Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.2 » 8.2.33 »

PHP 8.2.14

The latest release of PHP 8.2 is 8.2.33 which includes important security patches.

Source Code

Change Log

  • core

    • Fixed oss-fuzz #54325 (Use-after-free of name in var-var with malicious error handler).
      ilutov
    • Fixed oss-fuzz #64209 (In-place modification of filename in php_message_handler_for_zend).
      ilutov
    • Fixed bug GH-12758 / GH-12768 (Invalid opline in OOM handlers within ZEND_FUNC_GET_ARGS and ZEND_BIND_STATIC).
      Florian Engelhardt
    • Fix various missing NULL checks.
      nielsdos
      dstogov
    • Fixed bug GH-12835 (Leak of call->extra_named_params on internal __call).
      ilutov

  • date

    • Fixed improbably integer overflow while parsing really large (or small) Unix timestamps.
      Derick

  • dom

    • Fixed bug GH-12616 (DOM: Removing XMLNS namespace node results in invalid default: prefix).
      nielsdos

  • fpm

    • Fixed bug GH-12705 (Segmentation fault in fpm_status_export_to_zval).
      Patrick Prasse

  • ftp

    • Fixed bug GH-9348 (FTP & SSL session reuse).
      nielsdos

  • intl

    • Fixed bug GH-12635 (Test bug69398.phpt fails with ICU 74.1).
      nielsdos

  • libxml

    • Fixed bug GH-12702 (libxml2 2.12.0 issue building from src).
      nono303
    • Fixed test failures for libxml2 2.12.0.
      nielsdos

  • mysqlnd

    • Avoid using uninitialised struct.
      mikhainin
    • Fixed bug GH-12791 (Possible dereference of NULL in MySQLnd debug code).
      nielsdos

  • opcache

    • Fixed JIT bug (Function JIT emits "Uninitialized string offset" warning at the same time as invalid offset Error).
      Girgias
    • Fixed JIT bug (JIT emits "Attempt to assign property of non-object" warning at the same time as Error is being thrown).
      Girgias

  • openssl

    • Fixed bug #50713 (openssl_pkcs7_verify() may ignore untrusted CAs).
      Jakub Zelenka

  • pcre

    • Fixed bug GH-12628 (The gh11374 test fails on Alpinelinux).
      nielsdos

  • pdo pgsql

    • Fixed the default value of $fetchMode in PDO::pgsqlGetNotify() (kocsismate)

  • pgsql

    • Fixed bug GH-12763 wrong argument type for pg_untrace.
      degtyarov

  • phpdbg

    • Fixed bug GH-12675 (MEMORY_LEAK in phpdbg_prompt.c).
      nielsdos

  • soap

    • Fixed bug GH-12838 ([SOAP] Temporary WSDL cache files not being deleted).
      nielsdos

  • spl

    • Fixed bug GH-12721 (SplFileInfo::getFilename() segfault in combination with GlobIterator and no directory separator).
      nielsdos

  • sqlite3

    • Fixed bug GH-12633 (sqlite3_defensive.phpt fails with sqlite 3.44.0).
      SakiTakamachi

  • standard

    • Fix memory leak in syslog device handling.
      danog
    • Fixed bug GH-12621 (browscap segmentation fault when configured in the vhost).
      nielsdos
    • Fixed bug GH-12655 (proc_open() does not take into account references in the descriptor array).
      nielsdos

  • streams

    • Fixed bug #79945 (Stream wrappers in imagecreatefrompng causes segfault).
      Jakub Zelenka

  • zip

    • Fixed bug GH-12661 (Inconsistency in ZipArchive::addGlob remove_path Option Behavior).
      Remi

PHP 8.2


  Represents a security release