How to fix php vulnerability without upgrading PHP version

Question

【1】PHP 'xml_utf8_encode' function integer overflow vulnerability (CVE-2016-4344)

【2】PHP 'php_filter_encode_url' function integer overflow vulnerability (CVE-2016-4345)

【3】PHP 'str_pad' function integer overflow vulnerability (CVE-2016-4346)

etc.

Answer 1

In response to your problems, the official has released corresponding patches.
It is recommended that you go to the official website of PHP to download the corresponding patch.

http://php.net/ChangeLog-5.php
https://bugs.php.net/72520
http://php.net/ChangeLog-7.php
http://git.php.net/?p=php-src.git;a=commit;h=81406c0c1d45f75fcc7972ed974d2597abb0b9e9