Home » Releases » 8.4 » 8.4.25 »

PHP 8.4.22

The latest release of PHP 8.4 is 8.4.25 which includes important security patches.

Source Code

Change Log

  • date

    • Fixed bug GH-18422 (int overflow in php_date_llabs).
      iliaal
  • intl

    • Fix incorrect argument positions in out-of-bounds errors for IntlCalendar::set(), IntlCalendar::setDate(), IntlCalendar::setDateTime(), and IntlGregorianCalendar date/time construction.
      Weilin Du
    • Expose Spoofchecker restriction-level APIs on all supported ICU versions.
      Weilin Du
    • Fix SpoofChecker::setAllowedChars() and IntlDateFormatter::__construct() to report PHP constant names instead of ICU constant names in user-visible error messages.
      Weilin Du
  • mysqlnd

    • Fix persistent free of non-persistent connect_attr key (David Carlier).
  • opcache

    • Fixed bug GH-21972 (Corrupted variable type when a typed by-value return contains a reference wrapper).
      Weilin Du
    • Fixed tracing JIT crash when a VM interrupt is handled during an observed user function call.
      Levi Morrison
    • Fixed bug GH-22004 (Assertion failure at ext/opcache/jit/zend_jit_trace.c).
      Arnaud
  • openssl

    • Fix compatibility issues with OpenSSL 4.0.
      jordikroon
      Remi
  • phar

    • Fixed bug GH-21986 (PharData::getContent() crash on infinite recursion with symlinks).
      David Carlier
  • soap

    • Fixed integer overflow when decoding SOAP array indexes.
      Weilin Du
  • spl

    • Fix SplFixedArray::setSize leak when destructor grows during clear.
      David Carlier
    • Fixed bug GH-21933 (use after free of self-freeing MultipleIterator children).
      David Carlier
  • standard

    • Fixed bug GH-21689 (version_compare() incorrectly handles versions ending with a dot).
      timwolla
    • Fixed ip2long() leading zeros handling inconsistency on AIX.
      ayappanec

PHP 8.4


  Represents a security release