (Repeated UTF-8 validation of same string in UTF-8 mode).
    (Nikita)
  . Fixed bug #73948 (Preg_match_all should return NULLs on trailing optional
    capture groups).
  . Fixed bug #78338 (Array cross-border reading in PCRE). (cmb)
  . Fixed bug #78349 (Bundled pcre2 library missing LICENCE file). (Peter Kokot)

- PDO:
  . Implemented FR #71885 (Allow escaping question mark placeholders).
    https://wiki.php.net/rfc/pdo_escape_placeholders (Matteo)
  . Fixed bug #77849 (Disable cloning of PDO handle/connection objects).
    (camporter)
  . Implemented FR #78033 (PDO - support username & password specified in
    DSN). (sjon)

- PDO_Firebird:
  . Implemented FR #65690 (PDO_Firebird should also support dialect 1).
    (Simonov Denis)
  . Implemented FR #77863 (PDO firebird support type Boolean in input
    parameters). (Simonov Denis)

- PDO_MySQL:
  . Fixed bug #41997 (SP call yields additional empty result set). (cmb)
  . Fixed bug #78623 (Regression caused by "SP call yields additional empty
    result set"). (cmb)

- PDO_OCI:
  . Support Oracle Database tracing attributes ACTION, MODULE,
    CLIENT_INFO, and CLIENT_IDENTIFIER. (Cameron Porter)
  . Implemented FR #76908 (PDO_OCI getColumnMeta() not implemented).
    (Valentin Collet, Chris Jones, Remi)

- PDO_SQLite:
  . Implemented sqlite_stmt_readonly in PDO_SQLite. (BohwaZ)
  . Raised requirements to SQLite 3.5.0. (cmb)
  . Fixed bug #78192 (SegFault when reuse statement after schema has changed).
    (Vincent Quatrevieux)
  . Fixed bug #78348 (Remove -lrt from pdo_sqlite.so). (Peter Kokot)

- Phar:
  . Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN). (cmb)

- phpdbg:
  . Fixed bug #76596 (phpdbg support for display_errors=stderr). (kabel)
  . Fixed bug #76801 (too many open files). (alekitto)
  . Fixed bug #77800 (phpdbg segfaults on listing some conditional breakpoints).
    (krakjoe)
  . Fixed bug #77805 (phpdbg build fails when readline is shared). (krakjoe)

- Recode:
  . Unbundled the recode extension. (cmb)

- Reflection:
  . Fixed bug #76737 (Unserialized reflection objects are broken, they
    shouldn't be serializable). (Nikita)
  . Fixed bug #78263 (\ReflectionReference::fromArrayElement() returns null
    while item is a reference). (Nikita)
  . Fixed bug #78410 (Cannot "manually" unserialize class that is final and
    extends an internal one). (Nikita)
  . Fixed bug #78697 (ReflectionClass::implementsInterface - inaccurate error
    message with traits). (villfa)
  . Fixed bug #78774 (ReflectionNamedType on Typed Properties Crash). (Nikita)

- Session:
  . Fixed bug #78624 (session_gc return value for user defined session
    handlers). (bshaffer)

- SimpleXML:
  . Implemented FR #65215 (SimpleXMLElement could register as implementing
    Countable). (LeSuisse)
  . Fixed bug #75245 (Don't set content of elements with only whitespaces).
    (eriklundin)

- Sockets:
  . Fixed bug #67619 (Validate length on socket_write). (thiagooak)
  . Fixed bug #78665 (Multicasting may leak memory). (cmb)

- sodium:
  . Fixed bug #77646 (sign_detached() strings not terminated). (Frank)
  . Fixed bug #78510 (Partially uninitialized buffer returned by
    sodium_crypto_generichash_init()). (Frank Denis, cmb)
  . Fixed bug #78516 (password_hash(): Memory cost is not in allowed range).
    (cmb, Nikita)

- SPL:
  . Fixed bug #77518 (SeekableIterator::seek() should accept 'int' typehint as
    documented). (Nikita)
  . Fixed bug #78409 (Segfault when creating instance of ArrayIterator without
    constructor). (Nikita)
  . Fixed bug #78436 (Missing addref in SplPriorityQueue EXTR_BOTH mode).
    (Nikita)
  . Fixed bug #78456 (Segfault when serializing SplDoublyLinkedList). (Nikita)

