php-8.0.28-src.zip: php-8.0.28-src/NEWS

"Fossies" - the Fresh Open Source Software Archive

Member "php-8.0.28-src/NEWS" (14 Feb 2023, 53908 Bytes) of package /windows/www/php-8.0.28-src.zip:

As a special service "Fossies" has tried to format the requested text file into HTML format (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file. See also the latest Fossies "Diffs" side-by-side code changes report for "NEWS":

8.0.27_vs_8.0.28.

1 PHP NEWS 2 ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| 3 14 Feb 2023, PHP 8.0.28 4 5 - Core: 6 . Fixed bug #81744 (Password_verify() always return true with some hash). 7 (CVE-2023-0567). (Tim Düsterhus) 8 . Fixed bug #81746 (1-byte array overrun in common path resolve code). 9 (CVE-2023-0568). (Niels Dossche) 10 11 - SAPI: 12 . Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart 13 request body). (CVE-2023-0662) (Jakub Zelenka) 14 15 05 Jan 2023, PHP 8.0.27 16 17 - PDO/SQLite: 18 . Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631) 19 (cmb) 20 21 24 Nov 2022, PHP 8.0.26 22 23 - CLI: 24 . Fixed bug GH-9709 (Null pointer dereference with -w/-s options). (Adam Saponara) 25 26 - Core: 27 . Fixed bug GH-9752 (Generator crashes when interrupted during argument 28 evaluation with extra named params). (Arnaud) 29 . Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during 30 initialization). (Arnaud) 31 . Fixed potential NULL pointer dereference in Windows shm*() functions. (cmb) 32 . Fixed bug GH-9750 (Generator memory leak when interrupted during argument 33 evaluation. (Arnaud) 34 35 - Date: 36 . Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if 37 the argument is an offset larger than 100*60 minutes). (Derick) 38 39 - FPM: 40 . Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running 41 php-fpm 8.1.11). (Jakub Zelenka) 42 . Fixed bug GH-9959 (Solaris port event mechanism is still broken after bug 43 #66694). (Petr Sumbera) 44 45 - mysqli: 46 . Fixed bug GH-9841 (mysqli_query throws warning despite using 47 silenced error mode). (Kamil Tekiela) 48 49 - OpenSSL: 50 . Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does 51 not build). (Jakub Zelenka, fsbruva) 52 53 - SOAP: 54 . Fixed GH-9720 (Null pointer dereference while serializing the response). 55 (cmb) 56 57 27 Oct 2022, PHP 8.0.25 58 59 - GD: 60 . Fixed bug #81739: OOB read due to insufficient input validation in 61 imageloadfont(). (CVE-2022-31630) (cmb) 62 63 - Hash: 64 . Fixed bug #81738: buffer overflow in hash_update() on long parameter. 65 (CVE-2022-37454) (nicky at mouha dot be) 66 67 - Session: 68 . Fixed bug GH-9583 (session_create_id() fails with user defined save handler 69 that doesn't have a validateId() method). (Girgias) 70 71 - Streams: 72 . Fixed bug GH-9590 (stream_select does not abort upon exception or empty 73 valid fd set). (Arnaud) 74 75 29 Sep 2022, PHP 8.0.24 76 77 - Core: 78 . Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) 79 (Tim Starling) 80 . Fixed bug GH-9361 (Segmentation fault on script exit #9379). (cmb, 81 Christian Schneider) 82 . Fixed bug GH-9407 (LSP error in eval'd code refers to wrong class for static 83 type). (ilutov) 84 . Fixed bug #81727: Don't mangle HTTP variable names that clash with ones 85 that have a specific semantic meaning. (CVE-2022-31629). (Derick) 86 87 - DOM: 88 . Fixed bug #79451 (DOMDocument->replaceChild on doctype causes double free). 89 (Nathan Freeman) 90 91 - FPM: 92 . Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to 93 error_log after daemon reload). (Dmitry Menshikov) 94 . Fixed bug #77780 ("Headers already sent..." when previous connection was 95 aborted). (Jakub Zelenka) 96 97 - GMP 98 . Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed 99 to gmp_init()). (Girgias) 100 101 - Intl 102 . Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter). 103 (Girgias) 104 105 - PDO_PGSQL: 106 . Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed). 107 (Yurunsoft) 108 109 - Phar: 110 . Fixed bug #81726: phar wrapper: DOS when using quine gzip file. 111 (CVE-2022-31628). (cmb) 112 113 - Reflection: 114 . Fixed bug GH-8932 (ReflectionFunction provides no way to get the called 115 class of a Closure). (cmb, Nicolas Grekas) 116 . Fixed bug GH-9409 (Private method is incorrectly dumped as "overwrites"). 117 (ilutov) 118 119 - Streams: 120 . Fixed bug GH-9316 ($http_response_header is wrong for long status line). 121 (cmb, timwolla) 122 123 01 Sep 2022, PHP 8.0.23 124 125 - Core: 126 . Fixed incorrect double to long casting in latest clang. (zeriyoshi) 127 128 - DBA: 129 . Fixed LMDB driver memory leak on DB creation failure (Girgias) 130 . Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults). 131 (cmb) 132 133 - Intl: 134 . Fixed IntlDateFormatter::formatObject() parameter type. (Gert de Pagter) 135 136 - OPcache: 137 . Fixed bug GH-9033 (Loading blacklist file can fail due to negative length). 138 (cmb) 139 140 - OpenSSL: 141 . Fixed bug GH-9339 (OpenSSL oid_file path check warning contains 142 uninitialized path). (Jakub Zelenka) 143 144 - PDO_SQLite: 145 . Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values). (cmb) 146 147 - SQLite3: 148 . Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values). (cmb) 149 150 - Standard: 151 . Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL). 152 (Heiko Weber) 153 154 - Streams: 155 . Fixed bug GH-8472 (The resource returned by stream_socket_accept may have 156 incorrect metadata). (Jakub Zelenka) 157 . Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections 158 hanging). (Jakub Zelenka, Twosee) 159 160 04 Aug 2022, PHP 8.0.22 161 162 - CLI: 163 . Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS 164 environment variable. (yiyuaner) 165 166 - Core: 167 . Fixed bug GH-8923 (error_log on Windows can hold the file write lock). (cmb) 168 . Fixed bug GH-8995 (WeakMap object reference offset causing TypeError). 169 (Tobias Bachert) 170 171 - Date: 172 . Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable). 