Everything
php
Learn Community Releases The PHP Project
Home » Releases » 7.0 » 7.0.33 »

PHP 7.0.5

PHP 7.0 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.0 is 7.0.33 which includes important security patches.

Source Code

  • PHP 7.0.5 (tar.bz2)

    • sha256: 2c09af7fe64537ea795f098b9b542ead407ef83f7cdc65b3787115ccbbb51de9

  • PHP 7.0.5 (tar.gz)

    • sha256: f9d93419031b4df663fc48f03b8a833545de8776225e46637563e2be6029908d

  • PHP 7.0.5 (tar.xz)

    • sha256: c41f1a03c24119c0dd9b741cdb67880486e64349fc33527767f6dc28d3803abb

Change Log

  • core

    • Huge pages disabled by default.
      Rasmus
    • Added ability to enable huge pages in Zend Memory Manager through the environment variable USE_ZEND_ALLOC_HUGE_PAGES=1.
      Dmitry
    • Fixed bug #71756 (Call-by-reference widens scope to uninvolved functions when used in switch).
      Laruence
    • Fixed bug #71729 (Possible crash in zend_bin_strtod, zend_oct_strtod, zend_hex_strtod).
      Laruence
    • Fixed bug #71695 (Global variables are reserved before execution).
      Laruence
    • Fixed bug #71629 (Out-of-bounds access in php_url_decode in context php_stream_url_wrap_rfc2397).
      mt at debian dot org
    • Fixed bug #71622 (Strings used in pass-as-reference cannot be used to invoke C::$callable()).
      Bob
    • Fixed bug #71596 (Segmentation fault on ZTS with date function (setlocale)).
      Anatol
    • Fixed bug #71535 (Integer overflow in zend_mm_alloc_heap()).
      Dmitry
    • Fixed bug #71470 (Leaked 1 hashtable iterators).
      Nikita
    • Fixed bug #71575 (ISO C does not allow extra ‘;’ outside of a function).
      asgrim
    • Fixed bug #71724 (yield from does not count EOLs).
      Nikita
    • Fixed bug #71767 (ReflectionMethod::getDocComment returns the wrong comment).
      Grigorii Sokolik
    • Fixed bug #71806 (php_strip_whitespace() fails on some numerical values).
      Nikita
    • Fixed bug #71624 (`php -R` (PHP_MODE_PROCESS_STDIN) is broken).
      Sean DuBois

  • cli server

    • Fixed bug #69953 (Support MKCALENDAR request method).
      Christoph

  • curl

    • Fixed bug #71694 (Support constant CURLM_ADDED_ALREADY).
      mpyw

  • date

    • Fixed bug #71635 (DatePeriod::getEndDate segfault).
      Thomas Punt

  • fileinfo

    • Fixed bug #71527 (Buffer over-write in finfo_open with malformed magic file). (CVE-2015-8865)
      Anatol

  • libxml

    • Fixed bug #71536 (Access Violation crashes php-cgi.exe).
      Anatol

  • mbstring

    • Fixed bug #71906 (AddressSanitizer: negative-size-param (-1) in mbfl_strcut). (CVE-2016-4073)
      Stas

  • odbc

    • Fixed bug #47803, #69526 (Executing prepared statements is succesfull only for the first two statements).
      einavitamar at gmail dot com
      Anatol

  • pcre

    • Fixed bug #71659 (segmentation fault in pcre running twig tests).
      nish dot aravamudan at canonical dot com

  • pdo_dblib

    • Fixed bug #54648 (PDO::MSSQL forces format of datetime fields).
      steven dot lambeth at gmx dot de
      Anatol

  • phar

    • Fixed bug #71625 (Crash in php7.dll with bad phar filename).
      Anatol
    • Fixed bug #71317 (PharData fails to open specific file).
      Jos Elstgeest
    • Fixed bug #71860 (Invalid memory write in phar on filename with \0 in name). (CVE-2016-4072)
      Stas

  • phpdbg

    • Fixed crash when advancing (except step) inside an internal function.
      Bob

  • session

    • Fixed bug #71683 (Null pointer dereference in zend_hash_str_find_bucket).
      Yasuo

  • snmp

    • Fixed bug #71704 (php_snmp_error() Format String Vulnerability). (CVE-2016-4071)
      andrew at jmpesp dot org

  • spl

    • Fixed bug #71617 (private properties lost when unserializing ArrayObject).
      Nikita

  • standard

    • Fixed bug #71660 (array_column behaves incorrectly after foreach by reference).
      Laruence
    • Fixed bug #71798 (Integer Overflow in php_raw_url_encode). (CVE-2016-4070)
      taoguangchen at icloud dot com
      Stas

  • zip

    • Update bundled libzip to 1.1.2.
      Remi
      Anatol

PHP 7.0


  Represents a security release