Home » Releases » 7.0 » 7.0.33 »

PHP 7.0.11

PHP 7.0 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.0 is 7.0.33 which includes important security patches.

Source Code

Change Log

  • core

    • Fixed bug #72944 (Null pointer deref in zval_delref_p).
      Dmitry
    • Fixed bug #72943 (assign_dim on string doesn't reset hval).
      Laruence
    • Fixed bug #72911 (Memleak in zend_binary_assign_op_obj_helper).
      Laruence
    • Fixed bug #72813 (Segfault with __get returned by ref).
      Laruence
    • Fixed bug #72767 (PHP Segfaults when trying to expand an infinite operator).
      Nikita
    • Fixed bug #72854 (PHP Crashes on duplicate destructor call).
      Nikita
    • Fixed bug #72857 (stream_socket_recvfrom read access violation).
      Anatol
  • com

    • Fixed bug #72922 (COM called from PHP does not return out parameters).
      Anatol
  • dba

    • Fixed bug #70825 (Cannot fetch multiple values with group in ini file).
      cmb
  • ftp

    • Fixed bug #70195 (Cannot upload file using ftp_put to FTPES with require_ssl_reuse).
      Benedict Singer
  • gd

    • Fixed bug #72709 (imagesetstyle() causes OOB read for empty $styles).
      cmb
    • Fixed bug #66005 (imagecopy does not support 1bit transparency on truecolor images).
      cmb
    • Fixed bug #72913 (imagecopy() loses single-color transparency on palette images).
      cmb
    • Fixed bug #68716 (possible resource leaks in _php_image_convert()).
      cmb
  • iconv

    • Fixed bug #72320 (iconv_substr returns false for empty strings).
      cmb
  • imap

    • Fixed bug #72852 (imap_mail null dereference).
      Anatol
  • intl

    • Fixed bug #65732 (grapheme_*() is not Unicode compliant on CR LF sequence).
      cmb
    • Fixed bug #73007 (add locale length check).
      Stas
  • mysqlnd

    • Fixed bug #72293 (Heap overflow in mysqlnd related to BIT fields).
      Stas
  • oci8

    • Fixed invalid handle error with Implicit Result Sets.
      Chris Jones
    • Fixed bug #72524 (Binding null values triggers ORA-24816 error).
      Chris Jones
  • opcache

    • Fixed bug #72949 (Typo in opcache error message).
      cmb
  • pdo

    • Fixed bug #72788 (Invalid memory access when using persistent PDO connection).
      Keyur
    • Fixed bug #72791 (Memory leak in PDO persistent connection handling).
      Keyur
    • Fixed bug #60665 (call to empty() on NULL result using PDO::FETCH_LAZY returns false).
      cmb
  • pdo_dblib

    • Implemented stringify 'uniqueidentifier' fields.
      Alexander Zhuravlev
      Adam Baratz
  • pdo_pgsql

    • Implemented FR #72633 (Postgres PDO lastInsertId() should work without specifying a sequence).
      Pablo Santiago Sánchez
      Matteo
    • Fixed bug #72759 (Regression in pgo_pgsql).
      Anatol
  • phar

    • Fixed bug #72928 (Out of bound when verify signature of zip phar in phar_parse_zipfile).
      Stas
    • Fixed bug #73035 (Out of bound when verify signature of tar phar in phar_parse_tarfile).
      Stas
  • reflection

    • Fixed bug #72846 (getConstant for a array constant with constant values returns NULL/NFC/UKNOWN).
      Laruence
  • session

    • Fixed bug #72724 (PHP7: session-uploadprogress kills httpd).
      Nikita
    • Fixed bug #72940 (SID always return "name=ID", even if session cookie exist).
      Yasuo
  • simplexml

    • Fixed bug #72971 (SimpleXML isset/unset do not respect namespace).
      Nikita
    • Fixed bug #72957 (Null coalescing operator doesn't behave as expected with SimpleXMLElement).
      Nikita
  • spl

    • Fixed bug #73029 (Missing type check when unserializing SplArray).
      Stas
  • standard

    • Fixed bug #55451 (substr_compare NULL length interpreted as 0).
      Lauri Kenttä
    • Fixed bug #72278 (getimagesize returning FALSE on valid jpg).
      cmb
    • Fixed bug #65550 (get_browser() incorrectly parses entries with "+" sign).
      cmb
  • streams

    • Fixed bug #72853 (stream_set_blocking doesn't work).
      Laruence
    • Fixed bug #72764 (ftps:// opendir wrapper data channel encryption fails with IIS FTP 7.5, 8.5).
      vhuk
    • Fixed bug #71882 (Negative ftruncate() on php://memory exhausts memory).
      cmb
  • sqlite3

    • Downgraded bundled SQLite to 3.8.10.2. (Anatol);
  • sysvshm

    • Fixed bug #72858 (shm_attach null dereference).
      Anatol
  • xml

    • Fixed bug #72085 (SEGV on unknown address zif_xml_parse).
      cmb
    • Fixed bug #72714 (_xml_startElementHandler() segmentation fault).
      cmb
  • wddx

    • Fixed bug #72860 (wddx_deserialize use-after-free).
      Stas
    • Fixed bug #73065 (Out-Of-Bounds Read in php_wddx_push_element).
      Stas
  • zip

    • Fixed bug #68302 (impossible to compile php with zip support).
      cmb

PHP 7.0


  Represents a security release