php8.5
/
Download
← All releases
PHP 8.4 Thursday, 09 April 2026

PHP 8.4.20

20 changes across 15 components.

Bz2

  • Fix truncation of total output size causing erroneous errors.

Core

DOM

  • Fixed bug GH-21486 (Dom\HTMLDocument parser mangles xml:space and xml:lang attributes).

FFI

  • Fixed resource leak in FFI::cdef() onsymbol resolution failure.

GD

  • Fixed bug GH-21431 (phpinfo() to display libJPEG 10.0 support).

Opcache

  • Fixed bug GH-20838 (JIT compiler produces wrong arithmetic results).
  • Fixed bug GH-21267 (JIT tracing: infinite loop on FETCH_OBJ_R with IS_UNDEF property in polymorphic context).
  • Fixed bug GH-21395 (uaf in jit).

OpenSSL

  • Fixed bug GH-21083 (Skip private_key_bits validation for EC/curve-based keys).
  • Fix missing error propagation for BIO_printf() calls.

PCRE

  • Fixed re-entrancy issue on php_pcre_match_impl, php_pcre_replace_impl, php_pcre_split_impl, and php_pcre_grep_impl.

PGSQL

  • Fixed preprocessor silently guarding PGSQL_SUPPRESS_TIMESTAMPS support due to a typo.

SNMP

  • Fixed bug GH-21336 (SNMP::setSecurity() undefined behavior with NULL arguments).

SOAP

  • Fixed Set-Cookie parsing bug wrong offset while scanning attributes.

SPL

  • Fixed bug GH-21454 (missing write lock validation in SplHeap).

Standard

  • Fixed bug GH-20906 (Assertion failure when messing up output buffers).
  • Fixed bug GH-20627 (Cannot identify some avif images with getimagesize).

Sysvshm

  • Fix memory leak in shm_get_var() when variable is corrupted.

XSL

  • Fix GH-21357 (XSLTProcessor works with DOMDocument, but fails with Dom\XMLDocument).
  • Fixed bug GH-21496 (UAF in dom_objects_free_storage).
← 8.4.21 8.4.19 →