102 replies to this topic

[AplusWebMaster]

FYI...

PHP 7.0.2 released
- https://secure.php.n...#id2016-01-07-1
7 Jan 2016 - "The PHP development team announces the immediate availability of PHP 7.0.2.
31 reported bugs has been fixed, including 6 security related issues. All PHP 7.0 users are encouraged to upgrade to this version..."
ChangeLog: http://www.php.net/C...Log-7.php#7.0.2

PHP 5.6.17 released
- https://secure.php.n...#id2016-01-07-3
7 Jan 2016 - "The PHP development team announces the immediate availability of PHP 5.6.17.
This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version..."
ChangeLog: http://www.php.net/C...og-5.php#5.6.17

PHP 5.5.31 released
- https://secure.php.n...#id2016-01-07-2
7 Jan 2016 - "The PHP development team announces the immediate availability of PHP 5.5.31.
This is a security release. Several security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version..."
ChangeLog: http://www.php.net/C...og-5.php#5.5.31

Downloads:
- http://www.php.net/downloads.php

- http://windows.php.net/download/
___

- http://www.securityt....com/id/1034608
Jan 7 2016
Impact: Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): prior to versions 5.5.31, 5.6.17, 7.0.2 ...
Solution: The vendor has issued a fix (5.5.31, 5.6.17, 7.0.2)...
 

[AplusWebMaster]

FYI...

PHP 7.0.3, 5.6.18, 5.5.32 released
- https://secure.php.net/
4 Feb 2016

PHP 7.0.3
- https://secure.php.n...#id2016-02-04-1
"... immediate availability of PHP 7.0.3. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version."
Change Log: https://secure.php.n...Log-7.php#7.0.3

PHP 5.6.18
- https://secure.php.n...#id2016-02-04-3
"... immediate availability of PHP 5.6.18. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version."
Change Log: https://secure.php.n...og-5.php#5.6.18

PHP 5.5.32
- https://secure.php.n...#id2016-02-04-2
"...  immediate availability of PHP 5.5.32. This is a security release. Several security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version."
Change Log: https://secure.php.n...og-5.php#5.5.32

Downloads:
- https://secure.php.net/downloads.php

Windows:
- http://windows.php.net/download/
 

Edited by AplusWebMaster, 07 February 2016 - 07:32 AM.

[AplusWebMaster]

FYI...

PHP 7.0.4, 5.6.19, 5.5.33 released
- https://secure.php.net/
3 Mar 2016

PHP 7.0.4
- https://php.net/arch...#id2016-03-03-1
3 Mar 2016 - "The PHP development team announces the immediate availability of PHP 7.0.4. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version..."
Change log: http://www.php.net/C...Log-7.php#7.0.4

PHP 5.6.19
- https://php.net/arch...#id2016-03-03-3
3 Mar 2016 - "The PHP development team announces the immediate availability of PHP 5.6.19. This is a security release in which several security bugs were fixed. All PHP 5.6 users are encouraged to upgrade to this version..."
Change log: http://www.php.net/C...og-5.php#5.6.19

PHP 5.5.33
- https://secure.php.n...#id2016-03-03-2
3 Mar 2016 - "The PHP development team announces the immediate availability of PHP 5.5.33. This is a security release in which two security bugs were fixed. All PHP 5.5 users are encouraged to upgrade to this version..."
Change log: http://www.php.net/C...og-5.php#5.5.33

Downloads:
- https://secure.php.net/downloads.php

Windows:
- http://windows.php.net/download/
 

[AplusWebMaster]

FYI...

PHP 7.0.5, 5.6.20, 5.5.34 released
- https://secure.php.net/
31 Mar 2016

PHP 7.0.5
- https://secure.php.n...#id2016-03-31-1
31 Mar 2016 - "The PHP development team announces the immediate availability of PHP 7.0.5. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version..."
Change log: http://www.php.net/C...Log-7.php#7.0.5

PHP 5.6.20
- https://secure.php.n...#id2016-03-31-4
31 Mar 2016 - "The PHP development team announces the immediate availability of PHP 5.6.20. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version..."
Change log: http://www.php.net/C...og-5.php#5.6.20

PHP 5.5.34
- https://secure.php.n...#id2016-03-31-2
31 Mar 2016 - "The PHP development team announces the immediate availability of PHP 5.5.34. This is a security release. Several security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version..."
Change log: http://www.php.net/C...og-5.php#5.5.34

Downloads:
- https://secure.php.net/downloads.php

Windows:
- http://windows.php.net/download/
 

[AplusWebMaster]

FYI...