- SQLite3:
  . Unbundled libsqlite. (cmb)
  . Raised requirements to SQLite 3.7.4. (cmb)
  . Forbid (un)serialization of SQLite3, SQLite3Stmt and SQLite3Result. (cmb)
  . Added support for the SQLite @name notation. (cmb, BohwaZ)
  . Added SQLite3Stmt::getSQL() to retrieve the SQL of the statement. (Bohwaz)
  . Implement FR ##70950 (Make SQLite3 Online Backup API available). (BohwaZ)

- Standard:
  . Implemented password hashing registry RFC:
    https://wiki.php.net/rfc/password_registry. (Sara)
  . Implemented RFC where password_hash() has argon2i(d) implementations from
    ext/sodium when PHP is built without libargon:
    https://wiki.php.net/rfc/sodium.argon.hash (Sara)
  . Implemented FR #38301 (field enclosure behavior in fputcsv). (cmb)
  . Implemented FR #51496 (fgetcsv should take empty string as an escape). (cmb)
  . Fixed bug #73535 (php_sockop_write() returns 0 on error, can be used to
    trigger Denial of Service). (Nikita)
  . Fixed bug #74764 (Bindto IPv6 works with file_get_contents but fails with
    stream_socket_client). (Ville Hukkamäki)
  . Fixed bug #76859 (stream_get_line skips data if used with data-generating
    filter). (kkopachev)
  . Implemented FR #77377 (No way to handle CTRL+C in Windows). (Anatol)
  . Fixed bug #77930 (stream_copy_to_stream should use mmap more often).
    (Nikita)
  . Implemented FR #78177 (Make proc_open accept command array). (Nikita)
  . Fixed bug #78208 (password_needs_rehash() with an unknown algo should always
    return true). (Sara)
  . Fixed bug #78241 (touch() does not handle dates after 2038 in PHP 64-bit). (cmb)
  . Fixed bug #78282 (atime and mtime mismatch). (cmb)
  . Fixed bug #78326 (improper memory deallocation on stream_get_contents()
    with fixed length buffer). (Albert Casademont)
  . Fixed bug #78346 (strip_tags no longer handling nested php tags). (cmb)
  . Fixed bug #78506 (Error in a php_user_filter::filter() is not reported).
    (Nikita)
  . Fixed bug #78549 (Stack overflow due to nested serialized input). (Nikita)
  . Fixed bug #78759 (array_search in $GLOBALS). (Nikita)

- Testing:
  . Fixed bug #78684 (PCRE bug72463_2 test is sending emails on Linux). (cmb)

- Tidy:
  . Added TIDY_TAG_* constants for HTML5 elements. (cmb)
  . Fixed bug #76736 (wrong reflection for tidy_get_head, tidy_get_html,
    tidy_get_root, and tidy_getopt) (tandre)

- WDDX:
  . Deprecated and unbundled the WDDX extension. (cmb)

- Zip:
  . Fixed bug #78641 (addGlob can modify given remove_path value). (cmb)


<<< NOTE: Insert NEWS from last stable release here prior to actual release! >>>

[close]

Download -> https://windows.php.net/downloads/releases/

www.php.net/
Titel: PHP 7.4.1
Beitrag von: SiLæncer am 18 Dezember, 2019, 13:16
Changelog