173 (Derick) 174 175 - DBA: 176 . Fixed LMDB driver hanging when attempting to delete a non-existing key 177 (Girgias) 178 179 - FPM: 180 . Fixed zlog message prepend, free on incorrect address. (Heiko Weber) 181 . Fixed possible double free on configuration loading failure. (Heiko Weber). 182 183 - GD: 184 . Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument). 185 (cmb) 186 187 - Intl: 188 . Fixed build for ICU 69.x and onwards. (David Carlier) 189 190 - OPcache: 191 . Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php 192 syntaxe of a valid file). (Dmitry) 193 194 - Standard: 195 . Fixed the crypt_sha256/512 api build with clang > 12. (David Carlier) 196 . Uses CCRandomGenerateBytes instead of arc4random_buf on macOs. (David Carlier). 197 198 07 Jul 2022, PHP 8.0.21 199 200 - Core: 201 . Fixed potential use after free in php_binary_init(). (Heiko Weber) 202 203 - CLI: 204 . Fixed GH-8827 (Intentionally closing std handles no longer possible). (cmb) 205 206 - COM: 207 . Fixed bug GH-8778 (Integer arithmethic with large number variants fails). 208 (cmb) 209 210 - Curl: 211 . Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option. (Pierrick) 212 213 - Date: 214 . Fixed bug #74671 (DST timezone abbreviation has incorrect offset). (Derick) 215 . Fixed bug #77243 (Weekdays are calculated incorrectly for negative years). 216 (Derick) 217 . Fixed bug #78139 (timezone_open accepts invalid timezone string argument). 218 (Derick) 219 220 - FPM: 221 . Fixed bug #67764 (fpm: syslog.ident don't work). (Jakub Zelenka) 222 223 - MBString: 224 . Fixed bug GH-8685 (pcre not ready at mbstring startup). (Remi) 225 226 - ODBC: 227 . Fixed handling of single-key connection strings. (Calvin Buckley) 228 229 - OpenSSL: 230 . Fixed bug #50293 (Several openssl functions ignore the VCWD). 231 (Jakub Zelenka, cmb) 232 . Fixed bug #81713 (NULL byte injection in several OpenSSL functions working 233 with certificates). (Jakub Zelenka) 234 235 - PDO_ODBC: 236 . Fixed errorInfo() result on successful PDOStatement->execute(). (Yurunsoft) 237 . Fixed handling of single-key connection strings. (Calvin Buckley) 238 239 - Zip: 240 . Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat 241 cache). (Remi) 242 243 09 Jun 2022, PHP 8.0.20 244 245 - CLI: 246 . Fixed bug GH-8575 (CLI closes standard streams too early). (Levi Morrison) 247 248 - Core: 249 . Fixed Haiku ZTS builds. (David Carlier) 250 251 - Date: 252 . Fixed bug #72963 (Null-byte injection in CreateFromFormat and related 253 functions). (Derick) 254 . Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable 255 DateTime instances created using reflection). (Derick) 256 257 - FPM: 258 . Fixed ACL build check on MacOS. (David Carlier) 259 . Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502. 260 (Jakub Zelenka, loveharmful) 261 . Fixes use after free. (Heiko Weber). 262 263 - Mysqlnd: 264 . Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626) 265 (c dot fol at ambionics dot io) 266 267 - OPcache: 268 . Fixed bug GH-8466 (ini_get() is optimized out when the option does not 269 exist). (Arnaud) 270 271 - Pgsql: 272 . Fixed bug #81720: Uninitialized array in pg_query_params(). 273 (CVE-2022-31625) (cmb) 274 275 - Pcntl: 276 . Fixed Haiku build. (David Carlier) 277 278 - Soap: 279 . Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor). 280 (robertnisipeanu) 281 . Fixed bug GH-8538 (SoapClient may strip parts of nmtokens). (cmb) 282 283 - SPL: 284 . Fixed bug GH-8235 (iterator_count() may run indefinitely). (cmb) 285 286 - Zip: 287 . Fixed type for index in ZipArchive::replaceFile. (Martin Rehberger) 288 289 12 May 2022, PHP 8.0.19 290 291 - Core: 292 . Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are 293 not rethrown into the generator). (Bob) 294 295 - Date: 296 . Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid). 297 (Derick, Cody Mann) 298 299 - FFI: 300 . Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks). 301 (Bob) 302 303 - FPM: 304 . Fixed bug #76003 (FPM /status reports wrong number of active processe). 305 (Jakub Zelenka) 306 . Fixed bug #77023 (FPM cannot shutdown processes). (Jakub Zelenka) 307 . Fixed comment in kqueue remove callback log message. (David Carlier) 308 309 - Iconv: 310 . Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header). 311 (cmb) 312 313 - Intl: 314 . Fixed bug GH-8364 (msgfmt_format $values may not support references). (cmb) 315 316 - MySQLi: 317 . Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows). 318 (cmb) 319 320 - SPL: 321 . Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()). 322 (cmb) 323 . Fixed bug GH-8273 (SplFileObject: key() returns wrong value). (Girgias) 324 325 - Streams: 326 . Fixed php://temp does not preserve file-position when switched to temporary 327 file. (Bernd Holzmüller) 328 329 - zlib: 330 . Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header). 331 (cmb) 332 333 14 Apr 2022, PHP 8.0.18 334 335 - Core: 336 . Fixed freeing of internal attribute arguments. (Bob) 337 . Fixed bug GH-8070 (memory leak of internal function attribute hash). 338 (Tim Düsterhus) 339 . Fixed bug GH-8160 (ZTS support on Alpine is broken). (Michael Voříšek) 340 . Fixed potential race condition during resource ID allocation. (ryancaicse) 341 342 - Filter: 343 . Fixed signedness confusion in php_filter_validate_domain(). (cmb) 344 345 - Hash: 346 . Fixed bug #81714 (segfault when serializing finalized HashContext). (cmb) 347 348 - Intl: 349 . Fixed bug GH-8142 (Compilation error on cygwin). (David Carlier) 350 351 - MBString: 352 . Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken). 353 (cmb) 354 355 - MySQLi: 356 . Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties). 357 (cmb) 358 359 - Pcntl: 360 . Fixed bug GH-8142 (Compilation error on cygwin). (David Carlier) 361 362 - PgSQL: 363 . Fixed result_type related stack corruption on LLP64 architectures. (cmb) 364 . Fixed bug GH-8253 (pg_insert() fails for references). (cmb) 365 366 - Sockets: 367 . Fixed Solaris builds. (David Carlier) 368 . Fix undefined behavior in php_set_inet6_addr. (ilutov) 369 370 - SPL: 371 . Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent). 372 (cmb) 373 374 - Standard: 375 . Fixed bug GH-8048 (Force macOS to use statfs). (risner) 376 377 17 Mar 2022, PHP 8.0.17 378 379 - Core: 380 . Fixed Haiku ZTS build. (David Carlier) 381 382 - GD: 383 . Fixed libpng warning when loading interlaced images. (Brett) 384 385 - FPM: 386 . Fixed bug #76109 (Unsafe access to fpm scoreboard). 387 (Till Backhaus, Jakub Zelenka) 388 389 - Iconv: 390 . Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding). (cmb) 391 . Fixed bug GH-7980 (Unexpected result for iconv_mime_decode). (cmb) 392 393 - MySQLnd: 394 . Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package). (Kamil Tekiela) 395 396 - OPcache: 397 . Fixed bug GH-8074 (Wrong type inference of range() result). (cmb) 398 399 - Reflection: 400 . Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order). 401 (cmb) 402 . Fixed bug GH-8421 (Closures should accept attributes with 403 Attribute::TARGET_FUNCTION). (ollieread) 404 405 - Zlib: 406 . Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding). (cmb) 407 408 17 Feb 2022, PHP 8.0.16 409 410 - Core: 411 . Fixed bug #81430 (Attribute instantiation leaves dangling pointer). 412 (beberlei) 413 . Fixed bug GH-7896 (Environment vars may be mangled on Windows). (cmb) 414 415 - FFI: 416 . Fixed bug GH-7867 (FFI::cast() from pointer to array is broken). (cmb, 417 dmitry) 418 419 - Filter: 420 . Fix #81708: UAF due to php_filter_float() failing for ints. 421 (CVE-2021-21708) (stas) 422 423 - FPM: 424 . Fixed memory leak on invalid port. (David Carlier) 425 426 - MBString: 427 . Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only). (cmb) 428 429 - MySQLnd: 430 . Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped). (Kamil Tekiela) 431 432 - Sockets: 433 . Fixed ext/sockets build on Haiku. (David Carlier) 434 . Fixed bug GH-7978 (sockets extension compilation errors). (David Carlier) 435 436 - Standard: 437 . Fixed bug GH-7875 (mails are sent even if failure to log throws exception). 438 (cmb) 439 440 20 Jan 2022, PHP 8.0.15 441 442 - Core: 443 . Fixed bug #81656 (GCC-11 silently ignores -R). (Michael Wallner) 444 . Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown). 445 (cmb) 446 447 - Filter: 448 . Fixed FILTER_FLAG_NO_RES_RANGE flag. (Yifan Tong) 449 450 - Hash: 451 . Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()). 452 (cmb) 453 . Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and 454 hash_file). (cmb) 455 456 - MySQLnd: 457 . Fixed bug where large bigints may be truncated. (Nathan Freeman, cmb) 458 459 - OCI8: 460 . Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second 461 call). (cmb) 462 463 - OPcache: 464 . Fixed bug #81679 (Tracing JIT crashes on reattaching). (cmb) 465 466 - PDO_PGSQL: 467 . Fixed error message allocation of PDO PgSQL. (SATO Kentaro) 468 469 - Sockets: 470 . Avoid void* arithmetic in sockets/multicast.c on NetBSD. (David Carlier) 471 472 - Spl: 473 . Fixed bug #75917 (SplFileObject::seek broken with CSV flags). (Aliaksandr 474 Bystry) 475 476 16 Dec 2021, PHP 8.0.14 477 478 - Core: 479 . Fixed bug #81582 (Stringable not implicitly declared if __toString() came 480 from a trait). (Nikita) 481 . Fixed bug #81591 (Fatal Error not properly logged in particular cases). 482 (Nikita) 483 . Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to 484 Closure::fromCallable()). (Nikita) 485 . Fixed bug #81631 (::class with dynamic class name may yield wrong line 486 number). (Nikita) 487 488 - FPM: 489 . Fixed bug #81513 (Future possibility for heap overflow in FPM zlog). 490 (Jakub Zelenka) 491 492 - GD: 493 . Fixed bug #71316 (libpng warning from imagecreatefromstring). (cmb) 494 495 - IMAP: 496 . Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers). 497 (cmb) 498 499 - OpenSSL: 500 . Fixed bug #75725 (./configure: detecting RAND_egd). (Dilyan Palauzov) 501 502 - PCRE: 503 . Fixed bug #74604 (Out of bounds in php_pcre_replace_impl). (cmb, Dmitry) 504 505 - SPL: 506 . Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement 507 attached). (Nikita) 508 509 - Standard: 510 . Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type). 511 (fsbruva) 512 . Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate). 513 (cmb) 514 515 18 Nov 2021, PHP 8.0.13 516 517 - Core: 518 . Fixed bug #81518 (Header injection via default_mimetype / default_charset). 519 (cmb) 520 521 - Date: 522 . Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2). 523 (cmb) 524 525 - DBA: 526 . Fixed bug #81588 (TokyoCabinet driver leaks memory). (girgias) 527 528 - MBString: 529 . Fixed bug #76167 (mbstring may use pointer from some previous request). 530 (cmb, cataphract) 531 532 - Opcache: 533 . Fixed bug #81512 (Unexpected behavior with arrays and JIT). (Dmitry) 534 . Fixed bug #81652 (The value of error_reporting() gets overridden). (Nikita) 535 536 - PCRE: 537 . Fixed bug #81424 (PCRE2 10.35 JIT performance regression). (cmb) 538 539 - XML: 540 . Fixed bug #79971 (special character is breaking the path in xml function). 541 (CVE-2021-21707) (cmb) 542 543 - XMLReader: 544 . Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid 545 property). (Nikita) 546 547 21 Oct 2021, PHP 8.0.12 548 549 - CLI: 550 . Fixed bug #81496 (Server logs incorrect request method). (lauri) 551 552 - Core: 553 . Fixed bug #81435 (Observer current_observed_frame may point to an old 554 (overwritten) frame). (Bob) 555 . Fixed bug #81380 (Observer may not be initialized properly). (krakjoe) 556 557 - DOM: 558 . Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID). 559 (Viktor Volkov) 560 561 - FFI: 562 . Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not 563 defined). (Dmitry) 564 565 - Fileinfo: 566 . Fixed bug #78987 (High memory usage during encoding detection). (Anatol) 567 568 - Filter: 569 . Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing). 570 (cmb, Nikita) 571 572 - FPM: 573 . Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege 574 escalation) (CVE-2021-21703). (Jakub Zelenka) 575 576 - Opcache: 577 . Fixed bug #81472 (Cannot support large linux major/minor device number when 578 read /proc/self/maps). (Lin Yang) 579 580 - Reflection: 581 . ReflectionAttribute is no longer final. (sasezaki) 582 583 - SPL: 584 . Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free). 585 (cmb, Nikita, Tyson Andre) 586 . Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1). (cmb) 587 588 - Standard: 589 . Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo 590 position specifier). (Aliaksandr Bystry) 591 592 - Streams: 593 . Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper). 594 (cmb) 595 596 - XML: 597 . Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace). 598 (Aliaksandr Bystry, cmb) 599 600 - Zip: 601 . Fixed bug #81490 (ZipArchive::extractTo() may leak memory). (cmb, Remi) 602 . Fixed bug #77978 (Dirname ending in colon unzips to wrong dir). (cmb) 603 604 23 Sep 2021, PHP 8.0.11 605 606 - Core: 607 . Fixed bug #81302 (Stream position after stream filter removed). (cmb) 608 . Fixed bug #81346 (Non-seekable streams don't update position after write). 609 (cmb) 610 . Fixed bug #73122 (Integer Overflow when concatenating strings). (cmb) 611 612 -GD: 613 . Fixed bug #53580 (During resize gdImageCopyResampled cause colors change). 614 (cmb) 615 616 - Opcache: 617 . Fixed bug #81353 (segfault with preloading and statically bound closure). 618 (Nikita) 619 620 - Shmop: 621 . Fixed bug #81407 (shmop_open won't attach and causes php to crash). (cmb) 622 623 - Standard: 624 . Fixed bug #71542 (disk_total_space does not work with relative paths). (cmb) 625 . Fixed bug #81400 (Unterminated string in dns_get_record() results). (cmb) 626 627 - SysVMsg: 628 . Fixed bug #78819 (Heap Overflow in msg_send). (cmb) 629 630 - XML: 631 . Fixed bug #81351 (xml_parse may fail, but has no error code). (cmb, Nikita) 632 633 - Zip: 634 . Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword). (Remi) 635 . Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination). 636 (CVE-2021-21706) (cmb) 637 638 26 Aug 2021, PHP 8.0.10 639 640 - Core: 641 . Fixed bug #72595 (php_output_handler_append illegal write access). (cmb) 642 . Fixed bug #66719 (Weird behaviour when using get_called_class() with 643 call_user_func()). (Nikita) 644 . Fixed bug #81305 (Built-in Webserver Drops Requests With "Upgrade" Header). 645 (cmb) 646 647 - BCMath: 648 . Fixed bug #78238 (BCMath returns "-0"). (cmb) 649 650 - CGI: 651 . Fixed bug #80849 (HTTP Status header truncation). (cmb) 652 653 - Date: 654 . Fixed bug #64975 (Error parsing when AM/PM not at the end). (Derick) 655 . Fixed bug #78984 (DateTimeZone accepting invalid UTC timezones). (Derick) 656 . Fixed bug #79580 (date_create_from_format misses leap year). (Derick) 657 . Fixed bug #80409 (DateTime::modify() loses time with 'weekday' parameter). 658 (Derick) 659 660 - GD: 661 . Fixed bug #51498 (imagefilledellipse does not work for large circles). (cmb) 662 663 - MySQLi: 664 . Fixed bug #74544 (Integer overflow in mysqli_real_escape_string()). (cmb, 665 johannes) 666 667 - Opcache: 668 . Fixed bug #81225 (Wrong result with pow operator with JIT enabled). 669 (Dmitry) 670 . Fixed bug #81249 (Intermittent property assignment failure with JIT 671 enabled). (Dmitry) 672 . Fixed bug #81206 (Multiple PHP processes crash with JIT enabled). (cmb, 673 Nikita) 674 . Fixed bug #81272 (Segfault in var[] after array_slice with JIT). (Nikita) 675 . Fixed Bug #81255 (Memory leak in PHPUnit with functional JIT). (Dmitry) 676 . Fixed Bug #80959 (infinite loop in building cfg during JIT compilation) 677 (Nikita, Dmitry) 678 . Fixed bug #81226 (Integer overflow behavior is different with JIT 679 enabled). (Dmitry) 680 681 - OpenSSL: 682 . Fixed bug #81327 (Error build openssl extension on php 7.4.22). (cmb) 683 684 - PDO_ODBC: 685 . Fixed bug #81252 (PDO_ODBC doesn't account for SQL_NO_TOTAL). (cmb) 686 687 - Shmop: 688 . Fixed bug #81283 (shmop can't read beyond 2147483647 bytes). (cmb, Nikita) 689 690 - SimpleXML: 691 . Fixed bug #81325 (Segfault in zif_simplexml_import_dom). (remi) 692 693 - Standard: 694 . Fixed bug #72146 (Integer overflow on substr_replace). (cmb) 695 . Fixed bug #81265 (getimagesize returns 0 for 256px ICO images). 696 (George Dietrich) 697 . Fixed bug #74960 (Heap buffer overflow via str_repeat). (cmb, Dmitry) 698 699 - Streams: 700 . Fixed bug #81294 (Segfault when removing a filter). (cmb) 701 702 29 Jul 2021, PHP 8.0.9 703 704 - Core: 705 . Fixed bug #81145 (copy() and stream_copy_to_stream() fail for +4GB files). 706 (cmb, Nikita) 707 . Fixed bug #81163 (incorrect handling of indirect vars in __sleep). 708 (krakjoe) 709 . Fixed bug #81159 (Object to int warning when using an object as a string 710 offset). (girgias) 711 . Fixed bug #80728 (PHP built-in web server resets timeout when it can kill 712 the process). (Calvin Buckley) 713 . Fixed bug #73630 (Built-in Weberver - overwrite $_SERVER['request_uri']). 714 (cmb) 715 . Fixed bug #80173 (Using return value of zend_assign_to_variable() is not 716 safe). (Nikita) 717 . Fixed bug #73226 (--r[fcez] always return zero exit code). (cmb) 718 719 - Intl: 720 . Fixed bug #72809 (Locale::lookup() wrong result with canonicalize option). 721 (cmb) 722 . Fixed bug #68471 (IntlDateFormatter fails for "GMT+00:00" timezone). (cmb) 723 . Fixed bug #74264 (grapheme_strrpos() broken for negative offsets). (cmb) 724 725 - OpenSSL: 726 . Fixed bug #52093 (openssl_csr_sign truncates $serial). (cmb) 727 728 - PCRE: 729 . Fixed bug #81101 (PCRE2 10.37 shows unexpected result). (Anatol) 730 . Fixed bug #81243 (Too much memory is allocated for preg_replace()). (cmb) 731 732 - Reflection: 733 . Fixed bug #81208 (Segmentation fault while create newInstance from 734 attribute). (Nikita) 735 736 - Standard: 737 . Fixed bug #81223 (flock() only locks first byte of file). (cmb) 738 739 17 Jun 2021, PHP 8.0.8 740 741 - Core: 742 . Fixed bug #81076 (incorrect debug info on Closures with implicit binds). 