PHP 7.1.27、7.2.16 和 7.3.3 组团更新

PHP 7.1.27、7.2.16 和 7.3.3 今日抱团发布，全部都是稳定版行列的版本，以修复问题为主，并不包含新功能，主要改进和修复包括提供了对Oracle数据库的跟踪属性、空指针、内存溢出以及初始化读取时未准备好的问题。

下载地址：

http://php.net/downloads.php

PHP（外文名:PHP: Hypertext Preprocessor，中文名：“超文本预处理器”）是一种通用开源脚本语言。语法吸收了C语言、Java和Perl的特点，利于学习，使用广泛，主要适用于Web开发领域。PHP 独特的语法混合了C、Java、Perl以及PHP自创的语法。它可以比CGI或者Perl更快速地执行动态网页。

用PHP做出的动态页面与其他的编程语言相比，PHP是将程序嵌入到HTML（标准通用标记语言下的一个应用）文档中去执行，执行效率比完全生成HTML标记的CGI要高许多；PHP还可以执行编译后代码，编译可以达到加密和优化代码运行，使代码运行更快。

Version 7.1.27

07 Mar 2019

• Core:

  • Fixed bug #77630 (rename() across the device may allow unwanted access during processing).

• EXIF:

  • Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).

  • Fixed bug #77540 (Invalid Read on exif_process_SOFn).

  • Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).

  • Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).

• PHAR:

  • Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename).

  • Fixed bug #77586 (phar_tar_writeheaders_int() buffer overflow).

• SPL:

  • Fixed bug #77431 (openFile() silently truncates after a null byte).

Version 7.2.16

07 Mar 2019

• Core:

  • Fixed bug #77589 (Core dump using parse_ini_string with numeric sections).

  • Fixed bug #77630 (rename() across the device may allow unwanted access during processing).

• COM:

  • Fixed bug #77621 (Already defined constants are not properly reported).

• EXIF:

  • Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).

  • Fixed bug #77540 (Invalid Read on exif_process_SOFn).

  • Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).

  • Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).

• PDO_OCI:

  • Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO, and CLIENT_IDENTIFIER.

• PHAR:

  • Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename).

• SPL:

  • Fixed bug #51068 (DirectoryIterator glob:// don't support current path relative queries).

  • Fixed bug #77431 (openFile() silently truncates after a null byte).

• Standard:

  • Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions).

• MySQL:

  • Disabled LOCAL INFILE by default, can be enabled using php.ini directive mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE attribute for pdo_mysql.

Version 7.3.3

07 Mar 2019

• Core:

  • Fixed bug #77589 (Core dump using parse_ini_string with numeric sections).

  • Fixed bug #77329 (Buffer Overflow via overly long Error Messages).

  • Fixed bug #77494 (Disabling class causes segfault on member access).

  • Fixed bug #77498 (Custom extension Segmentation fault when declare static property).

  • Fixed bug #77530 (PHP crashes when parsing `(2)::class`).

  • Fixed bug #77546 (iptcembed broken function).

  • Fixed bug #77630 (rename() across the device may allow unwanted access during processing).

• COM:

  • Fixed bug #77621 (Already defined constants are not properly reported).

  • Fixed bug #77626 (Persistence confusion in php_com_import_typelib()).

• EXIF:

  • Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF).

  • Fixed bug #77540 (Invalid Read on exif_process_SOFn).

  • Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).

  • Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).

• Mbstring:

  • Fixed bug #77514 (mb_ereg_replace() with trAIling backslash adds null byte).

• MySQL:

  • Disabled LOCAL INFILE by default, can be enabled using php.ini directive mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE attribute for pdo_mysql.

• OpenSSL:

  • Fixed bug #77390 (feof might hang on TLS streams in case of fragmented TLS records).

• PDO_OCI:

  • Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO, and CLIENT_IDENTIFIER.

• PHAR:

  • Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename).

  • Fixed bug #77586 (phar_tar_writeheaders_int() buffer overflow).

• phpdbg:

  • Fixed bug #76596 (phpdbg support for display_errors=stderr).

• SPL:

  • Fixed bug #51068 (DirectoryIterator glob:// don't support current path relative queries).

  • Fixed bug #77431 (openFile() silently truncates after a null byte).

• Standard:

  • Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions).

  • Fixed bug #77612 (setcookie() sets incorrect SameSite header if all of its options filled).