|
9 | 9 |
|
10 | 10 | <a id="PHP_8_4"></a>
|
11 | 11 |
|
| 12 | +<section class="version" id="8.4.10"><!-- {{{ 8.4.10 --> |
| 13 | +<h3>Version 8.4.10</h3> |
| 14 | +<b><?php release_date('03-Jul-2025'); ?></b> |
| 15 | +<ul><li>BcMath: |
| 16 | +<ul> |
| 17 | + <li>Fixed bug <?php githubissuel('php/php-src', 18641); ?> (Accessing a BcMath\Number property by ref crashes).</li> |
| 18 | +</ul></li> |
| 19 | +<li>Core: |
| 20 | +<ul> |
| 21 | + <li>Fixed bugs <?php githubissuel('php/php-src', 17711); ?> and <?php githubissuel('php/php-src', 18022); ?> (Infinite recursion on deprecated attribute evaluation) and <?php githubissuel('php/php-src', 18464); ?> (Recursion protection for deprecation constants not released on bailout).</li> |
| 22 | + <li>Fixed <?php githubissuel('php/php-src', 18695); ?> (zend_ast_export() - float number is not preserved).</li> |
| 23 | + <li>Fix handling of references in zval_try_get_long().</li> |
| 24 | + <li>Do not delete main chunk in zend_gc.</li> |
| 25 | + <li>Fix compile issues with zend_alloc and some non-default options.</li> |
| 26 | +</ul></li> |
| 27 | +<li>Curl: |
| 28 | +<ul> |
| 29 | + <li>Fix memory leak when setting a list via curl_setopt fails.</li> |
| 30 | +</ul></li> |
| 31 | +<li>Date: |
| 32 | +<ul> |
| 33 | + <li>Fix leaks with multiple calls to DatePeriod iterator current().</li> |
| 34 | +</ul></li> |
| 35 | +<li>DOM: |
| 36 | +<ul> |
| 37 | + <li>Fixed bug <?php githubissuel('php/php-src', 18744); ?> (classList works not correctly if copy HTMLElement by clone keyword).</li> |
| 38 | +</ul></li> |
| 39 | +<li>FPM: |
| 40 | +<ul> |
| 41 | + <li>Fixed <?php githubissuel('php/php-src', 18662); ?> (fpm_get_status segfault).</li> |
| 42 | +</ul></li> |
| 43 | +<li>Hash: |
| 44 | +<ul> |
| 45 | + <li>Fixed bug <?php githubissuel('php/php-src', 14551); ?> (PGO build fails with xxhash).</li> |
| 46 | +</ul></li> |
| 47 | +<li>Intl: |
| 48 | +<ul> |
| 49 | + <li>Fix memory leak in intl_datetime_decompose() on failure.</li> |
| 50 | + <li>Fix memory leak in locale lookup on failure.</li> |
| 51 | +</ul></li> |
| 52 | +<li>Opcache: |
| 53 | +<ul> |
| 54 | + <li>Fixed bug <?php githubissuel('php/php-src', 18743); ?> (Incompatibility in Inline TLS Assembly on Alpine 3.22).</li> |
| 55 | +</ul></li> |
| 56 | +<li>ODBC: |
| 57 | +<ul> |
| 58 | + <li>Fix memory leak on php_odbc_fetch_hash() failure.</li> |
| 59 | +</ul></li> |
| 60 | +<li>OpenSSL: |
| 61 | +<ul> |
| 62 | + <li>Fix memory leak of X509_STORE in php_openssl_setup_verify() on failure.</li> |
| 63 | + <li><?php bugfix(74796); ?> (Requests through http proxy set peer name).</li> |
| 64 | +</ul></li> |
| 65 | +<li>PGSQL: |
| 66 | +<ul> |
| 67 | + <li>Fixed <?php githubsecurityl('php/php-src', 'hrwm-9436-5mv3'); ?> (pgsql extension does not check for errors during escaping). (CVE-2025-1735)</li> |
| 68 | + <li>Fix warning not being emitted when failure to cancel a query with pg_cancel_query().</li> |