PHP 7.0.6, 5.6.21, 5.5.35 released
- https://secure.php.net/
29 Apr 2016

PHP 7.0.6
- https://secure.php.n...#id2016-04-29-1
29 Apr 2016 - "The PHP development team announces the immediate availability of PHP 7.0.6. This is a security release. Several security bugs were fixed in this release, including:
    CVE-2016-3078
    CVE-2016-3074
All PHP 7.0 users are encouraged to upgrade to this version. .."
Change log: http://www.php.net/C...Log-7.php#7.0.6

PHP 5.6.21
- https://secure.php.n...#id2016-04-28-2
28 Apr 2016 - "The PHP development team announces the immediate availability of PHP 5.6.21. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version..."
Change log: http://www.php.net/C...og-5.php#5.6.21

PHP 5.5.35
- https://secure.php.n...#id2016-04-28-1
28 Apr 2016 - "The PHP development team announces the immediate availability of PHP 5.5.35. This is a security release. Several security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version..."
Change log: http://www.php.net/C...og-5.php#5.5.35

Downloads:
- https://secure.php.net/downloads.php

Windows:
- http://windows.php.net/download/
___

- http://www.securityt....com/id/1035701
CVE Reference: CVE-2016-3078
Apr 28 2016
Fix Available:  Yes  Vendor Confirmed:  Yes  Exploit Included:  Yes  
Version(s): 7.0.5; possibly earlier versions...
Impact: A remote user can create a file that, when loaded by the target application, will execute arbitrary code on the target system.
Solution: The vendor has issued a fix 7.0.6...
 

Edited by AplusWebMaster, 29 April 2016 - 07:03 AM.

[AplusWebMaster]

FYI...

PHP 7.0.7, 5.6.22, 5.5.36 released
- https://secure.php.net/
26 May 2016

PHP 7.0.7
- https://secure.php.n...#id2016-05-26-1
26 May 2016 - "The PHP development team announces the immediate availability of PHP 7.0.7. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version..."

Changelog
- http://php.net/ChangeLog-7.php#7.0.7
___

PHP 5.6.22
- https://secure.php.n...#id2016-05-26-3
26 May 2016 - "The PHP development team announces the immediate availability of PHP 5.6.22. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version..."

Changelog
- https://secure.php.n...og-5.php#5.6.22
___

PHP 5.5.36
- https://secure.php.n...#id2016-05-26-2
26 May 2016 - "The PHP development team announces the immediate availability of PHP 5.5.36. This is a security release. Several security bugs were fixed in this release. All PHP 5.5 users are encouraged to upgrade to this version..."

Changelog
- https://secure.php.n...og-5.php#5.5.36
___

Downloads
- http://www.php.net/downloads.php

Windows downloads
- http://windows.php.net/download
___

> https://web.nvd.nist...d=CVE-2016-4343
Last revised: 05/24/2016 - "The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service (uninitialized pointer dereference) or possibly have unspecified other impact via a crafted TAR archive.
CVSS v3 Base Score: 8.8 High
 

Edited by AplusWebMaster, 01 June 2016 - 10:54 AM.

[AplusWebMaster]

FYI...

PHP 7.0.8, 5.6.23, 5.5.37 released
- https://secure.php.net/
23 Jun 2016

PHP 7.0.8
- https://secure.php.n...#id2016-06-23-1
23 Jun 2016 - "The PHP development team announces the immediate availability of PHP 7.0.8. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version..."

ChangeLog
- http://www.php.net/C...Log-7.php#7.0.8
___

PHP 5.6.23
- https://secure.php.n...#id2016-06-23-2
23 Jun 2016 - "The PHP development team announces the immediate availability of PHP 5.6.23. Several bugs were fixed in this release, including security-related ones. All PHP 5.6 users are encouraged to upgrade to this version..."

ChangeLog
- http://www.php.net/C...og-5.php#5.6.23
___

PHP 5.5.37
- https://secure.php.n...#id2016-06-23-3
23 Jun 2016 - "The PHP development team announces the immediate availability of PHP 5.5.37. This is a security release, several security bugs were fixed. All PHP 5.5 users are encouraged to upgrade to this version..."

ChangeLog
- http://www.php.net/C...og-5.php#5.5.37
___

Downloads
- http://www.php.net/downloads.php

Windows downloads
- http://windows.php.net/download

- https://cve.mitre.or...e=CVE-2016-5766
- https://cve.mitre.or...e=CVE-2016-5767
- https://cve.mitre.or...e=CVE-2016-5768
- https://cve.mitre.or...e=CVE-2016-5769
- https://cve.mitre.or...e=CVE-2016-5770
- https://cve.mitre.or...e=CVE-2016-5771
- https://cve.mitre.or...e=CVE-2016-5772
- https://cve.mitre.or...e=CVE-2016-5773
 

Edited by AplusWebMaster, 24 June 2016 - 06:39 PM.

