Software 43841 Published by

The latest release candidates for PHP versions 8.3.28 and 8.4.15 have been made available for testing purposes, offering significant improvements in stability and performance. A multitude of bug fixes have been incorporated into the core functionality of PHP, addressing critical issues such as memory leaks and assertion failures. Various components, including DOM, Exif, FPM, FTP, GD, Intl, LibXML, MySQLnd, Opcache, PgSql, Phar, and Random, have also received important updates to resolve bugs and improve functionality. These enhancements aim to provide a smoother experience for developers working with PHP, ultimately enhancing the overall reliability and security of the language.



PHP 8.3.28 and 8.4.15 release candidates released

The latest release candidates for PHP versions 8.3.28 and 8.4.15 have been made available for testing purposes.

PHP is an extremely popular general-purpose scripting language, primarily used for web development. It's known for its flexibility, efficiency, and ease of use.

A multitude of bug fixes have been incorporated into the latest release candidates. These improvements aim to enhance the overall stability and performance of PHP.

Core Fixes

Numerous bugs have been identified and resolved in the core functionality of PHP 8.3.28 and 8.4.15. Some notable corrections include:

  • Bug GH-19934 has been fixed, addressing an issue where CGI with auto_globals_jit=0 causes uouv.
  • A bug related to assertion failures in WeakMap offset operations on reference (GH-20073) has also been resolved.
  • Another critical correction involves preventing PHP from bailing when closing resources during shutdown (GH-19844).
  • Additionally, accessing overridden private properties in get_object_vars() no longer triggers assertion errors (GH-20177).

DOM and XML-Related Fixes

Several issues have been addressed within the DOM and XML-related components of PHP:

  • Bug GH-16317 has been partially fixed, allowing __debugInfo() overrides to work in DOM classes.
  • Another partial fix for this bug has also been applied to SimpleXML.

Exif, FPM, FTP, GD, Intl, LibXML, MySQLnd, Opcache, PgSql, Phar, and Random Fixes

A range of critical bugs have been resolved across various PHP components:

  • Exif: A potential memory leak when a tag is empty has been fixed.
  • FPM: The fpm_status_export_to_zval segfault for the parallel execution bug (GH-19974) has been addressed.
  • FTP: Connection timeouts during successful writes over SSL connections are now properly handled.
  • GD: Return type violations in image filters when an invalid filter is provided have been resolved.
  • Intl: A memory leak from an error in locale_filter_matches() has been fixed.
  • LibXML: Thread-safe schema/relaxng calls are now ensured.
  • MySQLnd: Bugs GH-8978 (SSL certificate verification fails) and GH-20122 (getColumnMeta() for JSON-column in MySQL) have been resolved.
  • Opcache: A range of critical bug fixes, including heap buffer overflow in jit (GH-20012), JIT 1205 segfault on large file compiled in subprocess (GH-19875), and others.
  • PgSql: Memory leaks when first string conversion fails and segfaults when attempting to fetch a row into a non-instantiable class name have been addressed.
  • Phar: Multiple memory leaks have been identified, including those related to webPhar, failures in setAlias(), errors in phar_parse_zipfile() handling, and garbage returned by the openssl polyfill.

Streams, Tidy, XMLReader, and Windows Fixes

Additional bug fixes have been incorporated into the latest release candidates:

  • Streams: The XP_SOCKET XP_SSL (Socket stream modules): incorrect condition for the Win32/Win64 bug (GH-19798) has been resolved.
  • Tidy: Improved tidyOptGetCategory detection (GH-19021) and a UAF fix in tidy when tidySetErrorBuffer() fails have been applied.
  • XMLReader: Arginfo/zpp violations when LIBXML_SCHEMAS_ENABLED is not available have been addressed.
  • Windows: _get_osfhandle asserts in debug mode when given a socket bug (GH-19722) have been fixed.

PHP/php-src Release php-8.3.28RC1

Tag for php-8.3.28RC1

Release php-8.3.28RC1 · php/php-src

PHP/php-src Release php-8.4.15RC1

Tag for php-8.4.15RC1

Release php-8.4.15RC1 · php/php-src