PHP Release 7.1.7


    PHP 7.1.7 Release Announcement

    The PHP development team announces the immediate availability of PHP 7.1.7. This is a security release with several bug fixes included. All PHP 7.1 users are encouraged to upgrade to this version.

    For source downloads of PHP 7.1.7 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 7.1.7 (tar.bz2)
    SHA256: 079b6792987f38dc485f92258c04f9e02dedd593f9d260ebe725343f812d1ff8
    PHP 7.1.7 (tar.gz)
    SHA256: e0dbab8da601ee5119368d6f93dc1a86ad53b799d2f8c1209d6b827a2b259f92
    PHP 7.1.7 (tar.xz)
    SHA256: 0d42089729be7b2bb0308cbe189c2782f9cb4b07078c8a235495be5874fff729
    Change Logs
    core
    • Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly parsed).
    • Fixed bug #74658 (Undefined constants in array properties result in broken properties).
    • Fixed misparsing of abstract unix domain socket names.
    • Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
    • Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in zval_get_type).
    • Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from unserialize).
    • Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via php_parse_date()).
    date
    • Fixed bug #74639 (implement clone for DatePeriod and DateInterval).
    dom
    • Fixed bug #69373 (References to deleted XPath query results).
    gd
    • Fixed bug #74435 (Buffer over-read into uninitialized memory).
    intl
    • Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message).
    • Fixed bug #74705 (Wrong reflection on Collator::getSortKey and collator_get_sort_key).
    mbstring
    • Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229)
    oci8
    • Add TAF callback (PR #2459).
    opcache
    • Fixed bug #74663 (Segfault with opcache.memory_protect and validate_timestamp).
    • Revert opcache.enable_cli to default disabled.
    openssl
    • Fixed bug #74720 (pkcs7_en/decrypt does not work if \x1a is used in content).
    • Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
    pdo_oci
    • Support Instant Client 12.2 in --with-pdo-oci configure option.
    reflection
    • Fixed bug #74673 (Segfault when cast Reflection object to string with undefined constant).
    spl
    • Fixed bug #74478 (null coalescing operator failing with SplFixedArray).
    ftp
    • Fixed bug #74598 (ftp:// wrapper ignores context arg).
    phar
    • Fixed bug #74386 (Phar::__construct reflection incorrect).
    • SOAP
    • Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY).
    streams
    • Fixed bug #74556 (stream_socket_get_name() returns '\0').
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top