| 
1 | 1 | PHP                                                                        NEWS  | 
2 | 2 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||  | 
 | 3 | +21 Oct 2025, PHP 8.4.14  | 
 | 4 | + | 
 | 5 | +- Core:  | 
 | 6 | +  . Fixed bug GH-19765 (object_properties_load() bypasses readonly property  | 
 | 7 | +    checks). (timwolla)  | 
 | 8 | +  . Fixed hard_timeout with --enable-zend-max-execution-timers. (Appla)  | 
 | 9 | +  . Fixed bug GH-19792 (SCCP causes UAF for return value if both warning and  | 
 | 10 | +    exception are triggered). (nielsdos)  | 
 | 11 | +  . Fixed bug GH-19653 (Closure named argument unpacking between temporary  | 
 | 12 | +    closures can cause a crash). (nielsdos, Arnaud, Bob)  | 
 | 13 | +  . Fixed bug GH-19839 (Incorrect HASH_FLAG_HAS_EMPTY_IND flag on userland  | 
 | 14 | +    array). (ilutov)  | 
 | 15 | +  . Fixed bug GH-19480 (error_log php.ini cannot be unset when open_basedir is  | 
 | 16 | +    configured). (nielsdos)  | 
 | 17 | +  . Fixed bug GH-20002 (Broken build on *BSD with MSAN). (outtersg)  | 
 | 18 | + | 
 | 19 | +- CLI:  | 
 | 20 | +  . Fix useless "Failed to poll event" error logs due to EAGAIN in CLI server  | 
 | 21 | +    with PHP_CLI_SERVER_WORKERS. (leotaku)  | 
 | 22 | + | 
 | 23 | +- Curl:  | 
 | 24 | +  . Fix cloning of CURLOPT_POSTFIELDS when using the clone operator instead  | 
 | 25 | +    of the curl_copy_handle() function to clone a CurlHandle. (timwolla)  | 
 | 26 | +  . Fix curl build and test failures with version 8.16.  | 
 | 27 | +    (nielsdos, ilutov, Jakub Zelenka)  | 
 | 28 | + | 
 | 29 | +- Date:  | 
 | 30 | +  . Fixed GH-17159: "P" format for ::createFromFormat swallows string literals.  | 
 | 31 | +    (nielsdos)  | 
 | 32 | + | 
 | 33 | +- DOM:  | 
 | 34 | +  . Fix macro name clash on macOS. (Ruoyu Zhong)  | 
 | 35 | +  . Fixed bug GH-20022 (docker-php-ext-install DOM failed). (nielsdos)  | 
 | 36 | + | 
 | 37 | +- GD:  | 
 | 38 | +  . Fixed GH-19955 (imagefttext() memory leak). (David Carlier)  | 
 | 39 | + | 
 | 40 | +- MySQLnd:  | 
 | 41 | +  . Fixed bug #67563 (mysqli compiled with mysqlnd does not take ipv6 adress  | 
 | 42 | +    as parameter). (nielsdos)  | 
 | 43 | + | 
 | 44 | +- Opcache:  | 
 | 45 | +  . Fixed bug GH-19669 (assertion failure in zend_jit_trace_type_to_info_ex).  | 
 | 46 | +    (Arnaud)  | 
 | 47 | +  . Fixed bug GH-19831 (function JIT may not deref property value). (Arnaud)  | 
 | 48 | +  . Fixed bug GH-19889 (race condition in zend_runtime_jit(),  | 
 | 49 | +    zend_jit_hot_func()). (Arnaud)  | 
 | 50 | + | 
 | 51 | +- Phar:  | 
 | 52 | +  . Fix memory leak and invalid continuation after tar header writing fails.  | 
 | 53 | +    (nielsdos)  | 
 | 54 | +  . Fix memory leaks when creating temp file fails when applying zip signature.  | 
 | 55 | +    (nielsdos)  | 
 | 56 | + | 
 | 57 | +- SimpleXML:  | 
 | 58 | +  . Fixed bug GH-19988 (zend_string_init with NULL pointer in simplexml (UB)).  | 
 | 59 | +    (nielsdos)  | 
 | 60 | + | 
 | 61 | +- Soap:  | 
 | 62 | +  . Fixed bug GH-19784 (SoapServer memory leak). (nielsdos)  | 
 | 63 | +  . Fixed bug GH-20011 (Array of SoapVar of unknown type causes crash).  | 
 | 64 | +    (nielsdos)  | 
 | 65 | + | 
 | 66 | +- Standard:  | 
 | 67 | +  . Fixed bug GH-12265 (Cloning an object breaks serialization recursion).  | 
 | 68 | +    (nielsdos)  | 
 | 69 | +  . Fixed bug GH-19701 (Serialize/deserialize loses some data). (nielsdos)  | 
 | 70 | +  . Fixed bug GH-19801 (leaks in var_dump() and debug_zval_dump()).  | 
 | 71 | +    (alexandre-daubois)  | 
 | 72 | +  . Fixed bug GH-20043 (array_unique assertion failure with RC1 array  | 
 | 73 | +    causing an exception on sort). (nielsdos)  | 
 | 74 | +  . Fixed bug GH-19926 (reset internal pointer earlier while splicing array  | 
 | 75 | +    while COW violation flag is still set). (alexandre-daubois)  | 
 | 76 | +  . Fixed bug GH-19570 (unable to fseek in /dev/zero and /dev/null).  | 
 | 77 | +    (nielsdos, divinity76)  | 
 | 78 | + | 
 | 79 | +- Streams:  | 
 | 80 | +  . Fixed bug GH-19248 (Use strerror_r instead of strerror in main).  | 
 | 81 | +    (Jakub Zelenka)  | 
 | 82 | +  . Fixed bug GH-17345 (Bug #35916 was not completely fixed). (nielsdos)  | 
 | 83 | +  . Fixed bug GH-19705 (segmentation when attempting to flush on non seekable  | 
 | 84 | +    stream. (bukka/David Carlier)  | 
 | 85 | + | 
 | 86 | +- XMLReader:  | 
 | 87 | +  . Fixed bug GH-20009 (XMLReader leak on RelaxNG schema failure). (nielsdos)  | 
 | 88 | + | 
 | 89 | +- Zip:  | 
 | 90 | +  . Fixed bug GH-19688 (Remove pattern overflow in zip addGlob()). (nielsdos)  | 
 | 91 | +  . Fixed bug GH-19932 (Memory leak in zip setEncryptionName()/setEncryptionIndex()).  | 
 | 92 | +    (David Carlier)  | 
 | 93 | + | 
3 | 94 | 25 Sep 2025, PHP 8.4.13  | 
4 | 95 | 
 
  | 
5 | 96 | - Core:  | 
 | 
0 commit comments