[AplusWebMaster]

FYI...

PHP 7.0.9, 5.6.24, 5.5.38 released
- https://secure.php.net/
21 July 2016

PHP 7.0.9
- https://secure.php.n...#id2016-07-21-3
"The PHP development team announces the immediate availability of PHP 7.0.9. This is a security release. Several security bugs were fixed in this release, including the HTTP_PROXY issue. All PHP 7.0 users are encouraged to upgrade to this version..."

ChangeLog
- https://secure.php.n...Log-7.php#7.0.9
___

PHP 5.6.24
- https://secure.php.n...#id2016-07-21-4
" The PHP development team announces the immediate availability of PHP 5.6.24. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

ChangeLog
- https://secure.php.n...og-5.php#5.6.24
___

PHP 5.5.38
- https://secure.php.n...#id2016-07-21-2
"The PHP development team announces the immediate availability of PHP 5.5.38. This is a security release that fixes some security related bugs..."

ChangeLog
- https://secure.php.n...og-5.php#5.5.38
___

Downloads
- http://www.php.net/downloads.php

Windows downloads
- http://windows.php.net/download
___

- http://www.securityt....com/id/1036430
CVE Reference: http://cve.mitre.org...e=CVE-2016-5399
Jul 22 2016
Fix Available:  Yes  Vendor Confirmed:  Yes  
Impact: A remote or local user can obtain potentially sensitive information on the target system.
A remote or local user can execute arbitrary code on the target system.
The impact depends on the application using PHP on the target system.
Solution: The vendor has issued a fix (5.5.38, 5.6.24, 7.0.9)...
 

Edited by AplusWebMaster, 22 July 2016 - 07:52 AM.

[AplusWebMaster]

FYI...

PHP 7.0.10, 5.6.25 released
- https://secure.php.net/

7.0.10 Release Notes
- https://secure.php.n...#id2016-08-18-1
18 Aug 2016 - "The PHP development team announces the immediate availability of PHP 7.0.10. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version..."

Change Log
- http://php.net/ChangeLog-7.php#7.0.10
___

5.6.25 Release Notes
- https://php.net/arch...#id2016-08-18-2
18 Aug 2016 - "The PHP development team announces the immediate availability of PHP 5.6.25. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version..."

Change Log
- http://php.net/ChangeLog-5.php#5.6.25
___

Downloads
- http://www.php.net/downloads.php

Windows downloads
- http://windows.php.net/download
___

- http://www.securityt....com/id/1036680
Aug 20 2016
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): prior to versions 5.6.25, 7.0.10 ...
Impact: A remote or local user can cause denial of service conditions.
A remote or local user can execute arbitrary code on the target system.
A remote or local user can obtain potentially sensitive information on the target system.
Solution: The vendor has issued a fix (5.6.25, 7.0.10)...
 

[AplusWebMaster]

FYI...

PHP 7.0.11, 5.6.26 released
- https://secure.php.net/

PHP 7.0.11
- https://secure.php.n...#id2016-09-15-1
15 Sep 2016 - "The PHP development team announces the immediate availability of PHP 7.0.11. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version..."

Changelog
- https://secure.php.n...og-7.php#7.0.11
___

PHP 5.6.26
- https://secure.php.n...#id2016-09-16-1
16 Sep 2016 - "The PHP development team announces the immediate availability of PHP 5.6.26. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version..."

Changelog
- https://secure.php.n...og-5.php#5.6.26
___

Downloads
- http://www.php.net/downloads.php

Windows downloads
- http://windows.php.net/download
___

- http://www.securityt....com/id/1036836
CVE Reference: CVE-2016-7411, CVE-2016-7412, CVE-2016-7413, CVE-2016-7414, CVE-2016-7416, CVE-2016-7417, CVE-2016-7418
Sep 16 2016
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): prior to versions 5.6.26, 7.0.11 ...
Impact: A remote or local user can execute arbitrary code on the target system.
Solution: The vendor has issued a fix (5.6.26, 7.0.11)...
 

Edited by AplusWebMaster, 16 September 2016 - 05:20 AM.

[AplusWebMaster]

FYI...

PHP 7.0.12, 5.6.27 released
- https://secure.php.net/

- https://php.net/arch...#id2016-10-13-1
13 Oct 2016 - "The PHP development team announces the immediate availability of PHP 7.0.12. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version..."