743 (krakjoe) 744 . Fixed bug #81068 (Double free in realpath_cache_clean()). (Dimitry Andric) 745 . Fixed bug #76359 (open_basedir bypass through adding ".."). (cmb) 746 . Fixed bug #81090 (Typed property performance degradation with .= operator). 747 (Nikita) 748 . Fixed bug #81070 (Integer underflow in memory limit comparison). 749 (Peter van Dommelen) 750 . Fixed bug #81122: SSRF bypass in FILTER_VALIDATE_URL. (CVE-2021-21705) (cmb) 751 752 - Bzip2: 753 . Fixed bug #81092 (fflush before stream_filter_remove corrupts stream). 754 (cmb) 755 756 - Fileinfo: 757 . Fixed bug #80197 (implicit declaration of function 'magic_stream' is 758 invalid). (Nikita) 759 760 - GMP: 761 . Fixed bug #81119 (GMP operators throw errors with wrong parameter names). 762 (Nikita) 763 764 - MySQLnd: 765 . Fixed bug #80761 (PDO uses too much memory). (Nikita) 766 767 - OCI8: 768 . Fixed bug #81088 (error in regression test for oci_fetch_object() and 769 oci_fetch_array()). (Máté) 770 771 - Opcache: 772 . Fixed bug #81051 (Broken property type handling after incrementing 773 reference). (Dmitry) 774 . Fixed bug #80968 (JIT segfault with return from required file). (Dmitry) 775 776 - OpenSSL: 777 . Fixed bug #76694 (native Windows cert verification uses CN as sever name). 778 (cmb) 779 780 - PDO_Firebird: 781 . Fixed bug #76448: Stack buffer overflow in firebird_info_cb. 782 (CVE-2021-21704) (cmb) 783 . Fixed bug #76449: SIGSEGV in firebird_handle_doer. (CVE-2021-21704) (cmb) 784 . Fixed bug #76450: SIGSEGV in firebird_stmt_execute. (CVE-2021-21704) (cmb) 785 . Fixed bug #76452: Crash while parsing blob data in firebird_fetch_blob. 786 (CVE-2021-21704) (cmb) 787 788 - readline: 789 . Fixed bug #72998 (invalid read in readline completion). (krakjoe) 790 791 - Standard: 792 . Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string conversion"). 793 (cmb) 794 . Fixed bug #77627 (method_exists on Closure::__invoke inconsistency). 795 (krakjoe) 796 797 - Windows: 798 . Fixed bug #81120 (PGO data for main PHP DLL are not used). (cmb) 799 800 03 Jun 2021, PHP 8.0.7 801 802 - Core: 803 . Fixed bug #80960 (opendir() warning wrong info when failed on Windows). 804 (cmb) 805 . Fixed bug #67792 (HTTP Authorization schemes are treated as case-sensitive). 806 (cmb) 807 . Fixed bug #80972 (Memory exhaustion on invalid string offset). (girgias) 808 809 - FPM: 810 . Fixed bug #65800 (Events port mechanism). (psumbera) 811 812 - FTP: 813 . Fixed bug #80901 (Info leak in ftp extension). (cmb) 814 . Fixed bug #79100 (Wrong FTP error messages). (cmb) 815 816 - GD: 817 . Fixed bug #81032 (GD install is affected by external libgd installation). 818 (Flavio Heleno, cmb) 819 820 - Intl: 821 . Fixed bug #81019 (Unable to clone NumberFormatter after failed parse()). 822 (Nikita) 823 824 - MBString: 825 . Fixed bug #81011 (mb_convert_encoding removes references from arrays). (cmb) 826 827 - ODBC: 828 . Fixed bug #80460 (ODBC doesn't account for SQL_NO_TOTAL indicator). (cmb) 829 830 - Opcache: 831 . Fixed bug #81007 (JIT "not supported" on 32-bit x86 -- build problem?). 832 (Nikita) 833 . Fixed bug #81015 (Opcache optimization assumes wrong part of ternary 834 operator in if-condition). (Nikita) 835 . Fixed bug #81046 (Literal compaction merges non-equal related literals). 836 (Nikita) 837 838 - PDO_MySQL: 839 . Fixed bug #81037 (PDO discards error message text from prepared 840 statement). (Kamil Tekiela) 841 842 - PDO_ODBC: 843 . Fixed bug #44643 (bound parameters ignore explicit type definitions). (cmb) 844 845 - pgsql: 846 . Fixed php_pgsql_fd_cast() wrt. php_stream_can_cast(). (cmb) 847 848 - SPL: 849 . Fixed bug #80933 (SplFileObject::DROP_NEW_LINE is broken for NUL and CR). 850 (cmb, Nikita) 851 852 - XMLReader: 853 . Fixed bug #73246 (XMLReader: encoding length not checked). (cmb) 854 855 - Zip: 856 . Fixed bug #80863 (ZipArchive::extractTo() ignores references). (cmb) 857 858 06 May 2021, PHP 8.0.6 859 860 - PDO_pgsql: 861 . Revert "Fixed bug #80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR)" 862 from PHP 8.0.5. 863 864 29 Apr 2021, PHP 8.0.5 865 866 - Core: 867 . Changed PowerPC CPU registers used by Zend VM to work around GCC bug. 868 Old registers (r28/r29) might be clobbered by _restgpr routine used for 869 return from C function compiled with -Os. (Dmitry) 870 871 - DOM: 872 . Fixed bug #66783 (UAF when appending DOMDocument to element). (cmb) 873 874 - FFI: 875 . Fixed bug #80847 (CData structs with fields of type struct can't be passed 876 as C function argument). (Nickolas Daniel da Silva, Dmitry) 877 878 - FPM: 879 . Fixed bug #80024 (Duplication of info about inherited socket after pool 880 removing). (Jakub Zelenka) 881 882 - FTP: 883 . Fixed bug #80880 (SSL_read on shutdown, ftp/proc_open). (cmb, Jakub 884 Zelenka) 885 886 - Imap: 887 . Fixed bug #80710 (imap_mail_compose() header injection). (cmb, Stas) 888 889 - LibXML: 890 . Fixed bug #73533 (Invalid memory access in php_libxml_xmlCheckUTF8). (cmb) 891 892 - Opcache: 893 . Fixed bug #80839 (PHP problem with JIT). (Dmitry) 894 . Fixed bug #80861 (erronous array key overflow in 2D array with JIT). 895 (Dmitry) 896 897 - Pcntl: 898 . Fixed bug #79812 (Potential integer overflow in pcntl_exec()). (cmb) 899 900 - PDO_ODBC: 901 . Fixed bug #80783 (PDO ODBC truncates BLOB records at every 256th byte). 902 (cmb) 903 904 - PDO_pgsql: 905 . Fixed bug #80892 (PDO::PARAM_INT is treated the same as PDO::PARAM_STR). 906 (Matteo) 907 908 - Session: 909 . Fixed bug #80889 (Cannot set save handler when save_handler is invalid). 910 (cmb) 911 912 - SOAP: 913 . Fixed bug #69668 (SOAP special XML characters in namespace URIs not 914 encoded). (cmb) 915 916 - Standard: 917 . Fixed bug #80915 (Taking a reference to $_SERVER hides its values from 918 phpinfo()). (Rowan Tommins) 919 . Fixed bug #80914 ('getdir' accidentally defined as an alias of 'dir'). 