СloudLinux Blog

Beta: Alt-PHP updated

Written by Inessa Atmachian | Apr 28, 2020 5:08:29 PM

 

New updated Alt-PHP packages are now available for download from our updates-testing repository.

Changelog

alt-php44-4.4.9-107

  • Fixed the bug #79330: shell_exec() silently truncates after a null byte
  • Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)

alt-php51-5.1.6-134  

  • Fixed the bug #61597: SXE properties may lack attributes and content
  • Fixed the bug #79200: Some iconv functions cut Windows-1258
  • Fixed the bug #79330: shell_exec() silently truncates after a null byte
  • Fixed the bug #79364: When copy empty array, next key is unspecified
  • Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)
  • Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline

alt-php52-5.2.17-166  

  • Fixed the bug #61597: SXE properties may lack attributes and content
  • Fixed the bug #74940: DateTimeZone loose comparison always true
  • Fixed the bug #79200: Some iconv functions cut Windows-1258
  • Fixed the bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
  • Fixed the bug #79330: shell_exec() silently truncates after a null byte
  • Fixed the bug #79364: When copy empty array, next key is unspecified
  • Fixed the bug #79396: setting Date/Time during a forward DST transition
  • Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
  • Fixed the bug #79465-CVE-2020-7067: OOB Read in urldecode()

alt-php53-5.3.29-128

  • Fixed the bug #61597: SXE properties may lack attributes and content
  • Fixed the bug #74940: DateTimeZone loose comparison always true
  • Fixed the bug #79200: Some iconv functions cut Windows-1258
  • Fixed the bug #79296: ZipArchive::open fails on empty file
  • Fixed the bug #79330: shell_exec() silently truncates after a null byte
  • Fixed the bug #79364: When copy empty array, next key is unspecified
  • Fixed the bug #79396: setting Date/Time during a forward DST transition
  • Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
  • Fixed the bug #79424: php_zip_glob uses gl_pathc after call to globfree
  • Fixed the bug #79465-CVE-2020-7067: OOB Read in urldecode()

alt-php54-5.4.45-109
alt-php55-5.5.38-90
alt-php56-5.6.40-39

  • Fixed the bug #61597: SXE properties may lack attributes and content
  • Fixed the bug #74940: DateTimeZone loose comparison always true
  • Fixed the bug #75673: SplStack::unserialize() behavior
  • Fixed the bug #79200: Some iconv functions cut Windows-1258
  • Fixed the bug #79296: ZipArchive::open fails on empty file
  • Fixed the bug #79330: shell_exec() silently truncates after a null byte
  • Fixed the bug #79364: When copy empty array, next key is unspecified
  • Fixed the bug #79396: setting Date/Time during a forward DST transition
  • Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
  • Fixed the bug #79424: php_zip_glob uses gl_pathc after call to globfree
  • Fixed the bug #79465-CVE-2020-7067: OOB Read in urldecode()

alt-php70-7.0.33-40

  • Fixed the bug #61597: SXE properties may lack attributes and content
  • Fixed the bug #74940: DateTimeZone loose comparison always true
  • Fixed the bug #75673: SplStack::unserialize() behavior
  • Fixed the bug #79199: curl_copy_handle() memory leak
  • Fixed the bug #79200: Some iconv functions cut Windows-1258
  • Fixed the bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
  • Fixed the bug #79330: shell_exec() silently truncates after a null byte
  • Fixed the bug #79364: When copy empty array, next key is unspecified
  • Fixed the bug #79393: Null coalescing operator failing with SplFixedArray
  • Fixed the bug #79396: setting Date/Time during a forward DST transition
  • Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
  • Fixed the bug #79424: php_zip_glob uses gl_pathc after call to globfree
  • Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)
  • Fixed the bug #79468: SIGSEGV when closing stream handle with a stream filter appended

alt-php71-7.1.33-9

  • Fixed the bug #61597: SXE properties may lack attributes and content
  • Fixed the bug #74940: DateTimeZone loose comparison always true
  • Fixed the bug #75673: SplStack::unserialize() behavior
  • Fixed the bug #79199: curl_copy_handle() memory leak
  • Fixed the bug #79200: Some iconv functions cut Windows-1258
  • Fixed the bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
  • Fixed the bug #79330: shell_exec() silently truncates after a null byte
  • Fixed the bug #79364: When copy empty array, next key is unspecified
  • Fixed the bug #79393: Null coalescing operator failing with SplFixedArray
  • Fixed the bug #79396: setting Date/Time during a forward DST transition
  • Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
  • Fixed the bug #79413: session_create_id() fails for active sessions
  • Fixed the bug #79424: php_zip_glob uses gl_pathc after call to globfree
  • Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)
  • Fixed the bug #79468: SIGSEGV when closing stream handle with a stream filter appended

Update command

yum groupupdate alt-php --enablerepo=cloudlinux-updates-testing
View full post