Zend Server Release Notes

Read all about our Zend Server 2019 features and capabilities in the What’s New Page.

Bundled PHP

Zend Server 2019 now includes multiple versions of PHP:

• PHP 7.3.2
• PHP 7.2.15
• PHP 7.1.26

Installation

For detailed installation instructions for all

Updates for version 2018.0.3

• PHP 7.2.15 - http://www.php.net/ChangeLog-7.php#7.2.15

Updates for version 2018.0.2

• Windows only

• Update Apache to version: 2.4.37 (OpenSSL 1.1.1a)

Updates for version 2018.0.1

• PHP 7.2.10 - http://www.php.net

Updated for version 9.1.1

Introducing Zend Server 9.1

Read all about our Zend Server 9.1 features and capabilities in the What's New page.

PHP & Extensions

• PHP 7.1.7
• Memcached extension - included only for Linux and Mac
• Mac - changed to Apache 2.4

Updates for version 9.1.8

• PHP 7.1.26  see http://www.php.net/ChangeLog-7.php#7.1.26

Updates for version 9.1.6

• PHP 7.1.22 - http://www.php.net/ChangeLog-7.php#7.1.22

• Updates since 9.1.5
  • CVEs:
    • Apache2: Fixed bug #76582 (XSS due to the header

Introducing Zend Server 9.0.2

Read all about our Zend Server 9 features and capabilities in the What's New page. In this maintenance release we were focused on quality and performance. We also added new/updated PHP extensions and we are confident that it

Core:
Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)). (CVE-2014-3669)

cURL:
Fixed bug #68089 (NULL byte injection - cURL lib).

Exif:
Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)

XMLRPC:
Fixed bug #68027

Updates for version 8.5.13

06 May 2019, PHP 5.6.40.1

• Exif:
  • Fixed integer overflows on 32-bits. (Stas)
  • Fixed bug #77540 (Invalid Read on exif_process_SOFn). (Stas)
  • Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE.
    Also fixes

Installation

• Zend Server 8.0.2 supports both new installations and upgrades from Zend Server 6.x and 7.x versions. Upgrading from a version prior to Zend Server 6.0 is not supported. If you would like to upgrade a Zend Server that's older than 6.0, you

ZendServer 6.3 update 3

Has PHP 5.3.29 (See http://php.net/ChangeLog-5.php#5.3.29)

Has fixes from PHP 5.4.30:
- Fileinfo:
  . Fixed bug #67326 (fileinfo: cdf_read_short_sector insufficient boundary check). (CVE-2014-0207) 
  . Fixed bug #67410 (fileinfo

Core:
Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)). (CVE-2014-3669)

cURL:
Fixed bug #68089 (NULL byte injection - cURL lib).

Exif:
Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)

XMLRPC:
Fixed bug #68027