    Bcmath:
        Fixed bug #78878 (Buffer underflow in bc_shift_addsub).
    Core:
        Fixed bug #78862 (link() silently truncates after a null byte on Windows).
        Fixed bug #78863 (DirectoryIterator class silently truncates after a null byte).
        Fixed bug #78943 (mail() may release string with refcount==1 twice).
        Fixed bug #78810 (RW fetches do not throw "uninitialized property" exception).
        Fixed bug #78868 (Calling __autoload() with incorrect EG(fake_scope) value).
        Fixed bug #78296 (is_file fails to detect file).
        Fixed bug #78883 (fgets(STDIN) fails on Windows).
        Fixed bug #78898 (call_user_func(['parent', ...]) fails while other succeed).
        Fixed bug #78904 (Uninitialized property triggers __get()).
        Fixed bug #78926 (Segmentation fault on Symfony cache:clear).
    GD:
        Fixed bug #78849 (GD build broken with -D SIGNED_COMPARE_SLOW).
        Fixed bug #78923 (Artifacts when convoluting image with transparency).
    EXIF:
        Fixed bug #78793 (Use-after-free in exif parsing under memory sanitizer).
        Fixed bug #78910 (Heap-buffer-overflow READ in exif).
    FPM:
        Fixed bug #76601 (Partially working php-fpm ater incomplete reload).
        Fixed bug #78889 (php-fpm service fails to start).
        Fixed bug #78916 (php-fpm 7.4.0 don't send mail via mail()).
    Intl:
        Implemented FR #78912 (INTL Support for accounting format).
    Mysqlnd:
        Fixed bug #78823 (ZLIB_LIBS not added to EXTRA_LIBS).
    OPcache:
        Fixed $x = (bool)$x; with opcache (should emit undeclared variable notice).
        Fixed bug #78935 (Preloading removes classes that have dependencies).
    PCRE:
        Fixed bug #78853 (preg_match() may return integer > 1).
    Reflection:
        Fixed bug #78895 (Reflection detects abstract non-static class as abstract static. IS_IMPLICIT_ABSTRACT is not longer used).
    Standard:
        Fixed bug #77638 (var_export'ing certain class instances segfaults).
        Fixed bug #78840 (imploding $GLOBALS crashes).
        Fixed bug #78833 (Integer overflow in pack causes out-of-bound access).
        Fixed bug #78814 (strip_tags allows / in tag name => whitelist bypass).

[close]

www.php.net/
Titel: PHP 7.4.5 / 7.3.17 / 7.2.30
Beitrag von: SiLæncer am 18 April, 2020, 09:50
PHP 7.4.5 changelog

    Core:
        Fixed bug #79364 (When copy empty array, next key is unspecified).
        Fixed bug #78210 (Invalid pointer address).
    CURL:
        Fixed bug #79199 (curl_copy_handle() memory leak).
    Date:
        Fixed bug #79396 (DateTime hour incorrect during DST jump forward).
        Fixed bug #74940 (DateTimeZone loose comparison always true).
    FPM:
        Implement request #77062 (Allow numeric [UG]ID in FPM listen.{owner,group}) (Andre Nathan)
    Iconv:
        Fixed bug #79200 (Some iconv functions cut Windows-1258).
    OPcache:
        Fixed bug #79412 (Opcache chokes and uses 100% CPU on specific script).
    Session:
        Fixed bug #79413 (session_create_id() fails for active sessions).
    Shmop:
        Fixed bug #79427 (Integer Overflow in shmop_open()).
    SimpleXML:
        Fixed bug #61597 (SXE properties may lack attributes and content).
    SOAP:
        Fixed bug #79357 (SOAP request segfaults when any request parameter is missing).
    Spl:
        Fixed bug #75673 (SplStack::unserialize() behavior).
        Fixed bug #79393 (Null coalescing operator failing with SplFixedArray).
    Standard:
        Fixed bug #79330 (shell_exec() silently truncates after a null byte).
        Fixed bug #79410 (system() swallows last chunk if it is exactly 4095 bytes without newline).
        Fixed bug #79465 (OOB Read in urldecode()). (CVE-2020-7067)
    Zip:
        Fixed bug #79296 (ZipArchive::open fails on empty file).
        Fixed bug #79424 (php_zip_glob uses gl_pathc after call to globfree).

