PHP 7.4.8 7.3.20 und 7.2.32 Security Bugfix Release

Die Programmiersprache PHP erhielt in den Zweigen 7.4, 7.3 und 7.2 ein Sicherheitsupdate. Dieses behebt auch diverse Fehler und sollte umgehend installiert werden. Das Sicherheitsupdate gilt nur für Benutzer von PHP unter Windows, die das offizielle Build benutzen. Das Update enthält einen Patch für libcurl das in CVE-2020-8159 beschrieben ist.

PHP 7.4.8 Release Notes

• Core:
  • Fixed bug #79595 (zend_init_fpu() alters FPU precision).
  • Fixed bug #79650 (php-win.exe 100% cpu lockup).
  • Fixed bug #79668 (get_defined_functions(true) may miss functions).
  • Fixed bug #79657 (“yield from” hangs when invalid value encountered).
  • Fixed bug #79683 (Fake reflection scope affects __toString()).
  • Fixed possibly unsupported timercmp() usage.
• Exif:
  • Fixed bug #79687 (Sony picture – PHP Warning – Make, Model, MakerNotes).
• Fileinfo:
  • Fixed bug #79681 (mime_content_type/finfo returning incorrect mimetype).
• Filter:
  • Fixed bug #73527 (Invalid memory access in php_filter_strip).
• GD:
  • Fixed bug #79676 (imagescale adds black border with IMG_BICUBIC).
• OpenSSL:
  • Fixed bug #62890 (default_socket_timeout=-1 causes connection to timeout).
• PDO SQLite:
  • Fixed bug #79664 (PDOStatement::getColumnMeta fails on empty result set).
• phpdbg:
  • Fixed bug #73926 (phpdbg will not accept input on restart execution).
  • Fixed bug #73927 (phpdbg fails with windows error prompt at “watch array”).
  • Fixed several mostly Windows related phpdbg bugs.
• SPL:
  • Fixed bug #79710 (Reproducible segfault in error_handler during GC involved an SplFileObject).
• Standard:
  • Fixed bug #74267 (segfault with streams and invalid data).

PHP 7.3.20 Release Notes

• Core:
  • Fixed bug #79650 (php-win.exe 100% cpu lockup).
  • Fixed bug #79668 (get_defined_functions(true) may miss functions).
  • Fixed possibly unsupported timercmp() usage.
• Exif:
  • Fixed bug #79687 (Sony picture – PHP Warning – Make, Model, MakerNotes).
• Filter:
  • Fixed bug #73527 (Invalid memory access in php_filter_strip).
• GD:
  • Fixed bug #79676 (imagescale adds black border with IMG_BICUBIC).
• OpenSSL:
  • Fixed bug #62890 (default_socket_timeout=-1 causes connection to timeout).
• PDO SQLite:
  • Fixed bug #79664 (PDOStatement::getColumnMeta fails on empty result set).
• SPL:
  • Fixed bug #79710 (Reproducible segfault in error_handler during GC involved an SplFileObject).
• Standard:
  • Fixed bug #74267 (segfault with streams and invalid data).

PHP 7.3.32 Release Notes

Windows:

• Rebuild of official Windows binaries with patched libcurl. No PHP source changes.

Quelle: https://www.php.net/ChangeLog-7.php