920 (Rowan Tommins) 921 922 01 Apr 2021, PHP 8.0.4 923 924 - Core: 925 . Fixed bug #75776 (Flushing streams with compression filter is broken). (cmb) 926 . Fixed bug #80811 (Function exec without $output but with $restult_code 927 parameter crashes). (Nikita) 928 . Fixed bug #80814 (threaded mod_php won't load on FreeBSD: No space 929 available for static Thread Local Storage). (Dmitry) 930 931 - Dba: 932 . Fixed bug #80817 (dba_popen() may cause segfault during RSHUTDOWN). (cmb) 933 934 - IMAP: 935 . Fixed bug #80800 (imap_open() fails when the flags parameter includes 936 CL_EXPUNGE). (girgias) 937 938 - Intl: 939 . Fixed bug #80763 (msgfmt_format() does not accept DateTime references). 940 (cmb) 941 942 - Libxml: 943 . Fixed bug #51903 (simplexml_load_file() doesn't use HTTP headers). (cmb) 944 945 - MySQLnd: 946 . Fixed bug #80837 (Calling stmt_store_result after fetch doesn't throw an 947 error). (Kamil Tekiela) 948 949 - Opcache: 950 . Fixed bug #80786 (PHP crash using JIT). (Nikita) 951 . Fixed bug #80782 (DASM_S_RANGE_VREG on PHP_INT_MIN-1). (Dmitry) 952 953 - PCRE: 954 . Fixed bug #80866 (preg_split ignores limit flag when pattern with \K has 955 0-width fullstring match). (Kamil Tekiela) 956 957 - Session: 958 . Fixed bug #80774 (session_name() problem with backslash). (cmb) 959 960 - Standard: 961 . Fixed bug #80771 (phpinfo(INFO_CREDITS) displays nothing in CLI). (cmb) 962 . Fixed bug #78719 (http wrapper silently ignores long Location headers). 963 (cmb) 964 . Fixed bug #80838 (HTTP wrapper waits for HTTP 1 response after HTTP 101). 965 (manuelm) 966 967 - Zip: 968 . Fixed bug #80825 (ZipArchive::isCompressionMethodSupported does not exist). 969 (cmb) 970 971 18 Feb 2021, PHP 8.0.3 972 973 - Core: 974 . Fixed #80706 (mail(): Headers after Bcc headers may be ignored). (cmb) 975 976 - DOM: 977 . Fixed bug #80600 (DOMChildNode::remove() doesn't work on CharacterData 978 nodes). (beberlei) 979 980 - Gettext: 981 . Fixed bug #53251 (bindtextdomain with null dir doesn't return old value). 982 (cmb) 983 984 - MySQLnd: 985 . Fixed bug #78680 (mysqlnd's mysql_clear_password does not transmit 986 null-terminated password). (Daniel Black) 987 . Fixed bug #80713 (SegFault when disabling ATTR_EMULATE_PREPARES and 988 MySQL 8.0). (Nikita) 989 990 - MySQLi: 991 . Fixed bug #74779 (x() and y() truncating floats to integers). (cmb) 992 993 - Opcache: 994 . Fixed bug #80634 (write_property handler of internal classes is skipped on 995 preloaded JITted code). (Dmitry) 996 . Fixed bug #80682 (opcache doesn't honour pcre.jit option). (Remi) 997 . Fixed bug #80742 (Opcache JIT makes some boolean logic unexpectedly be 998 true). (Dmitry) 999 . Fixed bug #80745 (JIT produces Assert failure and UNKNOWN:0 var_dumps in 1000 code involving bitshifts). (Dmitry) 1001 1002 - OpenSSL: 1003 . Fixed bug #80747 (Providing RSA key size < 512 generates key that crash 1004 PHP). (Nikita) 1005 1006 - Phar: 1007 . Fixed bug #75850 (Unclear error message wrt. __halt_compiler() w/o 1008 semicolon) (cmb) 1009 . Fixed bug #70091 (Phar does not mark UTF-8 filenames in ZIP archives). (cmb) 1010 . Fixed bug #53467 (Phar cannot compress large archives). (cmb, lserni) 1011 1012 - Socket: 1013 . Fixed bug #80723 (Different sockets compare as equal (regression in 8.0)). 1014 (Nikita) 1015 1016 - SPL: 1017 . Fixed bug#80719 (Iterating after failed ArrayObject::setIteratorClass() 1018 causes Segmentation fault). (Nikita) 1019 1020 - Standard: 1021 . Fixed bug #80654 (file_get_contents() maxlen fails above (2**31)-1 bytes). 1022 (cmb) 1023 . Fixed bug #80718 (ext/standard/dl.c fallback code path with syntax error). 1024 (Nikita) 1025 1026 21 Jan 2021, PHP 8.0.2 1027 1028 - Core: 1029 . Fixed bug #80523 (bogus parse error on >4GB source code). (Nikita) 1030 . Fixed bug #80384 (filter buffers entire read until file closed). (Adam 1031 Seitz, cmb) 1032 . Fixed bug #80596 (Invalid union type TypeError in anonymous classes). 1033 (Daniil Gentili) 1034 . Fixed bug #80617 (GCC throws warning about type narrowing in 1035 ZEND_TYPE_INIT_CODE). (Nikita) 1036 1037 - BCMath: 1038 . Fixed bug #80545 (bcadd('a', 'a') doesn't throw an exception). 1039 (Jens de Nies) 1040 1041 - Curl: 1042 . Fixed bug #80595 (Resetting POSTFIELDS to empty array breaks request). (cmb) 1043 1044 - Date: 1045 . Fixed bug #80376 (last day of the month causes runway cpu usage). (Derick) 1046 1047 - DOM: 1048 . Fixed bug #80537 (Wrong parameter type in DOMElement::removeAttributeNode 1049 stub). (Nikita) 1050 1051 - Filter: 1052 . Fixed bug #80584 (0x and 0X are considered valid hex numbers by 1053 filter_var()). (girgias) 1054 1055 - GMP: 1056 . Fixed bug #80560 (Strings containing only a base prefix return 0 object). 1057 (girgias) 1058 1059 - Intl: 1060 . Fixed bug #80644 (Missing resource causes subsequent get() calls to fail). 1061 (Nikita) 1062 1063 - MySQLi: 1064 . Fixed bug #67983 (mysqlnd with MYSQLI_OPT_INT_AND_FLOAT_NATIVE fails to 1065 interpret bit columns). (Nikita) 1066 . Fixed bug #64638 (Fetching resultsets from stored procedure with cursor 1067 fails). (Nikita) 1068 . Fixed bug #72862 (segfault using prepared statements on stored procedures 1069 that use a cursor). (Nikita) 1070 . Fixed bug #77935 (Crash in mysqlnd_fetch_stmt_row_cursor when calling an SP 1071 with a cursor). (Nikita) 1072 1073 - ODBC: 1074 . Fixed bug #80592 (all floats are the same in ODBC parameters). (cmb) 1075 1076 - Opcache: 1077 . Fixed bug #80422 (php_opcache.dll crashes when using Apache 2.4 with JIT). 1078 (Dmitry) 1079 1080 - PDO_Firebird: 1081 . Fixed bug #80521 (Parameters with underscores no longer recognized). (cmb, 1082 Simonov Denis) 1083 1084 - Phar: 1085 . Fixed bug #76929 (zip-based phar does not respect phar.require_hash). 1086 (david at bamsoftware, cmb) 1087 . Fixed bug #77565 (Incorrect locator detection in ZIP-based phars). (cmb) 1088 . Fixed bug #69279 (Compressed ZIP Phar extractTo() creates garbage files). 1089 (cmb) 1090 1091 - Phpdbg: 1092 . Reverted fix for bug #76813 (Access violation near NULL on source operand). 1093 (cmb) 1094 1095 07 Jan 2021, PHP 8.0.1 1096 1097 - Core: 1098 . Fixed bug #80345 (PHPIZE configuration has outdated PHP_RELEASE_VERSION). 