[close]

PHP 7.3.17 changelog

    Core:
        Fixed bug #79364 (When copy empty array, next key is unspecified).
        Fixed bug #78210 (Invalid pointer address).
    CURL:
        Fixed bug #79199 (curl_copy_handle() memory leak).
    Date:
        Fixed bug #79396 (DateTime hour incorrect during DST jump forward).
    Iconv:
        Fixed bug #79200 (Some iconv functions cut Windows-1258).
    OPcache:
        Fixed bug #79412 (Opcache chokes and uses 100% CPU on specific script).
    Session:
        Fixed bug #79413 (session_create_id() fails for active sessions).
    Shmop:
        Fixed bug #79427 (Integer Overflow in shmop_open()).
    SimpleXML:
        Fixed bug #61597 (SXE properties may lack attributes and content).
    Spl:
        Fixed bug #75673 (SplStack::unserialize() behavior).
        Fixed bug #79393 (Null coalescing operator failing with SplFixedArray).
    Standard:
        Fixed bug #79330 (shell_exec() silently truncates after a null byte).
        Fixed bug #79465 (OOB Read in urldecode()). (CVE-2020-7067)
        Fixed bug #79410 (system() swallows last chunk if it is exactly 4095 bytes without newline).
    Zip:
        Fixed bug #79296 (ZipArchive::open fails on empty file).
        Fixed bug #79424 (php_zip_glob uses gl_pathc after call to globfree).

[close]

PHP 7.2.30 changelog

Standard:

    Fixed bug #79468 (SIGSEGV when closing stream handle with a stream filter appended).
    Fixed bug #79330 (shell_exec() silently truncates after a null byte).
    Fixed bug #79465 (OOB Read in urldecode()).

[close]

www.php.net/
Titel: PHP 7.4.6
Beitrag von: SiLæncer am 12 Mai, 2020, 19:15
Changelog

    Core:

    Fixed bug #78434 (Generator yields no items after valid() call). (Nikita)
    Fixed bug #79477 (casting object into array creates references). (Nikita)
    Fixed bug #79514 (Memory leaks while including unexistent file). (cmb,
    Nikita)
    Fixed bug #79470 (PHP incompatible with 3rd party file system on demand).
    (cmb)
    Fixed bug #78784 (Unable to interact with files inside a VFS for Git
    Repository). (cmb)
    Fixed bug #78875 (Long variables cause OOM and temp files are not cleaned).
    (cmb) (CVE-2019-11048)
    Fixed bug #78876 (Long variables cause OOM and temp files are not cleaned). (cmb) (CVE-2019-11048)

    DOM:

    Fixed bug #78221 (DOMNode::normalize() doesn't remove empty text nodes). (cmb)

    EXIF:

    Fixed bug #79336 (ext/exif/tests/bug79046.phpt fails on Big endian arch) (Nikita)

    FCGI:

    Fixed bug #79491 (Search for .user.ini extends up to root dir). (cmb)

    MBString:

    Fixed bug #79441 (Segfault in mb_chr() if internal encoding is unsupported). (Girgias)
    OpenSSL:

    Fixed bug #79497 (stream_socket_client() throws an unknown error sometimes with <1s timeout). (Joe Cai)
    PCRE:

    Upgraded to PCRE2 10.34. (cmb)

    Phar:

    Fixed bug #79503 (Memory leak on duplicate metadata). (cmb)

    SimpleXML:

    Fixed bug #79528 (Different object of the same xml between 7.4.5 and 7.4.4). (cmb)

    SPL:

    Fixed bug #69264 (__debugInfo() ignored while extending SPL classes). (cmb)
    Fixed bug #67369 (ArrayObject serialization drops the iterator class). (Alex Dowad)

    Standard:

    Fixed bug #79468 (SIGSEGV when closing stream handle with a stream filter appended). (dinosaur)
    Fixed bug #79447 (Serializing uninitialized typed properties with __sleep should not throw). (nicolas-grekas)

[close]

www.php.net/
Titel: PHP 7.3.20
Beitrag von: SiLæncer am 07 Juli, 2020, 19:45
Changelog

    Core:

    Fixed bug #79650 (php-win.exe 100% cpu lockup). (cmb)
    Fixed bug #79668 (get_defined_functions(true) may miss functions). (cmb, Nikita)
    Fixed possibly unsupported timercmp() usage. (cmb)

    Exif:

    Fixed bug #79687 (Sony picture - PHP Warning - Make, Model, MakerNotes)

    Filter:

    Fixed bug #73527 (Invalid memory access in php_filter_strip). (cmb)

    GD:

    Fixed bug #79676 (imagescale adds black border with IMG_BICUBIC). (cmb)

    OpenSSL:

    Fixed bug #62890 (default_socket_timeout=-1 causes connection to timeout).

