Home » Releases » 8.0 » 8.0.30 »

PHP 8.0.8

PHP 8.0 is no longer officially supported by the PHP project.

Official support refers to that provided direct by the PHP Project.

If you install PHP via third-party packages, support timelines may be different. Please read the Release Support Policy for more information.

The latest release of PHP 8.0 is 8.0.30 which includes important security patches.

Source Code

  • PHP 8.0.8 (tar.gz)

    • sha256: 084a1e8020e86fb99b663d195fd9ac98a9f37dfcb9ecb5c159054cdb8f388945
  • PHP 8.0.8 (tar.bz2)

    • sha256: 14bd77d71a98943e14b324da83e31b572781df583cda9650a184fae3214cd16f
  • PHP 8.0.8 (tar.xz)

    • sha256: dc1668d324232dec1d05175ec752dade92d29bb3004275118bc3f7fc7cbfbb1c

Change Log

  • core

    • Fixed bug #81076 (incorrect debug info on Closures with implicit binds).
      krakjoe
    • Fixed bug #81068 (Double free in realpath_cache_clean()).
      Dimitry Andric
    • Fixed bug #76359 (open_basedir bypass through adding "..").
      cmb
    • Fixed bug #81090 (Typed property performance degradation with .= operator).
      Nikita
    • Fixed bug #81070 (Integer underflow in memory limit comparison).
      Peter van Dommelen
    • Fixed bug #81122: SSRF bypass in FILTER_VALIDATE_URL. (CVE-2021-21705)
      cmb
  • bzip2

    • Fixed bug #81092 (fflush before stream_filter_remove corrupts stream).
      cmb
  • fileinfo

    • Fixed bug #80197 (implicit declaration of function 'magic_stream' is invalid).
      Nikita
  • gmp

    • Fixed bug #81119 (GMP operators throw errors with wrong parameter names).
      Nikita
  • mysqlnd

    • Fixed bug #80761 (PDO uses too much memory).
      Nikita
  • oci8

    • Fixed bug #81088 (error in regression test for oci_fetch_object() and oci_fetch_array()).
      Máté
  • opcache

    • Fixed bug #81051 (Broken property type handling after incrementing reference).
      Dmitry
    • Fixed bug #80968 (JIT segfault with return from required file).
      Dmitry
  • openssl

    • Fixed bug #76694 (native Windows cert verification uses CN as sever name).
      cmb
  • pdo_firebird

    • Fixed bug #76448: Stack buffer overflow in firebird_info_cb. (CVE-2021-21704)
      cmb
    • Fixed bug #76449: SIGSEGV in firebird_handle_doer. (CVE-2021-21704)
      cmb
    • Fixed bug #76450: SIGSEGV in firebird_stmt_execute. (CVE-2021-21704)
      cmb
    • Fixed bug #76452: Crash while parsing blob data in firebird_fetch_blob. (CVE-2021-21704)
      cmb
  • readline

    • Fixed bug #72998 (invalid read in readline completion).
      krakjoe
  • standard

    • Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string conversion").
      cmb
    • Fixed bug #77627 (method_exists on Closure::__invoke inconsistency).
      krakjoe
  • windows

    • Fixed bug #81120 (PGO data for main PHP DLL are not used).
      cmb

PHP 8.0


  Represents a security release