PHP News - 03 August 2018

PHP Changelog - https://php.net

• PHP 7.3.0 alpha 3 & 4 Released
  • 05 Jul 2018: alpha 3
  • 19 Jul 2018: alpha 4
  • Core: Fixed bug #63217 (Constant numeric strings become integers when used as ArrayAccess offset)
• 19 Jul 2018: PHP 7.2.8 Released
  • Changelog
  • Standard: Fixed bug #76505 (array_merge_recursive() is duplicating sub-array keys)
    • Also fixed in PHP 7.1.20
• 19 Jul 2018: PHP 7.0.31 Released
  • Changelog
• 20 Jul 2018: PHP 5.6.37 Released
  • Changelog
  • Security support till 31 Dec 2018 - Supported Versions
  • Win32: Fixed bug #76459 (windows linkinfo lacks openbasedir check)
    • Also fixed in PHP 7.0.31, 7.1.20, 7.2.8
• 20 Jul 2018: PHP 7.1.20 Released
  • Changelog

Security

• 05 Jul 2018: WordPress 4.9.7 Security and Maintenance Release
  • https://wordpress.org/news/2018/07/wordpress-4-9-7-security-and-maintenance-release/
  • Original Full Disclosure Article
  • Additional File Deletion Vulnerability
  • WordPress versions 4.9.6 and earlier are affected by a media issue that could potentially allow a user with certain capabilities to attempt to delete files outside the uploads directory.
  • Compare 4.9.6 and 4.9.7
    • Addition of wp_delete_file_from_directory in commit b564da9