Everything

php

PHP 8.4.2 Released

php.internals

Calvin Buckley

1 year ago

The PHP development team announces the immediate availability of PHP
8.4.2. This is a bugfix release.

All PHP 8.4 users are encouraged to upgrade to this version.

For source downloads of PHP 8.4.2 please visit our downloads page.
Windows binaries can be found on the PHP for Windows site.
The list of changes is recorded in the ChangeLog.

Release Announcement: <https://php.net/releases/8_4_2.php>
Downloads:            <https://php.net/downloads>
Windows downloads:    <https://windows.php.net/download#php-8.4>
Changelog:            <https://php.net/ChangeLog-8.php#8.4.2>
Release Manifest:     <https://gist.github.com/NattyNarwhal/30afe28f00ba03943aedf6cd5a88fed6>

Many thanks to all the contributors and supporters!

Regards,
Calvin Buckley, Saki Takamachi, and Eric Mann



php-8.4.2.tar.bz2
SHA256 hash: ef4fe9921b885ce3b047792ab60260eaf657e22812be511d19d0e45edf984783
PGP signature:
-----BEGIN PGP SIGNATURE-----

iHUEABYKAB0WIQSdf5mgy48FyKaVjWJWqXr3YAo5pgUCZ2GcjwAKCRBWqXr3YAo5
pkvDAQCR79hpzHRtKGjGd8xbgKAjny/Bo7Xxxs1U3Z6Qk1EJdgEAqtJ/FNaxdYr5
G+t9YVGQwPxnzn2gXAVOUdaoPchHZQg=
=ncKQ
-----END PGP SIGNATURE-----


php-8.4.2.tar.gz
SHA256 hash: 5d3cf82a7f4cafdcfc4f3d98f3e3ee81077ae57c709a5613cbff5834d78a7747
PGP signature:
-----BEGIN PGP SIGNATURE-----

iHUEABYKAB0WIQSdf5mgy48FyKaVjWJWqXr3YAo5pgUCZ2GcjwAKCRBWqXr3YAo5
prLlAP9W/Tz+rT1urdV2qWlUgQbqNDkBAYj1HJuOG6wkiTMP4gD+Ickmg/zz9/w0
DOig3GuctQnk48g9KfoAV7v0T+t/mQ8=
=BbVq
-----END PGP SIGNATURE-----


php-8.4.2.tar.xz
SHA256 hash: 92636453210f7f2174d6ee6df17a5811368f556a6c2c2cbcf019321e36456e01
PGP signature:
-----BEGIN PGP SIGNATURE-----

iHUEABYKAB0WIQSdf5mgy48FyKaVjWJWqXr3YAo5pgUCZ2GcjwAKCRBWqXr3YAo5
prOvAP0VusAOt0NziOsX5BTgrNFZQoN+abeN8IpS251ma4zUSgD+KWSjwMFa9Xfc
7KK55ZGwRE6ycBTVh4p4cKTgVV/vQQI=
=n8dr
-----END PGP SIGNATURE-----

Weedpacket

1 year ago

On 2024-12-20 06:46, Calvin Buckley wrote:

> The PHP development team announces the immediate availability of PHP
> 8.4.2. This is a bugfix release.
>
> All PHP 8.4 users are encouraged to upgrade to this version.
>
> For source downloads of PHP 8.4.2 please visit our downloads page.
> Windows binaries can be found on the PHP for Windows site.
> The list of changes is recorded in the ChangeLog.
>
> Release Announcement: <https://php.net/releases/8_4_2.php>
> Downloads:            <https://php.net/downloads>
> Windows downloads:    <https://windows.php.net/download#php-8.4>
> Changelog:            <https://php.net/ChangeLog-8.php#8.4.2>
> Release Manifest:     <https://gist.github.com/NattyNarwhal/30afe28f00ba03943aedf6cd5a88fed6>
>
> Many thanks to all the contributors and supporters!
>

Interestingly for the Windows builds,
unpacking php-8.4.2-Win32-vs17-x64.zip triggers an alert about
Win32/GenKryptik.HEXO in deplister.exe from my antivirus software. I
presume that it's a false positive, but it refuses to allow the file.

Christoph Becker

1 year ago

On 19.12.2024 at 23:12, Morgan wrote:

> On 2024-12-20 06:46, Calvin Buckley wrote:

>> For source downloads of PHP 8.4.2 please visit our downloads page.
>> Windows binaries can be found on the PHP for Windows site.
>> The list of changes is recorded in the ChangeLog.
>
> Interestingly for the Windows builds,
> unpacking php-8.4.2-Win32-vs17-x64.zip triggers an alert about Win32/
> GenKryptik.HEXO in deplister.exe from my antivirus software. I presume
> that it's a false positive, but it refuses to allow the file.

Yeah, that happens from time to time[1], although I don't understand
why.  The source code[2] doesn't look suspicious to me, and the Windows
binaries have been built via GH actions[3], so even if some malicious
code had been added there, why would it only affect deplister.exe?

[1] <https://github.com/php/php-src/issues/14875>
[2] <https://github.com/php/php-src/blob/php-8.4.2/win32/build/deplister.c>
[3] <https://github.com/cmb69/php-ftw/actions/runs/12378057884>

Christoph