| 69 | +</ul></li> |
| 70 | +<li>PDO ODBC: |
| 71 | +<ul> |
| 72 | + <li>Fix memory leak if WideCharToMultiByte() fails.</li> |
| 73 | +</ul></li> |
| 74 | +<li>PDO Sqlite: |
| 75 | +<ul> |
| 76 | + <li>Fixed memory leak with Pdo_Sqlite::createCollation when the callback has an incorrect return type.</li> |
| 77 | +</ul></li> |
| 78 | +<li>Phar: |
| 79 | +<ul> |
| 80 | + <li>Add missing filter cleanups on phar failure.</li> |
| 81 | + <li>Fixed bug <?php githubissuel('php/php-src', 18642); ?> (Signed integer overflow in ext/phar fseek).</li> |
| 82 | +</ul></li> |
| 83 | +<li>PHPDBG: |
| 84 | +<ul> |
| 85 | + <li>Fix 'phpdbg --help' segfault on shutdown with USE_ZEND_ALLOC=0.</li> |
| 86 | +</ul></li> |
| 87 | +<li>Random: |
| 88 | +<ul> |
| 89 | + <li>Fix reference type confusion and leak in user random engine.</li> |
| 90 | +</ul></li> |
| 91 | +<li>Readline: |
| 92 | +<ul> |
| 93 | + <li>Fix memory leak when calloc() fails in php_readline_completion_cb().</li> |
| 94 | +</ul></li> |
| 95 | +<li>SimpleXML: |
| 96 | +<ul> |
| 97 | + <li>Fixed bug <?php githubissuel('php/php-src', 18597); ?> (Heap-buffer-overflow in zend_alloc.c when assigning string with UTF-8 bytes).</li> |
| 98 | +</ul></li> |
| 99 | +<li>SOAP: |
| 100 | +<ul> |
| 101 | + <li>Fix memory leaks in php_http.c when call_user_function() fails.</li> |
| 102 | + <li>Fixed <?php githubsecurityl('php/php-src', '453j-q27h-5p8x'); ?> (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)</li> |
| 103 | +</ul></li> |
| 104 | +<li>Standard: |
| 105 | +<ul> |
| 106 | + <li>Fixed <?php githubsecurityl('php/php-src', '3cr5-j632-f35r'); ?> (Null byte termination in hostnames). (CVE-2025-1220)</li> |
| 107 | +</ul></li> |
| 108 | +<li>Tidy: |
| 109 | +<ul> |
| 110 | + <li>Fix memory leak in tidy output handler on error.</li> |
| 111 | + <li>Fix tidyOptIsReadonly deprecation, using tidyOptGetCategory.</li> |
| 112 | +</ul></li> |
| 113 | +</ul> |
| 114 | +<!-- }}} --></section> |
| 115 | + |
| 116 | + |
| 117 | + |
12 | 118 | <section class="version" id="8.4.8"><!-- {{{ 8.4.8 -->
|
13 | 119 | <h3>Version 8.4.8</h3>
|
14 | 120 | <b><?php release_date('05-Jun-2025'); ?></b>
|
|
1249 | 1355 |
|
1250 | 1356 | <a id="PHP_8_3"></a>
|
1251 | 1357 |
|
| 1358 | +<section class="version" id="8.3.23"><!-- {{{ 8.3.23 --> |
| 1359 | +<h3>Version 8.3.23</h3> |
| 1360 | +<b><?php release_date('03-Jul-2025'); ?></b> |
| 1361 | +<ul><li>Core: |
| 1362 | +<ul> |
| 1363 | + <li>Fixed <?php githubissuel('php/php-src', 18695); ?> (zend_ast_export() - float number is not preserved).</li> |
| 1364 | + <li>Do not delete main chunk in zend_gc.</li> |
| 1365 | + <li>Fix compile issues with zend_alloc and some non-default options.</li> |
| 1366 | +</ul></li> |
| 1367 | +<li>Curl: |
| 1368 | +<ul> |
| 1369 | + <li>Fix memory leak when setting a list via curl_setopt fails.</li> |
