Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.4 » 8.4.25 »

PHP 8.4.3

The latest release of PHP 8.4 is 8.4.25 which includes important security patches.

Source Code

  • PHP 8.4.3 (tar.gz)

    • sha256: 45b88555b31487401b42c8bd36f2c45d84992bc93ae4c1a23d93bb3347984ecb

  • PHP 8.4.3 (tar.bz2)

    • sha256: d6b12379d1f1df216d1932840a31b14fed1e0fc7e8db1e9d1795f75a1e75ead9

  • PHP 8.4.3 (tar.xz)

    • sha256: 5c42173cbde7d0add8249c2e8a0c19ae271f41d8c47d67d72bdf91a88dcc7e4b

Change Log

  • bcmath

    • Fixed bug GH-17049 (Correctly compare 0 and -0).
      Saki Takamachi
    • Fixed bug GH-17061 (Now Number::round() does not remove trailing zeros).
      Saki Takamachi
    • Fixed bug GH-17064 (Correctly round rounding mode with zero edge case).
      Saki Takamachi
    • Fixed bug GH-17275 (Fixed the calculation logic of dividend scale).
      Saki Takamachi

  • core

    • Fixed bug OSS-Fuzz #382922236 (Duplicate dynamic properties in hooked object iterator properties table).
      ilutov
    • Fixed unstable get_iterator pointer for hooked classes in shm on Windows.
      ilutov
    • Fixed bug GH-17106 (ZEND_MATCH_ERROR misoptimization).
      ilutov
    • Fixed bug GH-17162 (zend_array_try_init() with dtor can cause engine UAF).
      nielsdos
    • Fixed bug GH-17101 (AST->string does not reproduce constructor property promotion correctly).
      nielsdos
    • Fixed bug GH-17200 (Incorrect dynamic prop offset in hooked prop iterator).
      ilutov
    • Fixed bug GH-17216 (Trampoline crash on error).
      nielsdos

  • dba

    • Skip test if inifile is disabled.
      orlitzky

  • dom

    • Fixed bug GH-17145 (DOM memory leak).
      nielsdos
    • Fixed bug GH-17201 (Dom\TokenList issues with interned string replace).
      nielsdos
    • Fixed bug GH-17224 (UAF in importNode).
      nielsdos

  • embed

    • Make build command for program using embed portable.
      dunglas

  • ffi

    • Fixed bug #79075 (FFI header parser chokes on comments).
      nielsdos
    • Fix memory leak on ZEND_FFI_TYPE_CHAR conversion failure.
      nielsdos
    • Fixed bug GH-16013 and bug #80857 (Big endian issues).
      Dmitry
      nielsdos

  • fileinfo

    • Fixed bug GH-17039 (PHP 8.4: Incorrect MIME content type).
      nielsdos

  • fpm

    • Fixed bug GH-13437 (FPM: ERROR: scoreboard: failed to lock (already locked)).
      Jakub Zelenka
    • Fixed bug GH-17112 (Macro redefinitions).
      cmb
      nielsdos
    • Fixed bug GH-17208 (bug64539-status-json-encoding.phpt fail on 32-bits).
      nielsdos

  • gd

    • Fixed bug GH-16255 (Unexpected nan value in ext/gd/libgd/gd_filter.c).
      nielsdos
      cmb
    • Ported fix for libgd bug 276 (Sometimes pixels are missing when storing images as BMPs).
      cmb

  • gettext

    • Fixed bug GH-17202 (Segmentation fault ext/gettext/gettext.c bindtextdomain()).
      Michael Orlitzky

  • iconv

    • Fixed bug GH-17047 (UAF on iconv filter failure).
      nielsdos

  • ldap

    • Fixed bug GH-17280 (ldap_search() fails when $attributes array has holes).
      nielsdos

  • libxml

    • Fixed bug GH-17223 (Memory leak in libxml encoding handling).
      nielsdos

  • mbstring

    • Fixed bug GH-17112 (Macro redefinitions).
      nielsdos
      cmb

  • opcache

    • opcache_get_configuration() properly reports jit_prof_threshold.
      cmb
    • Fixed bug GH-17140 (Assertion failure in JIT trace exit with ZEND_FETCH_DIM_FUNC_ARG).
      nielsdos
      Dmitry
    • Fixed bug GH-17151 (Incorrect RC inference of op1 of FETCH_OBJ and INIT_METHOD_CALL).
      Dmitry
      ilutov
    • Fixed bug GH-17246 (GC during SCCP causes segfault).
      Dmitry
    • Fixed bug GH-17257 (UBSAN warning in ext/opcache/jit/zend_jit_vm_helpers.c).
      nielsdos
      Dmitry

  • pcntl

    • Fix memory leak in cleanup code of pcntl_exec() when a non stringable value is encountered past the first entry.
      Girgias

  • pgsql

    • Fixed bug GH-17158 (pg_fetch_result Shows Incorrect ArgumentCountError Message when Called With 1 Argument).
      nielsdos
    • Fixed further ArgumentCountError for calls with flexible number of arguments.
      David Carlier

  • phar

    • Fixed bug GH-17137 (Segmentation fault ext/phar/phar.c).
      nielsdos

  • simplexml

    • Fixed bug GH-17040 (SimpleXML's unset can break DOM objects).
      nielsdos
    • Fixed bug GH-17153 (SimpleXML crash when using autovivification on document).
      nielsdos

  • sockets

    • Fixed bug GH-16276 (socket_strerror overflow handling with INT_MIN).
      David Carlier / cmb
    • Fixed overflow on SO_LINGER values setting, strengthening values check on SO_SNDTIMEO/SO_RCVTIMEO for socket_set_option().
      David Carlier

  • spl

    • Fixed bug GH-17198 (SplFixedArray assertion failure with get_object_vars).
      nielsdos
    • Fixed bug GH-17225 (NULL deref in spl_directory.c).
      nielsdos

  • streams

    • Fixed bug GH-17037 (UAF in user filter when adding existing filter name due to incorrect error handling).
      nielsdos
    • Fixed bug GH-16810 (overflow on fopen HTTP wrapper timeout value).
      David Carlier
    • Fixed bug GH-17067 (glob:// wrapper doesn't cater to CWD for ZTS builds).
      cmb

  • windows

    • Hardened proc_open() against cmd.exe hijacking.
      cmb

  • xml

    • Fixed bug GH-1718 (unreachable program point in zend_hash).
      nielsdos

PHP 8.4


  Represents a security release