    PDO SQLite:

    Fixed bug #79664 (PDOStatement::getColumnMeta fails on empty result set).

    SPL:

    Fixed bug #79710 (Reproducible segfault in error_handler during GC involved an SplFileObject). (Nikita)

    Standard:

    Fixed bug #74267 (segfault with streams and invalid data). (cmb)
    Fixed bug #79579 (ZTS build of PHP 7.3.17 doesn't handle ERANGE for posix_getgrgid and others). (Böszörményi Zoltán)

[close]

www.php.net/
Titel: PHP 7.4.9
Beitrag von: SiLæncer am 04 August, 2020, 20:15
Changelog

- Apache:
  . Fixed bug #79030 (Upgrade apache2handler's php_apache_sapi_get_request_time
    to return usec). (Herbert256)

- COM:
  . Fixed bug #63208 (BSTR to PHP string conversion not binary safe). (cmb)
  . Fixed bug #63527 (DCOM does not work with Username, Password parameter).
    (cmb)

- Core:
  . Fixed bug #79740 (serialize() and unserialize() methods can not be called
    statically). (Nikita)
  . Fixed bug #79783 (Segfault in php_str_replace_common). (Nikita)
  . Fixed bug #79778 (Assertion failure if dumping closure with unresolved
    static variable). (Nikita)
  . Fixed bug #79779 (Assertion failure when assigning property of string
    offset by reference). (Nikita)
  . Fixed bug #79792 (HT iterators not removed if empty array is destroyed).
    (Nikita)
  . Fixed bug #78598 (Changing array during undef index RW error segfaults).
    (Nikita)
  . Fixed bug #79784 (Use after free if changing array during undef var during
    array write fetch). (Nikita)
  . Fixed bug #79793 (Use after free if string used in undefined index warning
    is changed). (Nikita)
  . Fixed bug #79862 (Public non-static property in child should take priority
    over private static). (Nikita)
  . Fixed bug #79877 (getimagesize function silently truncates after a null
    byte) (cmb)

- Fileinfo:
  . Fixed bug #79756 (finfo_file crash (FILEINFO_MIME)). (cmb)

- FTP:
  . Fixed bug #55857 (ftp_size on large files). (cmb)

- Mbstring:
  . Fixed bug #79787 (mb_strimwidth does not trim string). (XXiang)

- Phar:
  . Fixed bug #79797 (Use of freed hash key in the phar_parse_zipfile
    function). (CVE-2020-7068) (cmb)

- Reflection:
  . Fixed bug #79487 (::getStaticProperties() ignores property modifications).
    (cmb, Nikita)
  . Fixed bug #69804 (::getStaticPropertyValue() throws on protected props).
    (cmb, Nikita)
  . Fixed bug #79820 (Use after free when type duplicated into
    ReflectionProperty gets resolved). (Christopher Broadbent)

- Standard:
  . Fixed bug #70362 (Can't copy() large 'data://' with open_basedir). (cmb)
  . Fixed bug #78008 (dns_check_record() always return true on Alpine).
    (Andy Postnikov)
  . Fixed bug #79839 (array_walk() does not respect property types). (Nikita)

[close]

www.php.net/
Titel: PHP 7.4.10
Beitrag von: SiLæncer am 02 September, 2020, 18:45
Changelog

- Core:
  . Fixed bug #79884 (PHP_CONFIG_FILE_PATH is meaningless). (cmb)
  . Fixed bug #77932 (File extensions are case-sensitive). (cmb)
  . Fixed bug #79806 (realpath() erroneously resolves link to link). (cmb)
  . Fixed bug #79895 (PHP_CHECK_GCC_ARG does not allow flags with equal sign).
    (Santiago M. Mola)
  . Fixed bug #79919 (Stack use-after-scope in define()). (cmb)
  . Fixed bug #79934 (CRLF-only line in heredoc causes parsing error).
    (Pieter van den Ham)
  . Fixed bug #79947 (Memory leak on invalid offset type in compound
    assignment). (Nikita)

