11PHP NEWS
22|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
3+ 26 Sep 2024, PHP 8.2.24
4+
5+ - CGI:
6+ . Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection
7+ Vulnerability). (CVE-2024-8926) (nielsdos)
8+ . Fixed bug GHSA-94p6-54jq-9mwp (cgi.force_redirect configuration is
9+ bypassable due to the environment variable collision). (CVE-2024-8927)
10+ (nielsdos)
11+
12+ - Core:
13+ . Fixed bug GH-15408 (MSan false-positve on zend_max_execution_timer).
14+ (zeriyoshi)
15+ . Fixed bug GH-15515 (Configure error grep illegal option q). (Peter Kokot)
16+ . Fixed bug GH-15514 (Configure error: genif.sh: syntax error). (Peter Kokot)
17+ . Fixed bug GH-15565 (--disable-ipv6 during compilation produces error
18+ EAI_SYSTEM not found). (nielsdos)
19+ . Fixed bug GH-15587 (CRC32 API build error on arm 32-bit).
20+ (Bernd Kuhls, Thomas Petazzoni)
21+ . Fixed bug GH-15330 (Do not scan generator frames more than once). (Arnaud)
22+ . Fixed uninitialized lineno in constant AST of internal enums. (ilutov)
23+
24+ - Curl:
25+ . FIxed bug GH-15547 (curl_multi_select overflow on timeout argument).
26+ (David Carlier)
27+
28+ - DOM:
29+ . Fixed bug GH-15551 (Segmentation fault (access null pointer) in
30+ ext/dom/xml_common.h). (nielsdos)
31+
32+ - Fileinfo:
33+ . Fixed bug GH-15752 (Incorrect error message for finfo_file
34+ with an empty filename argument). (DanielEScherzer)
35+
36+ - FPM:
37+ . Fixed bug GHSA-865w-9rf3-2wh5 (Logs from childrens may be altered).
38+ (CVE-2024-9026) (Jakub Zelenka)
39+
40+ - MySQLnd:
41+ . Fixed bug GH-15432 (Heap corruption when querying a vector). (cmb,
42+ Kamil Tekiela)
43+
44+ - Opcache:
45+ . Fixed bug GH-15661 (Access null pointer in
46+ Zend/Optimizer/zend_inference.c). (nielsdos)
47+ . Fixed bug GH-15658 (Segmentation fault in Zend/zend_vm_execute.h).
48+ (nielsdos)
49+
50+ - SAPI:
51+ . Fixed bug GHSA-9pqp-7h25-4f32 (Erroneous parsing of multipart form data).
52+ (CVE-2024-8925) (Arnaud)
53+
54+ - SOAP:
55+ . Fixed bug #73182 (PHP SOAPClient does not support stream context HTTP
56+ headers in array form). (nielsdos)
57+
58+ - Standard:
59+ . Fixed bug GH-15552 (Signed integer overflow in ext/standard/scanf.c). (cmb)
60+
61+ - Streams:
62+ . Fixed bug GH-15628 (php_stream_memory_get_buffer() not zero-terminated).
63+ (cmb)
64+
36529 Aug 2024, PHP 8.2.23
466
567- Core:
@@ -51,6 +113,10 @@ PHP NEWS
51113 (zend_hash_num_elements() Zend/zend_hash.h)). (nielsdos)
52114 . Fixed bug GH-15210 use-after-free on watchpoint allocations. (nielsdos)
53115
116+ - Random:
117+ . Fixed part of bug GH-15381, checking getrandom availability on solaris.
118+ (David Carlier)
119+
54120- Soap:
55121 . Fixed bug #55639 (Digest autentication dont work). (nielsdos)
56122 . Fix SoapFault property destruction. (nielsdos)
@@ -60,6 +126,7 @@ PHP NEWS
60126- Standard:
61127 . Fix passing non-finite timeout values in stream functions. (nielsdos)
62128 . Fixed GH-14780 p(f)sockopen timeout overflow. (David Carlier)
129+ . Fixed GH-15653 overflow on fgetcsv length parameter. (David Carlier)
63130
64131- Streams:
65132 . Fixed bug GH-15028 (Memory leak in ext/phar/stream.c). (nielsdos)
0 commit comments