| 1370 | + <li>Fix incorrect OpenSSL version detection.</li> |
| 1371 | +</ul></li> |
| 1372 | +<li>Date: |
| 1373 | +<ul> |
| 1374 | + <li>Fix leaks with multiple calls to DatePeriod iterator current().</li> |
| 1375 | +</ul></li> |
| 1376 | +<li>FPM: |
| 1377 | +<ul> |
| 1378 | + <li>Fixed <?php githubissuel('php/php-src', 18662); ?> (fpm_get_status segfault).</li> |
| 1379 | +</ul></li> |
| 1380 | +<li>Hash: |
| 1381 | +<ul> |
| 1382 | + <li>Fixed bug <?php githubissuel('php/php-src', 14551); ?> (PGO build fails with xxhash).</li> |
| 1383 | +</ul></li> |
| 1384 | +<li>Intl: |
| 1385 | +<ul> |
| 1386 | + <li>Fix memory leak in intl_datetime_decompose() on failure.</li> |
| 1387 | + <li>Fix memory leak in locale lookup on failure.</li> |
| 1388 | +</ul></li> |
| 1389 | +<li>ODBC: |
| 1390 | +<ul> |
| 1391 | + <li>Fix memory leak on php_odbc_fetch_hash() failure.</li> |
| 1392 | +</ul></li> |
| 1393 | +<li>Opcache: |
| 1394 | +<ul> |
| 1395 | + <li>Fixed bug <?php githubissuel('php/php-src', 18743); ?> (Incompatibility in Inline TLS Assembly on Alpine 3.22).</li> |
| 1396 | +</ul></li> |
| 1397 | +<li>OpenSSL: |
| 1398 | +<ul> |
| 1399 | + <li>Fix memory leak of X509_STORE in php_openssl_setup_verify() on failure.</li> |
| 1400 | + <li><?php bugfix(74796); ?> (Requests through http proxy set peer name).</li> |
| 1401 | +</ul></li> |
| 1402 | +<li>PGSQL: |
| 1403 | +<ul> |
| 1404 | + <li>Fixed <?php githubsecurityl('php/php-src', 'hrwm-9436-5mv3'); ?> (pgsql extension does not check for errors during escaping). (CVE-2025-1735)</li> |
| 1405 | + <li>Fix warning not being emitted when failure to cancel a query with pg_cancel_query().</li> |
| 1406 | +</ul></li> |
| 1407 | +<li>Phar: |
| 1408 | +<ul> |
| 1409 | + <li>Add missing filter cleanups on phar failure.</li> |
| 1410 | + <li>Fixed bug <?php githubissuel('php/php-src', 18642); ?> (Signed integer overflow in ext/phar fseek).</li> |
| 1411 | +</ul></li> |
| 1412 | +<li>PHPDBG: |
| 1413 | +<ul> |
| 1414 | + <li>Fix 'phpdbg --help' segfault on shutdown with USE_ZEND_ALLOC=0.</li> |
| 1415 | +</ul></li> |
| 1416 | +<li>PDO ODBC: |
| 1417 | +<ul> |
| 1418 | + <li>Fix memory leak if WideCharToMultiByte() fails.</li> |
| 1419 | +</ul></li> |
| 1420 | +<li>Random: |
| 1421 | +<ul> |
| 1422 | + <li>Fix reference type confusion and leak in user random engine.</li> |
| 1423 | +</ul></li> |
| 1424 | +<li>Readline: |
| 1425 | +<ul> |
| 1426 | + <li>Fix memory leak when calloc() fails in php_readline_completion_cb().</li> |
| 1427 | +</ul></li> |
| 1428 | +<li>SOAP: |
| 1429 | +<ul> |
| 1430 | + <li>Fix memory leaks in php_http.c when call_user_function() fails.</li> |
| 1431 | + <li>Fixed <?php githubsecurityl('php/php-src', '453j-q27h-5p8x'); ?> (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)</li> |
| 1432 | +</ul></li> |
| 1433 | +<li>Standard: |
| 1434 | +<ul> |