- COM:
  . Fixed bug #48585 (com_load_typelib holds reference, fails on second call).
    (cmb)

- Exif:
  . Fixed bug #75785 (Many errors from exif_read_data).
    (Níckolas Daniel da Silva)

- Gettext:
  . Fixed bug #70574 (Tests fail due to relying on Linux fallback behavior for
    gettext()). (Florian Engelhardt)

- LDAP:
  . Fixed memory leaks. (ptomulik)

- OPcache:
  . Fixed bug #73060 (php failed with error after temp folder cleaned up).
    (cmb)
  . Fixed bug #79917 (File cache segfault with a static variable in inherited
    method). (Nikita)

- PDO:
  . Fixed bug #64705 (errorInfo property of PDOException is null when
    PDO::__construct() fails). (Ahmed Abdou)

- Session:
  . Fixed bug #79724 (Return type does not match in ext/session/mod_mm.c).
    (Nikita)

- Standard:
  . Fixed bug #79930 (array_merge_recursive() crashes when called with array
    with single reference). (Nikita)
  . Fixed bug #79944 (getmxrr always returns true on Alpine linux). (Nikita)
  . Fixed bug #79951 (Memory leak in str_replace of empty string). (Nikita)

- XML:
  . Fixed bug #79922 (Crash after multiple calls to xml_parser_free()). (cmb)

[close]

www.php.net/
Titel: PHP 8.0.6
Beitrag von: SiLæncer am 05 Mai, 2021, 11:10
Changelog

06 May 2021, PHP 8.0.6

- PDO_pgsql:
  . Revert "Fixed bug #80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR)"
    from PHP 8.0.5.

29 Apr 2021, PHP 8.0.5

- Core:
  . Fixed bug #75776 (Flushing streams with compression filter is broken). (cmb)
  . Fixed bug #80811 (Function exec without $output but with $restult_code
    parameter crashes). (Nikita)
  . Fixed bug #80814 (threaded mod_php won't load on FreeBSD: No space
    available for static Thread Local Storage). (Dmitry)
  . Changed PowerPC CPU registers used by Zend VM to work around GCC bug.
    Old registers (r28/r29) might be clobbered by _restgpr routine used for
    return from C function compiled with -Os. (Dmitry)

- Dba:
  . Fixed bug #80817 (dba_popen() may cause segfault during RSHUTDOWN). (cmb)

- DOM:
  . Fixed bug #66783 (UAF when appending DOMDocument to element). (cmb)

- FFI:
  . Fixed bug #80847 (CData structs with fields of type struct can't be passed
    as C function argument). (Nickolas Daniel da Silva, Dmitry)

- FPM:
  . Fixed bug #80024 (Duplication of info about inherited socket after pool
    removing). (Jakub Zelenka)

- FTP:
  . Fixed bug #80880 (SSL_read on shutdown, ftp/proc_open). (cmb, Jakub
    Zelenka)

- IMAP:
  . Fixed bug #80800 (imap_open() fails when the flags parameter includes
    CL_EXPUNGE). (girgias)
  . Fixed bug #80710 (imap_mail_compose() header injection). (cmb, Stas)

- Intl:
  . Fixed bug #80763 (msgfmt_format() does not accept DateTime references).
    (cmb)

- LibXML:
  . Fixed bug #73533 (Invalid memory access in php_libxml_xmlCheckUTF8). (cmb)
  . Fixed bug #51903 (simplexml_load_file() doesn't use HTTP headers). (cmb)

- MySQLnd:
  . Fixed bug #80837 (Calling stmt_store_result after fetch doesn't throw an
    error). (Kamil Tekiela)

- Opcache:
  . Fixed bug #80839 (PHP problem with JIT). (Dmitry)
  . Fixed bug #80861 (erronous array key overflow in 2D array with JIT).
    (Dmitry)
  . Fixed bug #80786 (PHP crash using JIT). (Nikita)
  . Fixed bug #80782 (DASM_S_RANGE_VREG on PHP_INT_MIN-1). (Dmitry)

