Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.4 » 8.4.25 »

PHP 8.4.19

The latest release of PHP 8.4 is 8.4.25 which includes important security patches.

Source Code

Change Log

  • core

    • Fixed bug GH-21029 (zend_mm_heap corrupted on Aarch64, LTO builds).
      Arnaud
    • Fixed bug GH-20657 (Assertion failure in zend_lazy_object_get_info triggered by setRawValueWithoutLazyInitialization() and newLazyGhost()).
      Arnaud
    • Fixed bug GH-20504 (Assertion failure in zend_get_property_guard when accessing properties on Reflection LazyProxy via isset()).
      Arnaud
    • Fixed OSS-Fuzz #478009707 (Borked assign-op/inc/dec on untyped hooked property backing value).
      ilutov
    • Fixed bug GH-21215 (Build fails with -std=).
      Arnaud
    • Fixed bug GH-13674 (Build system installs libtool wrappers when using slibtool).
      Michael Orlitzky

  • curl

    • Fixed bug GH-21023 (CURLOPT_XFERINFOFUNCTION crash with a null callback).
      David Carlier
    • Don't truncate length.
      ndossche

  • date

    • Fixed bug GH-20936 (DatePeriod::__set_state() cannot handle null start).
      ndossche
    • Fix timezone offset with seconds losing precision.
      ndossche

  • dom

    • Fixed bug GH-21077 (Accessing Dom\Node::baseURI can throw TypeError).
      ndossche
    • Fixed bug GH-21097 (Accessing Dom\Node properties can can throw TypeError).
      ndossche

  • mbstring

    • Fixed bug GH-21223; mb_guess_encoding no longer crashes when passed huge list of candidate encodings (with 200,000+ entries).
      Jordi Kroon

  • opcache

    • Fixed bug GH-20718 ("Insufficient shared memory" when using JIT on Solaris).
      Petr Sumbera
    • Fixed bug GH-21227 (Borked SCCP of array containing partial object).
      ilutov
    • Fixed bug GH-21052 (Preloaded constant erroneously propagated to file-cached script).
      ilutov

  • openssl

    • Fix a bunch of leaks and error propagation.
      ndossche

  • pcntl

    • Fixed pcntl_setns() internal errors handling regarding errnos.
      David Carlier/ndossche
    • Fixed cpuset leak in pcntl_setcpuaffinity on out-of-range CPU ID on NetBSD/Solaris platforms.
      David Carlier
    • Fixed pcntl_signal() signal table registering the callback first OS-wise before the internal list.
      David Carlier
    • Fixed pcntl_signal_dispatch() stale pointer and exception handling.
      David Carlier

  • pcre

    • Fixed preg_match memory leak with invalid regexes.
      David Carlier
    • Fixed pcre2_code leak when pcre2_pattern_info() fails after a successful pcre2_compile(), and match_sets/match_data/marks leaks in php_pcre_match_impl().
      David Carlier

  • pdo_pgsql

    • Fixed bug GH-21055 (connection attribute status typo for GSS negotiation).
      lsaos

  • pgsql

    • Fixed bug GH-21162 (pg_connect() memory leak on error).
      David Carlier

  • sockets

    • Fixed bug GH-21161 (socket_set_option() crash with array 'addr' entry as null).
      David Carlier
    • Fixed possible addr length overflow with socket_connect() and AF_UNIX family sockets.
      David Carlier

  • windows

    • Fixed compilation with clang (missing intrin.h include).
      Kévin Dunglas

PHP 8.4


  Represents a security release