Everything
php
Learn Community Releases The PHP Project
Home » Releases » 7.0 » 7.0.33 »

PHP 7.0.15

PHP 7.0 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.0 is 7.0.33 which includes important security patches.

Source Code

Change Log

  • core

    • Fixed bug #73792 (invalid foreach loop hangs script).
      Dmitry
    • Fixed bug #73663 ("Invalid opcode 65/16/8" occurs with a variable created with list()).
      Laruence
    • Fixed bug #73585 (Logging of "Internal Zend error - Missing class information" missing class name).
      Laruence
    • Fixed bug #73753 (unserialized array pointer not advancing).
      David Walker
    • Fixed bug #73825 (Heap out of bounds read on unserialize in finish_nested_data()).
      Stas
    • Fixed bug #73831 (NULL Pointer Dereference while unserialize php object).
      Stas
    • Fixed bug #73832 (Use of uninitialized memory in unserialize()).
      Stas
    • Fixed bug #73092 (Unserialize use-after-free when resizing object's properties hash table).
      Nikita
    • Fixed bug #69425 (Use After Free in unserialize()).
      Nikita
    • Fixed bug #72731 (Type Confusion in Object Deserialization).
      Nikita

  • com

    • Fixed bug #73679 (DOTNET read access violation using invalid codepage).
      Anatol

  • dom

    • Fixed bug #67474 (getElementsByTagNameNS filter on default ns).
      aboks

  • exif

    • Bug bug #73737 (FPE when parsing a tag format).
      Stas

  • gd

    • Fixed bug #73869 (Signed Integer Overflow gd_io.c).
      cmb
    • Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()).
      cmb

  • gmp

    • Fixed bug #70513 (GMP Deserialization Type Confusion Vulnerability).
      Nikita

  • mysqli

    • Fixed bug #73462 (Persistent connections don't set $connect_errno).
      darkain

  • mysqlnd

    • Fixed issue with decoding BIT columns when having more than one rows in the result set. 7.0+ problem.
      Andrey
    • Fixed bug #73800 (sporadic segfault with MYSQLI_OPT_INT_AND_FLOAT_NATIVE).
      vanviegen

  • pcre

    • Fixed bug #73612 (preg_*() may leak memory).
      cmb

  • pdo_firebird

    • Fixed bug #72931 (PDO_FIREBIRD with Firebird 3.0 not work on returning statement).
      Dorin Marcoci

  • phar

    • Fixed bug #73773 (Seg fault when loading hostile phar).
      Stas
    • Fixed bug #73768 (Memory corruption when loading hostile phar).
      Stas
    • Fixed bug #73764 (Crash while loading hostile phar archive).
      Stas

  • phpdbg

    • Fixed bug #73615 (phpdbg without option never load .phpdbginit at startup).
      Bob
    • Fixed issue getting executable lines from custom wrappers.
      Bob
    • Fixed bug #73704 (phpdbg shows the wrong line in files with shebang).
      Bob

  • reflection

    • Fixed bug #46103 (ReflectionObject memory leak).
      Nikita

  • streams

    • Fixed bug #73586 (php_user_filter::$stream is not set to the stream the filter is working on).
      Dmitry

  • sqlite3

    • Reverted fix for bug #73530 (Unsetting result set may reset other result set).
      cmb

  • standard

    • Fixed bug #73594 (dns_get_record does not populate $additional out parameter).
      Bruce Weirdan
    • Fixed bug #70213 (Unserialize context shared on double class lookup).
      Taoguang Chen
    • Fixed bug #73154 (serialize object with __sleep function crash).
      Nikita
    • Fixed bug #70490 (get_browser function is very slow).
      Nikita
    • Fixed bug #73265 (Loading browscap.ini at startup causes high memory usage).
      Nikita
    • Fixed bug #31875 (get_defined_functions additional param to exclude disabled functions).
      willianveiga

  • zlib

    • Fixed bug #73373 (deflate_add does not verify that output was not truncated).
      Matt Bonneau

PHP 7.0


  Represents a security release