Fixed bug #41686 (Omitting length param in array_slice not possible).

Fixed bug #41724 (libxml_get_last_error() - errors survice request scope).

Fixed bug #41628 (PHP settings leak between Virtual Hosts in Apache 1.3).

Fixed zend_alter_ini_entry() memory_limit interruption vulnerability.

- MFH: #41717, imagepolygon does not respect thickness
(sync with libgd)

upgrade PCRE to version 7.2 RC3
# I'll update to the final version early next week when its released

HTTP 500 is sent to browser in case of PHP error instead of blank page

Fixed bug #41693 (scandir() allows empty directory names).

- Fixed regression introduced by the fix for the libgd bug #74

Fixed bug #41566 (SOAP Server not properly generating href attributes)

Fixed bug #41673 (json_encode breaks large numbers in arrays).

Fixed bug #41633 (Crash instantiating classes with self-referencing constants)

Fixed bug #41655 (open_basedir bypass via glob())

regroup

Fixed bug #41527 (WDDX deserialize numeric string array key).

MFH:- Added php_ini_loaded_file() function which returns the path to the actual
php.ini in use.

Fix #41640 (get_class_vars produces error on class constants)

bfn

news

- #41630 entry

Added missing error check inside bcpowmod().

fix news

Added missing format validator to unpack() function

new fixes

more details