- Core:
- Fixed bug (Low probability segfault in zend_arena).
- Fixed bug #71441 (Typehinted Generator with return in try/finally crashes).
- Fixed bug #71442 (forward_static_call crash).
- Fixed bug #71443 (Segfault using built-in webserver with intl using symfony).
- Fixed bug #71449 (An integer overflow bug in php_implode()).
- Fixed bug #71450 (An integer overflow bug in php_str_to_str_ex()).
- Fixed bug #71474 (Crash because of VM stack corruption on Magento2).
- Fixed bug #71485 (Return typehint on internal func causes Fatal error when it throws exception).
- Fixed bug #71529 (Variable references on array elements don't work when using count).
- Fixed bug #71601 (finally block not executed after yield from).
- Fixed bug #71637 (Multiple Heap Overflow due to integer overflows in xml/filter_url/addcslashes).
- CLI server:
- Fixed bug #71559 (Built-in HTTP server, we can download file in web by bug).
- CURL:
- Fixed bug #71523 (Copied handle with new option CURLOPT_HTTPHEADER crashes while curl_multi_exec).
- Fixed memory leak in curl_getinfo().
- Date:
- Fixed bug #71525 (Calls to date_modify will mutate timelib_rel_time, causing date_date_set issues).
- Fileinfo:
- Fixed bug #71434 (finfo throws notice for specific python file).
- FPM:
- Opcache:
- Fixed bug #71584 (Possible use-after-free of ZCG(cwd) in Zend Opcache).
- PCRE:
- Fixed bug #71537 (PCRE segfault from Opcache).
- phpdbg:
- Fixed inherited functions from unspecified files being included in phpdbg_get_executable().
- SOAP:
- Fixed bug #71610 (Type Confusion Vulnerability - SOAP / make_http_soap_request()).
- Standard:
- XMLRPC:
- Fixed bug #71501 (xmlrpc_encode_request ignores encoding option).
- Zip:
- Fixed bug #71561 (NULL pointer dereference in Zip::ExtractTo).
Thursday, March 3, 2016