1099 (cmb) 1100 . Fixed bug #72964 (White space not unfolded for CC/Bcc headers). (cmb) 1101 . Fixed bug #80391 (Iterable not covariant to mixed). (Nikita) 1102 . Fixed bug #80393 (Build of PHP extension fails due to configuration gap 1103 with libtool). (kir dot morozov at gmail dot com) 1104 . Fixed bug #77069 (stream filter loses final block of data). (cmb) 1105 1106 - Fileinfo: 1107 . Fixed bug #77961 (finfo_open crafted magic parsing SIGABRT). (cmb) 1108 1109 - FPM: 1110 . Fixed bug #69625 (FPM returns 200 status on request without 1111 SCRIPT_FILENAME env). (Jakub Zelenka) 1112 1113 - IMAP 1114 . Fixed bug #80438 (imap_msgno() incorrectly warns and return false on valid UIDs in PHP 8.0.0). (girgias) 1115 . Fix a regression with valid UIDs in imap_savebody() (girgias) 1116 . Make warnings for invalid message numbers/UIDs between functions consistent (girgias) 1117 1118 - Intl: 1119 . Fixed bug #80425 (MessageFormatAdapter::getArgTypeList redefined). (Nikita) 1120 1121 - OCI8 1122 . Create Windows DLLs for Oracle Client 19c. (cmb) 1123 1124 - Opcache: 1125 . Fixed bug #80404 (Incorrect range inference result when division results 1126 in float). (Nikita) 1127 . Fixed bug #80377 (Opcache misses executor_globals). (Nikita) 1128 . Fixed bug #80433 (Unable to disable the use of the AVX command when using 1129 JIT). (Nikita) 1130 . Fixed bug #80447 (Strange out of memory error when running with JIT). 1131 (Dmitry) 1132 . Fixed bug #80480 (Segmentation fault with JIT enabled). (Dmitry) 1133 . Fixed bug #80506 (Immediate SIGSEGV upon ini_set("opcache.jit_debug", 1)). 1134 (Dmitry) 1135 1136 - OpenSSL: 1137 . Fixed bug #80368 (OpenSSL extension fails to build against LibreSSL due to 1138 lack of OCB support). (Nikita) 1139 1140 - PDO MySQL: 1141 . Fixed bug #80458 (PDOStatement::fetchAll() throws for upsert queries). 1142 (Kamil Tekiela) 1143 . Fixed bug #63185 (nextRowset() ignores MySQL errors with native prepared 1144 statements). (Nikita) 1145 . Fixed bug #78152 (PDO::exec() - Bad error handling with multiple commands). 1146 (Nikita) 1147 . Fixed bug #66878 (Multiple rowsets not returned unless PDO statement object 1148 is unset()). (Nikita) 1149 . Fixed bug #70066 (Unexpected "Cannot execute queries while other unbuffered 1150 queries"). (Nikita) 1151 . Fixed bug #71145 (Multiple statements in init command triggers unbuffered 1152 query error). (Nikita) 1153 . Fixed bug #76815 (PDOStatement cannot be GCed/closeCursor-ed when a 1154 PROCEDURE resultset SIGNAL). (Nikita) 1155 . Fixed bug #79872 (Can't execute query with pending result sets). (Nikita) 1156 . Fixed bug #79131 (PDO does not throw an exception when parameter values are 1157 missing). (Nikita) 1158 . Fixed bug #72368 (PdoStatement->execute() fails but does not throw an 1159 exception). (Nikita) 1160 . Fixed bug #62889 (LOAD DATA INFILE broken). (Nikita) 1161 . Fixed bug #67004 (Executing PDOStatement::fetch() more than once prevents 1162 releasing resultset). (Nikita) 1163 . Fixed bug #79132 (PDO re-uses parameter values from earlier calls to 1164 execute()). (Nikita) 1165 1166 - Phar: 1167 . Fixed bug #73809 (Phar Zip parse crash - mmap fail). (cmb) 1168 . Fixed bug #75102 (`PharData` says invalid checksum for valid tar). (cmb) 1169 . Fixed bug #77322 (PharData::addEmptyDir('/') Possible integer overflow). 1170 (cmb) 1171 1172 - Phpdbg: 1173 . Fixed bug #76813 (Access violation near NULL on source operand). (cmb) 1174 1175 - SPL: 1176 . Fixed #62004 (SplFileObject: fgets after seek returns wrong line). (cmb) 1177 1178 - Standard: 1179 . Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo). 1180 (CVE-2020-7071) (cmb) 1181 . Fixed bug #80366 (Return Value of zend_fstat() not Checked). (sagpant, cmb) 1182 1183 - Tidy: 1184 . Fixed bug #77594 (ob_tidyhandler is never reset). (cmb) 1185 1186 - Tokenizer: 1187 . Fixed bug #80462 (Nullsafe operator tokenize with TOKEN_PARSE flag fails). 1188 (Nikita) 1189 1190 - XML: 1191 . XmlParser opaque object renamed to XMLParser for consistency with other XML objects. (girgias) 1192 1193 - Zlib: 1194 . Fixed #48725 (Support for flushing in zlib stream). (cmb) 1195 1196 26 Nov 2020, PHP 8.0.0 1197 1198 - BZ2: 1199 . Fixed bug #71263 (fread() does not report bzip2.decompress errors). (cmb) 1200 1201 - CLI: 1202 . Allow debug server binding to an ephemeral port via `-S localhost:0`. (Sara) 1203 1204 - COM: 1205 . Fixed bug #55847 (DOTNET .NET 4.0 GAC new location). (cmb) 1206 . Fixed bug #62474 (com_event_sink crashes on certain arguments). (cmb) 1207 1208 - Calendar: 1209 . Fixed bug #80007 (Potential type confusion in unixtojd() parameter parsing). 1210 (Andy Postnikov) 1211 1212 - Core: 1213 . Fixed bug #36365 (scandir duplicates file name at every 65535th file). 1214 (cmb) 1215 . Fixed bug #49555 (Fatal error "Function must be a string" message should be 1216 renamed). (Nikita) 1217 . Fixed bug #62294 (register_shutdown_function() does not correctly handle 1218 exit code). (Nikita) 1219 . Fixed bug #62609 (Allow implementing Traversable on abstract classes). 1220 (Nikita) 1221 . Fixed bug #65274 (Enhance undefined class constant error with class name). 1222 (Nikita) 1223 . Fixed bug #65275 (Calling exit() in a shutdown function does not change the 1224 exit value in CLI). (Nikita) 1225 . Fixed bug #69084 (Unclear error message when not implementing a renamed 1226 abstract trait function). (Nikita) 1227 . Fixed bug #70839 (Converting optional argument to variadic forbidden by LSP 1228 checks). (Nikita) 1229 . Fixed bug #74558 (Can't rebind closure returned by Closure::fromCallable()). 1230 (cmb) 1231 . Fixed bug #77561 (Shebang line not stripped for non-primary script). 1232 (Nikita) 1233 . Fixed bug #77619 (Wrong reflection on MultipleIterator::__construct). 1234 (Fabien Villepinte) 1235 . Fixed bug #77966 (Cannot alias a method named "namespace"). (Nikita) 1236 . Fixed bug #78236 (convert error on receiving variables when duplicate [). 