Everything
php
Learn Community Releases The PHP Project
Home » Releases » 7.0 » 7.0.33 »

PHP 7.0.2

PHP 7.0 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.0 is 7.0.33 which includes important security patches.

Source Code

  • PHP 7.0.2 (tar.bz2)

    • sha256: 9b1b75fbd9c92c6b0003b234e550965038826d11ea1f430bf279964da9da2236

  • PHP 7.0.2 (tar.gz)

    • sha256: 040198aef3dc5f17c253c1282160aabc6a05ca0b18b3d6fc9213970363083412

  • PHP 7.0.2 (tar.xz)

    • sha256: 556121271a34c442b48e3d7fa3d3bbb4413d91897abbb92aaeced4a7df5f2ab2

Change Log

  • core

    • Fixed bug #71165 (-DGC_BENCH=1 doesn't work on PHP7).
      y dot uchiyama dot 1015 at gmail dot com
    • Fixed bug #71163 (Segmentation Fault: cleanup_unfinished_calls).
      Laruence
    • Fixed bug #71109 (ZEND_MOD_CONFLICTS("xdebug") doesn't work).
      Laruence
    • Fixed bug #71092 (Segmentation fault with return type hinting).
      Laruence
    • Fixed bug memleak in header_register_callback.
      Laruence
    • Fixed bug #71067 (Local object in class method stays in memory for each call).
      Laruence
    • Fixed bug #66909 (configure fails utf8_to_mutf7 test).
      Michael Orlitzky
    • Fixed bug #70781 (Extension tests fail on dynamic ext dependency).
      Francois Laupretre
    • Fixed bug #71089 (No check to duplicate zend_extension).
      Remi
    • Fixed bug #71086 (Invalid numeric literal parse error within highlight_string() function).
      Nikita
    • Fixed bug #71154 (Incorrect HT iterator invalidation causes iterator reuse).
      Nikita
    • Fixed bug #52355 (Negating zero does not produce negative zero).
      Andrea
    • Fixed bug #66179 (var_export() exports float as integer).
      Andrea
    • Fixed bug #70804 (Unary add on negative zero produces positive zero).
      Andrea

  • curl

    • Fixed bug #71144 (Sementation fault when using cURL with ZTS).
      Michael Maroszek
      Laruence

  • dba

    • Fixed key leak with invalid resource.
      Laruence

  • filter

    • Fixed bug #71063 (filter_input(INPUT_ENV, ..) does not work).
      Reeze Xia

  • fpm

    • Fixed bug #70755 (fpm_log.c memory leak and buffer overflow).
      Stas

  • ftp

    • Implemented FR #55651 (Option to ignore the returned FTP PASV address).
      abrender at elitehosts dot com

  • gd

    • Fixed bug #70976 (Memory Read via gdImageRotateInterpolated Array Index Out of Bounds). (CVE-2016-1903)
      emmanuel dot law at gmail dot com

  • mbstring

    • Fixed bug #71066 (mb_send_mail: Program terminated with signal SIGSEGV, Segmentation fault).
      Laruence

  • opcache

    • Fixed bug #71127 (Define in auto_prepend_file is overwrite).
      Laruence

  • pcre

    • Fixed bug #71178 (preg_replace with arrays creates [0] in replace array if not already set).
      Laruence

  • readline

    • Fixed bug #71094 (readline_completion_function corrupts static array on second TAB).
      Nikita

  • session

    • Fixed bug #71122 (Session GC may not remove obsolete session data).
      Yasuo

  • spl

    • Fixed bug #71077 (ReflectionMethod for ArrayObject constructor returns wrong number of parameters).
      Laruence
    • Fixed bug #71153 (Performance Degradation in ArrayIterator with large arrays).
      Nikita

  • standard

    • Fixed bug #71270 (Heap BufferOver Flow in escapeshell functions). (CVE-2016-1904)
      emmanuel dot law at gmail dot com

  • wddx

    • Fixed bug #70661 (Use After Free Vulnerability in WDDX Packet Deserialization).
      taoguangchen at icloud dot com
    • Fixed bug #70741 (Session WDDX Packet Deserialization Type Confusion Vulnerability).
      taoguangchen at icloud dot com

  • xmlrpc

    • Fixed bug #70728 (Type Confusion Vulnerability in PHP_to_XMLRPC_worker).
      Julien

PHP 7.0


  Represents a security release