| 1435 | + <li>Fixed <?php githubsecurityl('php/php-src', '3cr5-j632-f35r'); ?> (Null byte termination in hostnames). (CVE-2025-1220)</li> |
| 1436 | +</ul></li> |
| 1437 | +<li>Tidy: |
| 1438 | +<ul> |
| 1439 | + <li>Fix memory leak in tidy output handler on error.</li> |
| 1440 | + <li>Fix tidyOptIsReadonly deprecation, using tidyOptGetCategory.</li> |
| 1441 | +</ul></li> |
| 1442 | +</ul> |
| 1443 | +<!-- }}} --></section> |
| 1444 | + |
| 1445 | + |
| 1446 | + |
1252 | 1447 | <section class="version" id="8.3.22"><!-- {{{ 8.3.22 -->
|
1253 | 1448 | <h3>Version 8.3.22</h3>
|
1254 | 1449 | <b><?php release_date('05-Jun-2025'); ?></b>
|
|
3228 | 3423 |
|
3229 | 3424 | <a id="PHP_8_2"></a>
|
3230 | 3425 |
|
| 3426 | +<section class="version" id="8.2.29"><!-- {{{ 8.2.29 --> |
| 3427 | +<h3>Version 8.2.29</h3> |
| 3428 | +<b><?php release_date('03-Jul-2025'); ?></b> |
| 3429 | +<ul><li>PGSQL: |
| 3430 | +<ul> |
| 3431 | + <li>Fixed <?php githubsecurityl('php/php-src', 'hrwm-9436-5mv3'); ?> (pgsql extension does not check for errors during escaping). (CVE-2025-1735)</li> |
| 3432 | +</ul></li> |
| 3433 | +<li>SOAP: |
| 3434 | +<ul> |
| 3435 | + <li>Fixed <?php githubsecurityl('php/php-src', '453j-q27h-5p8x'); ?> (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)</li> |
| 3436 | +</ul></li> |
| 3437 | +<li>Standard: |
| 3438 | +<ul> |
| 3439 | + <li>Fixed <?php githubsecurityl('php/php-src', '3cr5-j632-f35r'); ?> (Null byte termination in hostnames). (CVE-2025-1220)</li> |
| 3440 | +</ul></li> |
| 3441 | +</ul> |
| 3442 | +<!-- }}} --></section> |
| 3443 | + |
| 3444 | + |
| 3445 | + |
3231 | 3446 | <section class="version" id="8.2.28"><!-- {{{ 8.2.28 -->
|
3232 | 3447 | <h3>Version 8.2.28</h3>
|
3233 | 3448 | <b><?php release_date('13-Mar-2025'); ?></b>
|
|
5745 | 5960 |
|
5746 | 5961 | <a id="PHP_8_1"></a>
|
5747 | 5962 |
|
| 5963 | +<section class="version" id="8.1.33"><!-- {{{ 8.1.33 --> |
| 5964 | +<h3>Version 8.1.33</h3> |
| 5965 | +<b><?php release_date('03-Jul-2025'); ?></b> |
| 5966 | +<ul><li>PGSQL: |
| 5967 | +<ul> |
| 5968 | + <li>Fixed <?php githubsecurityl('php/php-src', 'hrwm-9436-5mv3'); ?> (pgsql extension does not check for errors during escaping). (CVE-2025-1735)</li> |
| 5969 | +</ul></li> |
| 5970 | +<li>SOAP: |
| 5971 | +<ul> |
| 5972 | + <li>Fixed <?php githubsecurityl('php/php-src', '453j-q27h-5p8x'); ?> (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)</li> |
| 5973 | +</ul></li> |
| 5974 | +<li>Standard: |
| 5975 | +<ul> |
| 5976 | + <li>Fixed <?php githubsecurityl('php/php-src', '3cr5-j632-f35r'); ?> (Null byte termination in hostnames). (CVE-2025-1220)</li> |
| 5977 | +</ul></li> |
| 5978 | +</ul> |
| 5979 | +<!-- }}} --></section> |
| 5980 | + |
| 5981 | + |
| 5982 | + |
5748 | 5983 | <section class="version" id="8.1.32"><!-- {{{ 8.1.32 -->
|
5749 | 5984 | <h3>Version 8.1.32</h3>
|
5750 | 5985 | <b><?php release_date('13-Mar-2025'); ?></b>
|
|
0 commit comments