Changelog
- https://secure.php.n...og-7.php#7.0.12
___

PHP 5.6.27 released
- https://php.net/arch...#id2016-10-14-1
14 Oct 2016 - "The PHP development team announces the immediate availability of PHP 5.6.27. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version..."

Changelog
- https://secure.php.n...og-5.php#5.6.27
___

Downloads
- http://www.php.net/downloads.php

Windows downloads
- http://windows.php.net/download
___

- http://www.securityt....com/id/1037033
Oct 18 2016
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 5.6.x prior to 5.6.27, 7.0.x prior to 7.0.12 ...
Impact: A remote user can create content that, when loaded by the target application, will execute arbitrary code on the target system.
Solution: The vendor has issued a fix (5.6.27, 7.0.12) ...
 

Edited by AplusWebMaster, 18 October 2016 - 02:13 PM.

[AplusWebMaster]

FYI...

PHP 7.0.13, 5.6.28 released
- https://secure.php.net/
10 Nov 2016

- https://secure.php.n...#id2016-11-10-1
"The PHP development team announces the immediate availability of PHP 7.0.13. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version..."

Changelog
- https://secure.php.n...og-7.php#7.0.13
___

PHP 5.6.28
- https://secure.php.n...#id2016-11-10-3
"The PHP development team announces the immediate availability of PHP 5.6.28. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version..."

Changelog
- http://www.php.net/C...og-5.php#5.6.28
___

Downloads
- http://www.php.net/downloads.php

Windows downloads
- http://windows.php.net/download
___

- http://www.securityt....com/id/1037272
Nov 11 2016
Impact: Denial of service via local system, Denial of service via network, Execution of arbitrary code via network, User access via local system, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 5.6, 7.0 ...
Impact: A user can cause denial of service conditions.
A user can execute arbitrary code on the target system.
Solution: The vendor has issued a fix (5.6.28, 7.0.13)...
 

Edited by AplusWebMaster, 12 November 2016 - 07:31 AM.

[AplusWebMaster]

FYI...

PHP 7.1.0 released
- https://secure.php.net/
1 Dec 2016 - "The PHP development team announces the immediate availability of PHP 7.1.0. This release is the first point release in the 7.x series..."

ChangeLog
- http://www.php.net/C...Log-7.php#7.1.0
___

Downloads
- http://www.php.net/downloads.php

Windows downloads
- http://windows.php.net/download
 

[AplusWebMaster]

FYI...

PHP 7.0.14, 5.6.29 released
- https://secure.php.net/
8 Dec 2016 - "The PHP development team announces the immediate availability of PHP 7.0.14. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version..."

ChangeLog
- http://www.php.net/C...og-7.php#7.0.14
___

PHP 5.6.29
- https://secure.php.net/
8 Dec 2016 - "The PHP development team announces the immediate availability of PHP 5.6.29. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.

ChangeLog
- https://secure.php.n...og-5.php#5.6.29
___

Download
- http://www.php.net/downloads.php

Windows downloads
- http://windows.php.net/download/
 

Edited by AplusWebMaster, 09 December 2016 - 02:12 PM.

[AplusWebMaster]

FYI...

PHP 7.1.1, 7.0.15, 5.6.30 released
- https://secure.php.net/
19 Jan 2017 - "The PHP development team announces the immediate availability of PHP 7.1.1. Several bugs have been fixed. All PHP 7.1 users are encouraged to upgrade to this version..."

ChangeLog
- https://secure.php.n...Log-7.php#7.1.1
___

PHP 7.0.15
- https://secure.php.net/
"The PHP development team announces the immediate availability of PHP 7.0.15. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version..."

ChangeLog
- https://secure.php.n...og-7.php#7.0.15
___

PHP 5.6.30
- https://secure.php.net/
"The PHP development team announces the immediate availability of PHP 5.6.30. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version..."

ChangeLog
- https://secure.php.n...og-5.php#5.6.30
___

Download
- http://www.php.net/downloads.php

Windows downloads
- http://windows.php.net/download/
___

- http://www.securityt....com/id/1037659
Jan 20 2017
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 5.6.x, 7.0.x ..
Impact: A remote or local user can cause denial of service conditions.
A remote or local user can execute arbitrary code on the target system.
A remote or local user can obtain potentially sensitive information on the target system.
Solution: The vendor has issued a fix (5.6.30, 7.0.15)...
 

Edited by AplusWebMaster, 20 January 2017 - 10:38 AM.