- Pcntl:
  . Fixed bug #79812 (Potential integer overflow in pcntl_exec()). (cmb)

- PCRE:
  . Fixed bug #80866 (preg_split ignores limit flag when pattern with \K has
    0-width fullstring match). (Kamil Tekiela)

- PDO_ODBC:
  . Fixed bug #80783 (PDO ODBC truncates BLOB records at every 256th byte).
    (cmb)

- PDO_pgsql:
  . Fixed bug #80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR).
    (Matteo)

- Session:
  . Fixed bug #80889 (Cannot set save handler when save_handler is invalid).
    (cmb)
  . Fixed bug #80774 (session_name() problem with backslash). (cmb)

- SOAP:
  . Fixed bug #69668 (SOAP special XML characters in namespace URIs not
    encoded). (cmb)

- Standard:
  . Fixed bug #80915 (Taking a reference to $_SERVER hides its values from
    phpinfo()). (Rowan Tommins)
  . Fixed bug #80914 ('getdir' accidentally defined as an alias of 'dir').
    (Rowan Tommins)
  . Fixed bug #80771 (phpinfo(INFO_CREDITS) displays nothing in CLI). (cmb)
  . Fixed bug #78719 (http wrapper silently ignores long Location headers).
    (cmb)
  . Fixed bug #80838 (HTTP wrapper waits for HTTP 1 response after HTTP 101).
    (manuelm)

- Zip:
  . Fixed bug #80825 (ZipArchive::isCompressionMethodSupported does not exist).
    (cmb)

[close]

Download: Klick (https://www.php.net/distributions/php-8.0.6.tar.gz)

www.php.net/
Titel: PHP 8.2.8
Beitrag von: SiLæncer am 05 Juli, 2023, 18:10
Changelog


- CLI:
  . Fixed bug GH-11246 (cli/get_set_process_title fails on MacOS).
    (James Lucas)

- Core:
  . Fixed build for the riscv64 architecture/GCC 12. (Daniil Gentili)

- Curl:
  . Fixed bug GH-11433 (Unable to set CURLOPT_ACCEPT_ENCODING to NULL).
    (nielsdos)

- Date:
  . Fixed bug GH-11455 (Segmentation fault with custom object date properties).
    (nielsdos)

- DOM:
  . Fixed bugs GH-11288 and GH-11289 and GH-11290 and GH-9142 (DOMExceptions
    and segfaults with replaceWith). (nielsdos)
  . Fixed bug GH-10234 (Setting DOMAttr::textContent results in an empty
    attribute value). (nielsdos)
  . Fix return value in stub file for DOMNodeList::item. (divinity76)
  . Fix spec compliance error with '*' namespace for
    DOMDocument::getElementsByTagNameNS. (nielsdos)
  . Fix DOMElement::append() and DOMElement::prepend() hierarchy checks.
    (nielsdos)
  . Fixed bug GH-11347 (Memory leak when calling a static method inside an
    xpath query). (nielsdos)
  . Fixed bug #67440 (append_node of a DOMDocumentFragment does not reconcile
    namespaces). (nielsdos)
  . Fixed bug #81642 (DOMChildNode::replaceWith() bug when replacing a node
    with itself). (nielsdos)
  . Fixed bug #77686 (Removed elements are still returned by getElementById).
    (nielsdos)
  . Fixed bug #70359 (print_r() on DOMAttr causes Segfault in
    php_libxml_node_free_list()). (nielsdos)
  . Fixed bug #78577 (Crash in DOMNameSpace debug info handlers). (nielsdos)
  . Fix lifetime issue with getAttributeNodeNS(). (nielsdos)
  . Fix "invalid state error" with cloned namespace declarations. (nielsdos)
  . Fixed bug #55294 and #47530 and #47847 (various namespace reconciliation
    issues). (nielsdos)
  . Fixed bug #80332 (Completely broken array access functionality with
    DOMNamedNodeMap). (nielsdos)

- Opcache:
  . Fix allocation loop in zend_shared_alloc_startup(). (nielsdos)
  . Access violation on smm_shared_globals with ALLOC_FALLBACK. (KoudelkaB)
  . Fixed bug GH-11336 (php still tries to unlock the shared memory ZendSem
    with opcache.file_cache_only=1 but it was never locked). (nielsdos)

- OpenSSL:
  . Fixed bug GH-9356 Incomplete validation of IPv6 Address fields in
    subjectAltNames (James Lucas, Jakub Zelenka).

