New updated Alt-PHP packages have been scheduled for gradual rollout from our production repository.

Rollout slot: 3

Rolled out to: 1%

ETA for 100% rollout: March, 26th

Changelog

alt-php44-4.4.9-101.1
alt-php51-5.1.6-128.1

• Fix bug #79099: OOB read in php_strip_tags_ex (CVE-2020-7059)
• Fix incorrect order of zend extensions
• Disable external pcre lib for Imunify

alt-php52-5.2.17-160.1
alt-php53-5.3.29-123.1

• Fix bug #79082: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)
• Fix bug #79099: OOB read in php_strip_tags_ex (CVE-2020-7059)
• Fix incorrect order of zend extensions
• Disable external pcre lib for Imunify

alt-php54-5.4.45-103.1
alt-php55-5.5.38-84.1
alt-php56-5.6.40-33.1
alt-php70-7.0.33-34.1

• Fix bug #79037: global buffer-overflow in `mbfl_filt_conv_big5_wchar` (CVE-2020-7060)
• Fix bug #79082: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)
• Fix bug #79099: OOB read in php_strip_tags_ex (CVE-2020-7059)
• Fix bug #79221: Null Pointer Dereference in PHP Session Upload Progress (CVE-2020-7062)
• Fix incorrect order of zend extensions
• Disable external pcre lib for Imunify

alt-php71-7.1.33-3.1

• Fix bug #79037: global buffer-overflow in `mbfl_filt_conv_big5_wchar` (CVE-2020-7060)
• Fix bug #79082: Files added to tar with Phar::buildFromIterator have all-access permissions (CVE-2020-7063)
• Fix bug #79091: heap use-after-free in session_create_id()
• Fix bug #79099: OOB read in php_strip_tags_ex (CVE-2020-7059)
• Fix bug #79221: Null Pointer Dereference in PHP Session Upload Progress (CVE-2020-7062)
• Fix incorrect order of zend extensions
• Disable external pcre lib for Imunify

alt-php72-7.2.28-1.2
alt-php73-7.3.15-1.2
alt-php74-7.4.3-1.2

• Fix incorrect order of zend extensions
• Disable external pcre lib for Imunify

Update command

yum groupupdate alt-php

Immediate update (via bypass)

yum groupupdate alt-php --enablerepo=cloudlinux-rollout-3-bypass