June 2018Updates for version 2018.0.3PHP 7.2.15 - http://www.php.net/ChangeLog-7.php#7.2.15Updates for version 2018.0.2Windows onlyUpdate Apache to version: 2.4.37 (OpenSSL 1.1.1a)Updates for version 2018.0.1PHP 7.2.10 - http://www.php.net/ChangeLog-7.php#7.2.10Updates since 2018.0.0 CVEs EXIF: Fixed bug #76409 (heap use after free in _php_stream_free). (CVE-2018-12882)EXIF: Fixed bug #76423 (Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.c). (CVE-2018-14883)EXIF: Fixed bug #76557 (heap-buffer-overflow (READ of size 48) while reading exif data). (CVE-2018-14851)Win32: Fixed bug #76459 (windows linkinfo lacks openbasedir check). (CVE-2018-15132)Zend Server fixes Cannot define application with manually typed base URL (ZSR-3080)Cannot define application on a non default VHost(ZSR-3081)Zend Server fails to install on Ubuntu 18.04 due to new SSL files dependency failure (ZSR-2573)Monitoring rules: functions list is not populated (ZSR-2952)Introducing Zend Server 2018Read all about our Zend Server 2018 features and capabilities in the What’s New page.PHP & ExtensionsPHP 7.2.6Memcached extension - included only for Linux and MacBundled MySQL 5.7 for Windows installationsInstallationFor detailed installation instructions for all supported operating systems, please refer to the Zend Server 2018 Installation GuideUpgradesUpgrades from Zend Server 9.0.X are supported. Upgrades from older versions are not supportedWhen upgrading PHP from PHP 7.0.X to PHP 7.2, configuration settings (php.ini) are not retained and a the new php.ini is usedLinux Upgrade from earlier version with a different PHP on DEB may fail on due to: php-7.x-java-bridge-zend-server unmet dependencies. Workaround: remove java-bridge, then upgrade (ZSRV-10436)Limitations and Known IssuesThe following issues are known at the time of the Zend Server 9.1 release:Deployment: If a ZPK contains non-valid monitoring rules, the deployment fails (change of behavior)Nginx: deploying to the root of the default virtual host does not work out-of-the-box and causes configuration problems (ZSRV-10098). Workaround: comment out the location / entry in /etc/nginx/conf.d/default.conf #location / { # include /etc/nginx/fastcgi.conf; # # root /usr/share/nginx/html; # # index index.php index.html index.htm; # }RPM + FPM/NGINX - alert messages in php-fpm.log ("unknown child"). Can be ignoredJob Queue: CLI - running a batch command required the .bat suffixEnforcement of recurring jobs names: the job name must be uniqueThe directive zend_monitor.event_generate_trace_file is replaced by zend_monitor.event_tracing_modePage Cache will not store or fetch cached pages when Z-Ray is enabled. This is true also in Z-Ray Selective mode.WebAPI 'applicationGetStatus' - 'baseUrl' parameter - < default-server > is replaced by the server IPSecured VHost Vhosts validation is skipped where exists a secured VhostSSL Certificates are not validated when editing or creating secured vhosts. The user must verify that certificate paths and content are valid, before applying in a secured vhostData Cache Enhanced API - fetch function can now get a callable function as a parameter zend_shm_cache_fetch (key, callable)zend_disk_cache_fetch(key, callable) In case of cache miss, the user callable code will be triggered and the returned value will be stored automatically for the specified key, instead of using an extra cache_store API callzend_datacache.shm.memory_cache_size_kb is removed. To limit the shm memory size use zend_datacache.shm.memory_cache_size. Its value is in MbAPI function zend_shm_cache_info() return value is in BytesAdded a new directive: "default_ttl" for setting default Time to Live (TTL) value per cache entryAPC compatibility was deprecated in Zend Server 9.1. In this version we removed it altogether. Directive zend_datacache.apc_compatibility is removedZ-Ray Z-Ray might be blocked by using the browser content security policy (e.g. PHPMyADmin on Firefox)When using Z-Ray with Load Balanced domains, a special setup is needed: An accessible ZS GUI address must be set in Z-Ray settings ( Zend Server Menu -> Z-Ray -> Settings -> Advanced)The Load Balancer IP address must be included in the Z-Ray allowed IPs list (token)Z-Ray is not to be included or enabled in performance tests context (e.g. in AB testing)Z-Ray currently supports the following database drivers: PDO, MySQL/i, OCI8 , sqlite3 and DB2Mac Upgrades for Mac from 9.0.x to a later version are not supported (due to Apache changes)sending email using TLS requires the following manual configuration:Get latest cert files:curl -k https://curl.haxx.se/ca/cacert.pem > /System/Library/OpenSSL/certs/cacert.pemadd the following to /usr/local/zend/gui/lighttpd/etc/php-fcgi.ini :[openssl] openssl.cafile=/System/Library/OpenSSL/certs/cacert.pem openssl.capath=/System/Library/OpenSSL/certs/IBMi specific release notesInstallationZend Server for IBM i 2018 can be installed as a new installation on a partition running Zend Server for IBM i 8.x, and both can be run at the same time, allowing for a migration from version 8 to version 2018.GeneralZend Server for IBMi now supports cluster! It requires the new Zend DBi (MariaDB)