- PCRE:
  . Fix preg_replace_callback_array() pattern validation. (ilutov)

- PGSQL:
  . Fixed intermittent segfault with pg_trace. (David Carlier)

- Phar:
  . Fix cross-compilation check in phar generation for FreeBSD. (peter279k)

- SPL:
  . Fixed bug GH-11338 (SplFileInfo empty getBasename with more than one
    slash). (nielsdos)

- Standard:
  . Fix access on NULL pointer in array_merge_recursive(). (ilutov)
  . Fix exception handling in array_multisort(). (ilutov)

- SQLite3:
  . Fixed bug GH-11451 (Invalid associative array containing duplicate
    keys). (nielsdos)

[close]

Download: https://windows.php.net/downloads/releases/
Titel: PHP 8.3.6
Beitrag von: SiLæncer am 11 April, 2024, 20:20
Changelog


    Core:

    Fixed GH-13569 (GC buffer unnecessarily grows up to GC_MAX_BUF_SIZE when scanning WeakMaps).
    Fixed bug GH-13612 (Corrupted memory in destructor with weak references).
    Fixed bug GH-13446 (Restore exception handler after it finishes).
    Fixed bug GH-13784 (AX_GCC_FUNC_ATTRIBUTE failure).
    Fixed bug GH-13670 (GC does not scale well with a lot of objects created in destructor).

    DOM:

    Add some missing ZPP checks.
    Fix potential memory leak in XPath evaluation results.

    FPM:

    Fixed GH-11086 (FPM: config test runs twice in daemonised mode).
    Fix incorrect check in fpm_shm_free().

    GD:

    Fixed bug GH-12019 (add GDLIB_CFLAGS in feature tests).

    Gettext:

    Fixed sigabrt raised with dcgettext/dcngettext calls with gettext 0.22.5 with category set to LC_ALL.

    MySQLnd:

    Fix GH-13452 (Fixed handshake response [mysqlnd]).
    Fix incorrect charset length in check_mb_eucjpms().

    Opcache:

    Fixed GH-13508 (JITed QM_ASSIGN may be optimized out when op1 is null).
    Fixed GH-13712 (Segmentation fault for enabled observers when calling trait method of internal trait when opcache is loaded).

    Random:

    Fixed bug GH-13544 (Pre-PHP 8.2 compatibility for mt_srand with unknown modes).
    Fixed bug GH-13690 (Global Mt19937 is not properly reset in-between requests when MT_RAND_PHP is used).

    Session:

    Fixed bug GH-13680 (Segfault with session_decode and compilation error).

    SPL:

    Fixed bug GH-13685 (Unexpected null pointer in zend_string.h).

    Standard:

    Fixed bug GH-11808 (Live filesystem modified by tests).
    Fixed GH-13402 (Added validation of `n` in $additional_headers of mail()).
    Fixed bug GH-13203 (file_put_contents fail on strings over 4GB on Windows).
    Fixed bug GHSA-pc52-254m-w9w7 (Command injection via array-ish $command parameter of proc_open). (CVE-2024-1874)
    Fixed bug GHSA-wpj3-hf5j-x4v4 (__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix). (CVE-2024-2756)
    Fixed bug GHSA-h746-cjrr-wfmr (password_verify can erroneously return true, opening ATO risk). (CVE-2024-3096)
    Fixed bug GHSA-fjp9-9hwx-59fq (mb_encode_mimeheader runs endlessly for some inputs). (CVE-2024-2757)
    Fix bug GH-13932 (Attempt to fix mbstring on windows build) (msvc).

[close]

Download: https://windows.php.net/downloads/releases/