Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.4 » 8.4.25 »

PHP 8.4.11

The latest release of PHP 8.4 is 8.4.25 which includes important security patches.

Source Code

Change Log

  • calendar

    • Fixed jewishtojd overflow on year argument.
      David Carlier

  • core

    • Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order).
      Daniil Gentili
    • Fixed bug GH-18907 (Leak when creating cycle in hook).
      ilutov
    • Fix OSS-Fuzz #427814456.
      nielsdos
    • Fix OSS-Fuzz #428983568 and #428760800.
      nielsdos

  • curl

    • Fix memory leaks when returning refcounted value from curl callback.
      nielsdos
    • Remove incorrect string release.
      nielsdos

  • dom

    • Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte).
      nielsdos

  • ldap

    • Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID.
      David Carlier

  • mbstring

    • Fixed bug GH-18901 (integer overflow mb_split).
      nielsdos

  • opcache

    • Fixed bug GH-18639 (Internal class aliases can break preloading + JIT).
      nielsdos
    • Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet).
      nielsdos
    • Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c).
      nielsdos
    • Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading).
      nielsdos

  • openssl

    • Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server).
      Jakub Zelenka

  • pcntl

    • Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers).
      Arnaud

  • phar

    • Fix stream double free in phar.
      nielsdos
      dixyes
    • Fix phar crash and file corruption with SplFileObject.
      nielsdos

  • soap

    • Fixed bug GH-18990, bug #81029, bug #47314 (SOAP HTTP socket not closing on object destruction).
      nielsdos
    • Fix memory leak when URL parsing fails in redirect.
      Girgias

  • spl

    • Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash).
      nielsdos

  • standard

    • Fix misleading errors in printf().
      nielsdos
    • Fix RCN violations in array functions.
      nielsdos
    • Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value.
      David Carlier

  • streams

    • Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error).
      Jakub Zelenka

  • zip

    • Fix leak when path is too long in ZipArchive::extractTo().
      nielsdos

PHP 8.4


  Represents a security release