New updated ea-php packages are now available for download from our updates-testing repository.

Changelog

ea-php51-php-5.1.6-24.cloudlinux.18

• Fixed the bug #61597: SXE properties may lack attributes and content
• Fixed the bug #79200: Some iconv functions cut Windows-1258
• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79364: When copy empty array, next key is unspecified
• Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
• Fixed the bug #79465: Read in urldecode() (CVE-2020-7067)

ea-php52-php-5.2.17-27.cloudlinux.26

• Fixed the bug #61597: SXE properties may lack attributes and content
• Fixed the bug #74940: DateTimeZone loose comparison always true
• Fixed the bug #79200: Some iconv functions cut Windows-1258
• Fixed the bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79364: When copy empty array, next key is unspecified
• Fixed the bug #79396: setting Date/Time during a forward DST transition
• Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
• Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)

ea-php53-php-5.3.29-29.cloudlinux.20

• Fixed the bug #61597: SXE properties may lack attributes and content
• Fixed the bug #74940: DateTimeZone loose comparison always true
• Fixed the bug #79200: Some iconv functions cut Windows-1258
• Fixed the bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79364: When copy empty array, next key is unspecified
• Fixed the bug #79396: setting Date/Time during a forward DST transition
• Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
• Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)

ea-php54-php-5.4.45-69.cloudlinux.1
ea-php55-php-5.5.38-52.cloudlinux.1
ea-php56-php-5.6.40-14.cloudlinux.1

• Fixed the bug #61597: SXE properties may lack attributes and content
• Fixed the bug #74940: DateTimeZone loose comparison always true
• Fixed the bug #75673: SplStack::unserialize() behavior
• Fixed the bug #79200: Some iconv functions cut Windows-1258
• Fixed the bug #79296: ZipArchive::open fails on empty file
• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79364: When copy empty array, next key is unspecified
• Fixed the bug #79396: setting Date/Time during a forward DST transition
• Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
• Fixed the bug #79424: php_zip_glob uses gl_pathc after call to globfree
• Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)

ea-php70-php-7.0.33-15.cloudlinux.1

• Fixed the bug #61597: SXE properties may lack attributes and content
• Fixed the bug #74940: DateTimeZone loose comparison always true
• Fixed the bug #75673: SplStack::unserialize() behavior
• Fixed the bug #79199: curl_copy_handle() memory leak
• Fixed the bug #79200: Some iconv functions cut Windows-1258
• Fixed the bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79364: When copy empty array, next key is unspecified
• Fixed the bug #79393: Null coalescing operator failing with SplFixedArray
• Fixed the bug #79396: setting Date/Time during a forward DST transition
• Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
• Fixed the bug #79424: php_zip_glob uses gl_pathc after call to globfree
• Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)
• Fixed the bug #79468: SIGSEGV when closing stream handle with a stream filter appended

ea-php71-php-7.1.33-6.cloudlinux.1

• Fixed the bug #61597: SXE properties may lack attributes and content
• Fixed the bug #74940: DateTimeZone loose comparison always true
• Fixed the bug #75673: SplStack::unserialize() behavior
• Fixed the bug #79199: curl_copy_handle() memory leak
• Fixed the bug #79200: Some iconv functions cut Windows-1258
• Fixed the bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79364: When copy empty array, next key is unspecified
• Fixed the bug #79393: Null coalescing operator failing with SplFixedArray
• Fixed the bug #79396: setting Date/Time during a forward DST transition
• Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
• Fixed the bug #79413: session_create_id() fails for active sessions
• Fixed the bug #79424: php_zip_glob uses gl_pathc after call to globfree
• Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)
• Fixed the bug #79468: SIGSEGV when closing stream handle with a stream filter appended

Update command

yum update ea-php* --enablerepo=cl-ea4-testing