Everything
php
Learn Community Releases The PHP Project
Home » Releases » 7.1 » 7.1.33 »

PHP 7.1.7

PHP 7.1 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 7.1 is 7.1.33 which includes important security patches.

Source Code

  • PHP 7.1.7 (tar.bz2)

    • sha256: 079b6792987f38dc485f92258c04f9e02dedd593f9d260ebe725343f812d1ff8

  • PHP 7.1.7 (tar.gz)

    • sha256: e0dbab8da601ee5119368d6f93dc1a86ad53b799d2f8c1209d6b827a2b259f92

  • PHP 7.1.7 (tar.xz)

    • sha256: 0d42089729be7b2bb0308cbe189c2782f9cb4b07078c8a235495be5874fff729

Change Log

  • core

    • Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly parsed).
      Manuel Mausz
    • Fixed bug #74658 (Undefined constants in array properties result in broken properties).
      Laruence
    • Fixed misparsing of abstract unix domain socket names.
      Sara
    • Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
      Stas
    • Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in zval_get_type).
      Nikita
    • Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from unserialize).
      Nikita
    • Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via php_parse_date()).
      Derick

  • date

    • Fixed bug #74639 (implement clone for DatePeriod and DateInterval).
      andrewnester

  • dom

    • Fixed bug #69373 (References to deleted XPath query results).
      ttoohey

  • gd

    • Fixed bug #74435 (Buffer over-read into uninitialized memory).
      cmb

  • intl

    • Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message).
      libnex
    • Fixed bug #74705 (Wrong reflection on Collator::getSortKey and collator_get_sort_key).
      Tyson Andre
      Remi

  • mbstring

    • Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

  • oci8

    • Add TAF callback (PR #2459).
      KoenigsKind

  • opcache

    • Fixed bug #74663 (Segfault with opcache.memory_protect and validate_timestamp).
      Laruence
    • Revert opcache.enable_cli to default disabled.
      Nikita

  • openssl

    • Fixed bug #74720 (pkcs7_en/decrypt does not work if \x1a is used in content).
      Anatol
    • Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
      Stas

  • pdo_oci

    • Support Instant Client 12.2 in --with-pdo-oci configure option.
      Tianfang Yang

  • reflection

    • Fixed bug #74673 (Segfault when cast Reflection object to string with undefined constant).
      Laruence

  • spl

    • Fixed bug #74478 (null coalescing operator failing with SplFixedArray).
      jhdxr

  • ftp

    • Fixed bug #74598 (ftp:// wrapper ignores context arg).
      Sara

  • phar

    • Fixed bug #74386 (Phar::__construct reflection incorrect).
      villfa

  • soap

    • Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY).
      Dmitry

  • streams

    • Fixed bug #74556 (stream_socket_get_name() returns '\0').
      Sara

PHP 7.1


  Represents a security release