Home » Releases » 8.2 » 8.2.33 »

PHP 8.2.19

The latest release of PHP 8.2 is 8.2.33 which includes important security patches.

Source Code

Change Log

  • core

    • Fixed bug GH-13772 (Invalid execute_data->opline pointers in observer fcall handlers when JIT is enabled).
      Bob
    • Fixed bug GH-13931 (Applying zero offset to null pointer in Zend/zend_opcode.c).
      nielsdos
    • Fixed bug GH-13942 (Align the behavior of zend-max-execution-timers with other timeout implementations).
      Kévin Dunglas
    • Fixed bug GH-14003 (Broken cleanup of unfinished calls with callable convert parameters).
      ilutov
    • Fixed bug GH-14013 (Erroneous dnl appended in configure).
      Peter Kokot
    • Fixed bug GH-10232 (If autoloading occurs during constant resolution filename and lineno are identified incorrectly).
      ranvis
    • Fixed bug GH-13727 (Missing void keyword).
      Peter Kokot
  • fibers

    • Fixed bug GH-13903 (ASAN false positive underflow when executing copy()).
      nielsdos
  • fpm

    • Fixed bug GH-13563 (Setting bool values via env in FPM config fails).
      Jakub Zelenka
  • intl

    • Fixed build for icu 74 and onwards.
      dunglas
  • mysqlnd

    • Fix shift out of bounds on 32-bit non-fast-path platforms.
      nielsdos
  • opcache

    • Fixed incorrect assumptions across compilation units for static calls.
      ilutov
  • openssl

    • Fixed bug GH-10495 (feof on OpenSSL stream hangs indefinitely).
      Jakub Zelenka
  • pdo sqlite

    • Fix GH-13984 (Buffer size is now checked before memcmp).
      Saki Takamachi
    • Fix GH-13998 (Manage refcount of agg_context->val correctly).
      Saki Takamachi
  • phar

    • Fixed bug GH-13836 (Renaming a file in a Phar to an already existing filename causes a NULL pointer dereference).
      nielsdos
    • Fixed bug GH-13833 (Applying zero offset to null pointer in zend_hash.c).
      nielsdos
    • Fix potential NULL pointer dereference before calling EVP_SignInit.
      icy17
  • phpdbg

    • Fixed bug GH-13827 (Null pointer access of type 'zval' in phpdbg_frame).
      nielsdos
  • posix

    • Fix usage of reentrant functions in ext/posix.
      Arnaud
  • session

    • Fixed bug GH-13856 (Member access within null pointer of type 'ps_files' in ext/session/mod_files.c).
      nielsdos
    • Fixed bug GH-13891 (memleak and segfault when using ini_set with session.trans_sid_hosts).
      nielsdos
      kamil-tekiela
    • Fixed buffer _read/_write size limit on windows for the file mode.
      David Carlier
  • streams

    • Fixed file_get_contents() on Windows fails with "errno=22 Invalid argument".
      Damian Wójcik
    • Fixed bug GH-13264 (Part 1 - Memory leak on stream filter failure).
      Jakub Zelenka
    • Fixed bug GH-13860 (Incorrect PHP_STREAM_OPTION_CHECK_LIVENESS case in ext/openssl/xp_ssl.c - causing use of dead socket).
      nielsdos
    • Fixed bug GH-11678 (Build fails on musl 1.2.4 - lfs64).
      Arnaud
  • treewide

    • Fix gcc-14 Wcalloc-transposed-args warnings.
      Cristian Rodríguez

PHP 8.2


  Represents a security release