PHP 7.3.5、7.2.18 和 7.1.29 发布,安全修复版本

释放双眼,带上耳机,听听看~!

文章转载开源中国

在发布 7.3.5 和 7.2.18 一天后,PHP 开发团队也为 7.1 分支带来了更新,最新发布的 PHP 7.1.29 同样也是一个安全修复版本,建议使用 PHP 7.1 系列的用户升级至该版本。

Version 7.1.29 (02 May 2019)

  • EXIF:
    • Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG).
  • Mail:
    • Fixed bug #77821 (Potential heap corruption in TSendMail()).

更新日志:PHP 7.1.29

=====分割线=====

PHP 开发团队今天为两个 PHP 版本分支发布了更新,分别是 PHP 7.3.5 和 7.2.18。而根据发布公告,两个版本都是安全修复版本,更新内容也都是安全问题和一些错误修复。

Version 7.3.5 (02 May 2019)

  • Core:
    • Fixed bug #77903 (ArrayIterator stops iterating after offsetSet call).
  • CLI:
    • Fixed bug #77794 (Incorrect Date header format in built-in server).
  • EXIF:
    • Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG).
  • Interbase:
    • Fixed bug #72175 (Impossibility of creating multiple connections to Interbase with php 7.x).
  • Intl:
    • Fixed bug #77895 (IntlDateFormatter::create fails in strict mode if $locale = null).
  • litespeed:
    • LiteSpeed SAPI 7.3.1, better process management, new API function litespeed_finish_request().
  • LDAP:
    • Fixed bug #77869 (Core dump when using server controls) (mcmic)
  • Mail:
    • Fixed bug #77821 (Potential heap corruption in TSendMail()).
  • mbstring:
    • Implemented FR #72777 (Implement regex stack limits for mbregex functions).
  • MySQLi:
    • Fixed bug #77773 (Unbuffered queries leak memory – MySQLi / mysqlnd).
  • PCRE:
    • Fixed bug #77827 (preg_match does not ignore \r in regex flags).
  • PDO:
    • Fixed bug #77849 (Disable cloning of PDO handle/connection objects).
  • phpdbg:
    • Fixed bug #76801 (too many open files).
    • Fixed bug #77800 (phpdbg segfaults on listing some conditional breakpoints).
    • Fixed bug #77805 (phpdbg build fails when readline is shared).
  • Reflection:
    • Fixed bug #77772 (ReflectionClass::getMethods(null) doesn't work).
    • Fixed bug #77882 (Different behavior: always calls destructor).
  • Standard:
    • Fixed bug #77793 (Segmentation fault in extract() when overwriting reference with itself).
    • Fixed bug #77844 (Crash due to null pointer in parse_ini_string with INI_SCANNER_TYPED).
    • Fixed bug #77853 (Inconsistent substr_compare behaviour with empty haystack).

Version 7.2.18 (02 May 2019)

  • CLI:

    • Fixed bug #77794 (Incorrect Date header format in built-in server).
  • EXIF:
    • Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG).
  • Interbase:
    • Fixed bug #72175 (Impossibility of creating multiple connections to Interbase with php 7.x).
  • Intl:
    • Fixed bug #77895 (IntlDateFormatter::create fails in strict mode if $locale = null).
  • litespeed:
    • LiteSpeed SAPI 7.3.1, better process management, new API function litespeed_finish_request().
  • Mail:
    • Fixed bug #77821 (Potential heap corruption in TSendMail()).
  • PCRE:
    • Fixed bug #77827 (preg_match does not ignore \r in regex flags).
  • PDO:
    • Fixed bug #77849 (Disable cloning of PDO handle/connection objects).
  • phpdbg:
    • Fixed bug #76801 (too many open files).
    • Fixed bug #77800 (phpdbg segfaults on listing some conditional breakpoints).
    • Fixed bug #77805 (phpdbg build fails when readline is shared).
  • Reflection:
    • Fixed bug #77772 (ReflectionClass::getMethods(null) doesn't work).
    • Fixed bug #77882 (Different behavior: always calls destructor).
  • Standard:
    • Fixed bug #77680 (recursive mkdir on ftp stream wrapper is incorrect).
    • Fixed bug #77844 (Crash due to null pointer in parse_ini_string with INI_SCANNER_TYPED).
    • Fixed bug #77853 (Inconsistent substr_compare behaviour with empty haystack).

源码下载:http://www.php.net/downloads.php
二进制包下载:http://windows.php.net/download/

更新日志:PHP 7.3.5 | PHP 7.2.18

给TA打赏
共{{data.count}}人
人已打赏
安全经验

GitLab 发布安全修复版本 11.10.2、11.9.10 和 11.8.9

2019-4-30 11:12:22

安全经验

Joomla 3.9.6 发布,安全修复程序版本

2019-5-9 11:12:22

个人中心
购物车
优惠劵
今日签到
有新私信 私信列表
搜索