php-5.6.40-Win32-VC11-x64.zip_php_php 5.6.40 下载%2_php-5.6 VC11_p

PHP NEWS ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| 10 Jan 2019, PHP 5.6.40 - GD: . Fixed bug #77269 (efree() on uninitialized Heap data in imagescale leads to use-after-free). (cmb) . Fixed bug #77270 (imagecolormatch Out Of Bounds Write on Heap). (cmb) - Mbstring: . Fixed bug #77370 (Buffer overflow on mb regex functions - fetch_token). (Stas) . Fixed bug #77371 (heap buffer overflow in mb regex functions - compile_string_node). (Stas) . Fixed bug #77381 (heap buffer overflow in multibyte match_at). (Stas) . Fixed bug #77382 (heap buffer overflow due to incorrect length in expand_case_fold_string). (Stas) . Fixed bug #77385 (buffer overflow in fetch_token). (Stas) . Fixed bug #77394 (Buffer overflow in multibyte case folding - unicode). (Stas) . Fixed bug #77418 (Heap overflow in utf32be_mbc_to_code). (Stas) - Phar: . Fixed bug #77247 (heap buffer overflow in phar_detect_phar_fname_ext). (Stas) - Xmlrpc: . Fixed bug #77242 (heap out of bounds read in xmlrpc_decode()). (cmb) . Fixed bug #77380 (Global out of bounds read in xmlrpc base64 code). (Stas) 06 Dec 2018, PHP 5.6.39 - Core: . Fixed bug #77231 (Segfault when using convert.quoted-printable-encode filter). (Stas) - IMAP: . Fixed bug #77020 (null pointer dereference in imap_mail). (cmb) . Fixed bug #77153 (imap_open allows to run arbitrary shell commands via mailbox parameter). (Stas) - Phar: . Fixed bug #77022 (PharData always creates new files with mode 0666). (Stas) . Fixed bug #77143 (Heap Buffer Overflow (READ: 4) in phar_parse_pharfile). (Stas) 13 Sep 2018, PHP 5.6.38 - Apache2 . Fixed bug #76582 (XSS due to the header Transfer-Encoding: chunked). (Stas) 19 Jul 2018, PHP 5.6.37 - Exif: . Fixed bug #76423 (Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.c). (Stas) . Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while reading exif data). (Stas) - Win32: . Fixed bug #76459 (windows linkinfo lacks openbasedir check). (Anatol) 26 Apr 2018 PHP 5.6.36 - Exif: . Fixed bug #76130 (Heap Buffer Overflow (READ: 1786) in exif_iif_add_value). (Stas) - iconv: . Fixed bug #76249 (stream filter convert.iconv leads to infinite loop on invalid sequence). (Stas) - LDAP: . Fixed bug #76248 (Malicious LDAP-Server Response causes Crash). (Stas) - Phar: . Fixed bug #76129 (fix for CVE-2018-5712 may not be complete). (Stas) 29 Mar 2018, PHP 5.6.35 - FPM: . Fixed bug #75605 (Dumpable FPM child processes allow bypassing opcache access controls). (Jakub Zelenka) 01 Mar 2018, PHP 5.6.34 - Standard: . Fixed bug #75981 (stack-buffer-overflow while parsing HTTP response). (Stas) 04 Jan 2018, PHP 5.6.33 - GD: . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx). (cmb) - Phar: . Fixed bug #74782 (Reflected XSS in .phar 404 page). (Stas) 26 Sep 2017, PHP 5.6.32 - Date: . Fixed bug #75055 (Out-Of-Bounds Read in timelib_meridian()). (Derick) - mcrypt: . Fixed bug #72535 (arcfour encryption stream filter crashes php). (Leigh) - PCRE: . Fixed bug #75207 (applied upstream patch for CVE-2016-1283). (Anatol) 06 Jul 2017, PHP 5.6.31 - Core: . Fixed bug #73807 (Performance problem with processing post request over 2000000 chars). (Nikita) . Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from unserialize). (Nikita) . Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability). (Stas) . Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via php_parse_date()). (Derick) - GD: . Fixed bug #74435 (Buffer over-read into uninitialized memory). (cmb) - mbstring: . Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA) - OpenSSL: . Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()). (Stas) - PCRE: . Fixed bug #74087 (Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)). (Stas) - WDDX: . Fixed bug #74145 (wddx parsing empty boolean tag leads to SIGSEGV). (Stas) 19 Jan 2017, PHP 5.6.30 - EXIF: . Fixed bug #73737 (FPE when parsing a tag format). (Stas) - GD: . Fixed bug #73549 (Use after free when stream is passed to imagepng). (cmb) . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb) . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb) - Intl: . Fixed bug #68447 (grapheme_extract take an extra trailing character). (SATŌ Kentarō) - Phar: . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas) . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas) . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas) - SQLite3: . Reverted fix for bug #73530 (Unsetting result set may reset other result set). (cmb) - Standard: . Fixed bug #70213 (Unserialize context shared on double class lookup). (Taoguang Chen) . Fixed bug #73825 (Heap out of bounds read on unserialize in finish_nested_data()). (Stas) 08 Dec 2016, PHP 5.6.29 - Mbstring: . Fixed bug #73505 (string length overflow in mbfl_memory_device_output function). (Stas) - Mysqlnd: . Fixed bug #64526 (Add missing mysqlnd.* parameters to php.ini-*). (cmb) - Opcache: . Fixed bug #73402 (Opcache segfault when using class constant to call a method). (Laruence) . Fixed bug #69090 (check cached files permissions) - OpenSSL . Fixed bug #72776 (Invalid parameter in memcpy function trough openssl_pbkdf2). (Jakub Zelenka) - Postgres: . Fixed bug #73498 (Incorrect SQL generated for pg_copy_to()). (Craig Duncan) - SOAP: . Fixed bug #73452 (Segfault (Regression for #69152)). (Dmitry) - SQLite3: . Fixed bug #73530 (Unsetting result set may reset other result set). (cmb) - Standard: . Fixed bug #73297 (HTTP stream wrapper should ignore HTTP 100 Continue). (rowan dot collins at gmail dot com) - WDDX: . Fixed bug #73631 (Memory leak due to invalid wddx stack processing). (bughunter at fosec dot vn). 10 Nov 2016, PHP 5.6.28 - Core: . Fixed bug #73337 (try/catch not working with two exceptions inside a same operation). (Dmitry) - Bz2: . Fixed bug #73356 (crash in bzcompress function). (Stas) -GD: . Fixed bug #73213 (Integer overflow in imageline() with antialiasing). (cmb) . Fixed bug #73272 (imagescale() is not affected by, but affects imagesetinterpolation()). (cmb) . Fixed bug #73279 (Integer overflow in gdImageScaleBilinearPalette()). (cmb) . Fixed bug #73280 (Stack Buffer Overflow in GD dynamicGetbuf). (cmb) . Fixed bug #72482 (Illegal write/read access caused by gdImageAALine overflow). (cmb) . Fixed bug #72696 (imagefilltoborder stackoverflow on truecolor images). (cmb) - Imap: . Fixed bug #73418 (Integer Overflow in "_php_imap_mail" leads Heap Overflow). (Anatol) - SPL: . Fixed bug #73144 (Use-after-free in ArrayObject Deserialization). (Stas) - SOAP: . Fixed bug #73037 (SoapServer reports Bad Request when gzipped). (Anatol) - SQLite3: . Fixed bug #73333 (2147483647 is fetched as string). (cmb) - Standard: . Fixed bug #73203 (passing additional_parameters causes mail to fail). (cmb) . Fixed bug #73188 (use after free in userspace streams). (Sara) . Fixed bug #73192 (parse_url return wrong hostname). (Nikita) - Wddx: . Fixed bug #73331 (NULL Pointer Dereference in WDDX Packet Deserialization with PDORow). (Stas) 13 Oct 2016, PHP 5.6.27 - Core: . Fixed bug #73025 (Heap Buffer Overflow in virtual_popen of zend_virtual_cwd.c). (cmb) . Fixed bug #