Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.4 » 8.4.25 »

PHP 8.4.15

The latest release of PHP 8.4 is 8.4.25 which includes important security patches.

Source Code

Change Log

  • core

    • Fixed bug GH-19934 (CGI with auto_globals_jit=0 causes uouv).
      ilutov
    • Fixed bug GH-20073 (Assertion failure in WeakMap offset operations on reference).
      nielsdos
    • Fixed bug GH-20085 (Assertion failure when combining lazy object get_properties exception with foreach loop).
      nielsdos
    • Fixed bug GH-19844 (Don't bail when closing resources on shutdown).
      ilutov
    • Fixed bug GH-20177 (Accessing overridden private property in get_object_vars() triggers assertion error).
      ilutov
    • Fixed bug GH-20270 (Broken parent hook call with named arguments).
      ilutov
    • Fixed bug GH-20183 (Stale EG(opline_before_exception) pointer through eval).
      ilutov

  • dom

    • Partially fixed bug GH-16317 (DOM classes do not allow __debugInfo() overrides to work).
      nielsdos
    • Fixed bug GH-20281 (\Dom\Document::getElementById() is inconsistent after nodes are removed).
      nielsdos

  • exif

    • Fix possible memory leak when tag is empty.
      nielsdos

  • fpm

    • Fixed bug GH-19974 (fpm_status_export_to_zval segfault for parallel execution).
      Jakub Zelenka
      txuna

  • ftp

    • Fixed bug GH-20240 (FTP with SSL: ftp_fput(): Connection timed out on successful writes).
      nielsdos

  • gd

    • Fixed bug GH-20070 (Return type violation in imagefilter when an invalid filter is provided).
      Girgias

  • intl

    • Fix memory leak on error in locale_filter_matches().
      nielsdos

  • libxml

    • Fix not thread safe schema/relaxng calls.
      SpencerMalone
      nielsdos

  • mysqlnd

    • Fixed bug GH-8978 (SSL certificate verification fails (port doubled)).
      nielsdos
    • Fixed bug GH-20122 (getColumnMeta() for JSON-column in MySQL).
      nielsdos

  • opcache

    • Fixed bug GH-20081 (access to uninitialized vars in preload_load()).
      Arnaud
    • Fixed bug GH-20121 (JIT broken in ZTS builds on MacOS 15).
      Arnaud
      Shivam Mathur
    • Fixed bug GH-19875 (JIT 1205 segfault on large file compiled in subprocess).
      Arnaud
    • Fixed bug GH-20012 (heap buffer overflow in jit).
      Arnaud
    • Partially fixed bug GH-17733 (Avoid calling wrong function when reusing file caches across differing environments).
      ilutov

  • pgsql

    • Fix memory leak when first string conversion fails.
      nielsdos
    • Fix segfaults when attempting to fetch row into a non-instantiable class name.
      Girgias
      nielsdos

  • phar

    • Fix memory leak of argument in webPhar.
      nielsdos
    • Fix memory leak when setAlias() fails.
      nielsdos
    • Fix a bunch of memory leaks in phar_parse_zipfile() error handling.
      nielsdos
    • Fix file descriptor/memory leak when opening central fp fails.
      nielsdos
    • Fix memleak+UAF when opening temp stream in buildFromDirectory() fails.
      nielsdos
    • Fix potential buffer length truncation due to usage of type int instead of type size_t.
      Girgias
    • Fix memory leak when openssl polyfill returns garbage.
      nielsdos
    • Fix file descriptor leak in phar_zip_flush() on failure.
      nielsdos
    • Fix memory leak when opening temp file fails while trying to open gzip-compressed archive.
      nielsdos
    • Fixed bug GH-20302 (Freeing a phar alias may invalidate PharFileInfo objects).
      nielsdos

  • random

    • Fix Randomizer::__serialize() w.r.t. INDIRECTs.
      nielsdos

  • reflection

    • Fixed bug GH-20217 (ReflectionClass::isIterable() incorrectly returns true for classes with property hooks).
      alexandre-daubois

  • simplexml

    • Partially fixed bug GH-16317 (SimpleXML does not allow __debugInfo() overrides to work).
      nielsdos

  • streams

    • Fixed bug GH-19798: XP_SOCKET XP_SSL (Socket stream modules): Incorrect condition for Win32/Win64.
      Jakub Zelenka

  • tidy

    • Fixed GH-19021 (improved tidyOptGetCategory detection).
      arjendekorte
      David Carlier
      Peter Kokot
    • Fix UAF in tidy when tidySetErrorBuffer() fails.
      nielsdos

  • xmlreader

    • Fix arginfo/zpp violations when LIBXML_SCHEMAS_ENABLED is not available.
      nielsdos

  • windows

    • Fix GH-19722 (_get_osfhandle asserts in debug mode when given a socket).
      dktapps

PHP 8.4


  Represents a security release