Page MenuHomeDevCentral

Upgrade to PHP 5.6.20
Closed, WontfixPublic

Description

PHP 5.6.20 has been released 31 Mar 2016. It seems we're a bit late compared to the usual upgrade rhythm to upgrade our Docker images.

Security issues

Fileinfo:
Fixed bug #71527 (Buffer over-write in finfo_open with malformed magic file).

mbstring:
Fixed bug #71906 (AddressSanitizer: negative-size-param (-1) in mbfl_strcut).

Phar:
Fixed bug #71860 (Invalid memory write in phar on filename with \0 in name).

SNMP:
Fixed bug #71704 (php_snmp_error() Format String Vulnerability).

Standard:
Fixed bug #71798 (Integer Overflow in php_raw_url_encode).

Event Timeline

dereckson claimed this task.

rDPHPCLI — Superseded by T901: direct upgrade to 5.6.23

dereckson rescinded a token.
dereckson awarded a token.