Home » Releases » 8.4 » 8.4.25 »

PHP 8.4.8

The latest release of PHP 8.4 is 8.4.25 which includes important security patches.

Source Code

  • PHP 8.4.8 (tar.gz)

    • sha256: 26d5ae014925b7dee3a61ec02422795f008fbb3a36f9355edaee2d9d78b89b07
  • PHP 8.4.8 (tar.bz2)

    • sha256: 36569c64dd1499e570c436603b641eee7cde4af576af786597d0ee711b3a3a8a
  • PHP 8.4.8 (tar.xz)

    • sha256: aa6a4d330b47eacd83e351658ba8c47747a1e4356456219cfb6d75e7838da091

Change Log

  • core

    • Fixed GH-18480 (array_splice with large values for offset/length arguments).
      nielsdos/David Carlier
    • Partially fixed GH-18572 (nested object comparisons leading to stack overflow).
      David Carlier
    • Fixed OSS-Fuzz #417078295.
      nielsdos
    • Fixed OSS-Fuzz #418106144.
      nielsdos
  • curl

    • Fixed GH-18460 (curl_easy_setopt with CURLOPT_USERPWD/CURLOPT_USERNAME/ CURLOPT_PASSWORD set the Authorization header when set to NULL).
      David Carlier
  • date

    • Fixed bug GH-18076 (Since PHP 8, the date_sun_info() function returns inaccurate sunrise and sunset times, but other calculated times are correct) (JiriJozif).
    • Fixed bug GH-18481 (date_sunrise with unexpected nan value for the offset).
      nielsdos/David Carlier
  • dom

    • Backport lexbor/lexbor#274.
      nielsdos
      alexpeattie
  • intl

    • Fix various reference issues.
      nielsdos
  • ldap

    • Fixed bug GH-18529 (ldap no longer respects TLS_CACERT from ldaprc in ldap_start_tls()).
      Remi
  • opcache

    • Fixed bug GH-18417 (Windows SHM reattachment fails when increasing memory_consumption or jit_buffer_size).
      nielsdos
    • Fixed bug GH-18297 (Exception not handled when jit guard is triggered).
      Arnaud
    • Fixed bug GH-18408 (Snapshotted poly_func / poly_this may be spilled).
      Arnaud
    • Fixed bug GH-18567 (Preloading with internal class alias triggers assertion failure).
      nielsdos
    • Fixed bug GH-18534 (FPM exit code 70 with enabled opcache and hooked properties in traits).
      nielsdos
    • Fix leak of accel_globals->key.
      nielsdos
  • openssl

    • Fix missing checks against php_set_blocking() in xp_ssl.c.
      nielsdos
  • spl

    • Fixed bug GH-18421 (Integer overflow with large numbers in LimitIterator).
      nielsdos
  • standard

    • Fixed bug GH-17403 (Potential deadlock when putenv fails).
      nielsdos
    • Fixed bug GH-18400 (http_build_query type error is inaccurate).
      nielsdos
    • Fixed bug GH-18509 (Dynamic calls to assert() ignore zend.assertions).
      timwolla
  • windows

    • Fix leak+crash with sapi_windows_set_ctrl_handler().
      nielsdos
  • zip

    • Fixed bug GH-18431 (Registering ZIP progress callback twice doesn't work).
      nielsdos
    • Fixed bug GH-18438 (Handling of empty data and errors in ZipArchive::addPattern).
      nielsdos

PHP 8.4


  Represents a security release