New updated HardenedPHP packages are now available for download from our production repository.

Changelog

alt-php44-4.4.9-107

• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)

alt-php51-5.1.6-134  

• Fixed the bug #61597: SXE properties may lack attributes and content
• Fixed the bug #79200: Some iconv functions cut Windows-1258
• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79364: When copy empty array, next key is unspecified
• Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)
• Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline

alt-php52-5.2.17-166  

• Fixed the bug #61597: SXE properties may lack attributes and content
• Fixed the bug #74940: DateTimeZone loose comparison always true
• Fixed the bug #79200: Some iconv functions cut Windows-1258
• Fixed the bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79364: When copy empty array, next key is unspecified
• Fixed the bug #79396: setting Date/Time during a forward DST transition
• Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
• Fixed the bug #79465-CVE-2020-7067: OOB Read in urldecode()

alt-php53-5.3.29-128

• Fixed the bug #61597: SXE properties may lack attributes and content
• Fixed the bug #74940: DateTimeZone loose comparison always true
• Fixed the bug #79200: Some iconv functions cut Windows-1258
• Fixed the bug #79296: ZipArchive::open fails on empty file
• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79364: When copy empty array, next key is unspecified
• Fixed the bug #79396: setting Date/Time during a forward DST transition
• Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
• Fixed the bug #79424: php_zip_glob uses gl_pathc after call to globfree
• Fixed the bug #79465-CVE-2020-7067: OOB Read in urldecode()

alt-php54-5.4.45-109
alt-php55-5.5.38-90
alt-php56-5.6.40-39

• Fixed the bug #61597: SXE properties may lack attributes and content
• Fixed the bug #74940: DateTimeZone loose comparison always true
• Fixed the bug #75673: SplStack::unserialize() behavior
• Fixed the bug #79200: Some iconv functions cut Windows-1258
• Fixed the bug #79296: ZipArchive::open fails on empty file
• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79364: When copy empty array, next key is unspecified
• Fixed the bug #79396: setting Date/Time during a forward DST transition
• Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
• Fixed the bug #79424: php_zip_glob uses gl_pathc after call to globfree
• Fixed the bug #79465-CVE-2020-7067: OOB Read in urldecode()

alt-php70-7.0.33-40

• Fixed the bug #61597: SXE properties may lack attributes and content
• Fixed the bug #74940: DateTimeZone loose comparison always true
• Fixed the bug #75673: SplStack::unserialize() behavior
• Fixed the bug #79199: curl_copy_handle() memory leak
• Fixed the bug #79200: Some iconv functions cut Windows-1258
• Fixed the bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79364: When copy empty array, next key is unspecified
• Fixed the bug #79393: Null coalescing operator failing with SplFixedArray
• Fixed the bug #79396: setting Date/Time during a forward DST transition
• Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
• Fixed the bug #79424: php_zip_glob uses gl_pathc after call to globfree
• Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)
• Fixed the bug #79468: SIGSEGV when closing stream handle with a stream filter appended

alt-php71-7.1.33-9

• Fixed the bug #61597: SXE properties may lack attributes and content
• Fixed the bug #74940: DateTimeZone loose comparison always true
• Fixed the bug #75673: SplStack::unserialize() behavior
• Fixed the bug #79199: curl_copy_handle() memory leak
• Fixed the bug #79200: Some iconv functions cut Windows-1258
• Fixed the bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
• Fixed the bug #79330: shell_exec() silently truncates after a null byte
• Fixed the bug #79364: When copy empty array, next key is unspecified
• Fixed the bug #79393: Null coalescing operator failing with SplFixedArray
• Fixed the bug #79396: setting Date/Time during a forward DST transition
• Fixed the bug #79410: system() swallows last chunk if it is exactly 4095 bytes without newline
• Fixed the bug #79413: session_create_id() fails for active sessions
• Fixed the bug #79424: php_zip_glob uses gl_pathc after call to globfree
• Fixed the bug #79465: OOB Read in urldecode() (CVE-2020-7067)
• Fixed the bug #79468: SIGSEGV when closing stream handle with a stream filter appended

Update command

yum groupupdate alt-php