1237 (cmb) 1238 . Fixed bug #78770 (Incorrect callability check inside internal methods). 1239 (Nikita) 1240 . Fixed bug #79108 (Referencing argument in a function makes it a reference 1241 in the stack trace). (Nikita) 1242 . Fixed bug #79368 ("Unexpected end of file" is not an acceptable error 1243 message). (Alex Dowad) 1244 . Fixed bug #79462 (method_exists and property_exists incoherent behavior). 1245 (cmb) 1246 . Fixed bug #79467 (data:// wrappers are writable). (cmb) 1247 . Fixed bug #79521 (Check __set_state structure). (carusogabriel) 1248 . Fixed bug #79790 ("Illegal offset type" exception during AST evaluation 1249 not handled properly). (Nikita) 1250 . Fixed bug #79791 (Assertion failure when unsetting variable during binary 1251 op). (Nikita) 1252 . Fixed bug #79828 (Segfault when trying to access non-existing variable). 1253 (Nikita) 1254 . Fixed bug #79841 (Syntax error in configure / unescaped "[]" in php.m4). 1255 (Nikita) 1256 . Fixed bug #79852 (count(DOMNodeList) doesn't match 1257 count(IteratorIterator(DOMNodeList))). (Nikita) 1258 . Fixed bug #79867 (Promoted untyped properties should get null default 1259 value). (Nikita) 1260 . Fixed bug #79897 (Promoted constructor params with attribs cause crash). 1261 (Deus Kane) 1262 . Fixed bug #79927 (Generator doesn't throw exception after multiple yield 1263 from iterable). (Nikita) 1264 . Fixed bug #79946 (Build fails due to undeclared UINT32_C). (Nikita) 1265 . Fixed bug #79948 (Exit in auto-prepended file does not abort PHP execution). 1266 (Nikita) 1267 . Fixed bug #80045 (memleak after two set_exception_handler calls with 1268 __call). (Nikita) 1269 . Fixed bug #80096 (Segmentation fault with named arguments in nested call). 1270 (Nikita) 1271 . Fixed bug #80109 (Cannot skip arguments when extended debug is enabled). 1272 (Nikita) 1273 . Fixed bug #80225 (broken namespace usage in eval code). (Nikita) 1274 . Fixed bug #80258 (Windows Deduplication Enabled, randon permission errors). 1275 (cmb) 1276 . Fixed bug #80280 (ADD_EXTENSION_DEP() fails for ext/standard and ext/date). 1277 (cmb) 1278 . Fixed bug #80334 (assert() vs named parameters - confusing error). (Nikita) 1279 . Fixed bug #80055 (Abstract trait methods returning "self" cannot be 1280 fulfilled by traits). (Nikita) 1281 . Fixed faulty generator cleanup with yield from. (Bob) 1282 . Implement #[Attr] Attribute syntax as per final vote in RFC 1283 https://wiki.php.net/rfc/shorter_attribute_syntax_change 1284 . Implemented FR #47074 (phpinfo() reports "On" as 1 for the some 1285 extensions). (cmb) 1286 . Implemented FR #72089 (require() throws fatal error instead of exception). 1287 (Nikita) 1288 . Removed the pdo_odbc.db2_instance_name php.ini directive. (Kalle) 1289 . Use SSE2 instructions do locale independent strtolower. (Laruence) 1290 1291 - Curl: 1292 . Bumped required libcurl version to 7.29.0. (cmb) 1293 . Fixed bug #80121 (Null pointer deref if CurlHandle directly instantiated). 1294 (Nikita) 1295 1296 - DOM: 1297 . Add property DOMXPath::$registerNodeNamespaces and constructor argument 1298 that allow global flag to configure query() or evaluate() calls. 1299 . Fixed bug #79968 (DOMChildNode API crash on unattached nodes). (Benjamin) 1300 . Fixed bug #80268 (loadHTML() truncates at NUL bytes). (cmb) 1301 1302 - Date: 1303 . Fixed bug #60302 (DateTime::createFromFormat should new static(), not new 1304 self()). (Derick) 1305 . Fixed bug #65547 (Default value for sunrise/sunset zenith still wrong). 1306 (cmb) 1307 . Fixed bug #69044 (discrepancy between time and microtime). (krakjoe) 1308 . Fixed bug #80057 (DateTimeImmutable::createFromFormat() does not populate 1309 time). (Derick) 1310 . Implemented FR #79903 (datetime: new format "p", same as "P" but returning 1311 "Z" for UTC). (gharlan) 1312 1313 - Enchant: 1314 . Add LIBENCHANT_VERSION macro. 1315 . Add enchant_dict_add and enchant_dict_is_added functions. 1316 . Deprecate enchant_broker_set_dict_path, enchant_broker_get_dict_path, 1317 enchant_dict_add_to_personal and enchant_dict_is_in_session. 1318 . Use libenchant-2 when available. 1319 1320 - FFI: 1321 . Added FFI\CType::getName() method. (chopins) 1322 . Fixed bug #79177 (FFI doesn't handle well PHP exceptions within callback). 1323 (cmb, Dmitry, Nikita) 1324 . Fixed bug #79749 (Converting FFI instances to bool fails). (cmb) 1325 1326 - FPM: 1327 . Add pm.status_listen option. (Jakub Zelenka) 1328 1329 - Fileinfo: 1330 . Upgrade to libmagic 5.39. (Anatol) 1331 1332 - GD: 1333 . Added imagegetinterpolation(). (cmb) 1334 . Fixed bug #55005 (imagepolygon num_points requirement). (cmb) 1335 . Made the $num_points parameter of php_imagepolygon optional. (cmb) 1336 . Removed deprecated image2wbmp(). (cmb) 1337 . Removed deprecated png2wbmp() and jpeg2wbmp(). (cmb) 1338 . Replaced gd resources with objects. (Mark Randall) 1339 1340 - IMAP: 1341 . Fixed bug #64076 (imap_sort() does not return FALSE on failure). (cmb) 1342 . Fixed bug #76618 (segfault on imap_reopen). (girgias) 1343 . Fixed bug #80213 (imap_mail_compose() segfaults on certain $bodies). (cmb) 1344 . Fixed bug #80215 (imap_mail_compose() may modify by-val parameters). (cmb) 1345 . Fixed bug #80216 (imap_mail_compose() does not validate types/encodings). 1346 (cmb) 1347 . Fixed bug #80220 (imap_mail_compose() may leak memory). (cmb) 1348 . Fixed bug #80223 (imap_mail_compose() leaks envelope on malformed bodies). 1349 (cmb) 1350 . Fixed bug #80226 (imap_sort() leaks sortpgm memory). (cmb) 1351 . Fixed bug #80239 (imap_rfc822_write_address() leaks memory). (cmb) 1352 . Fixed bug #80242 (imap_mail_compose() segfaults for multipart with rfc822). 1353 (cmb) 1354 . Fixed minor regression caused by fixing bug #80220. (cmb) 1355 1356 - Iconv: 1357 . Dropped support for iconv without proper errno setting. (cmb) 1358 1359 - Intl: 1360 . Removed deprecated INTL_IDNA_VARIANT_2003. (cmb) 1361 1362 - JIT: 1363 . Fixed bug #77857 (Wrong result if executed with JIT). (Laruence) 1364 . Fixed bug #79255 (PHP cannot be compiled with enable JIT). 1365 (Laruence, Dmitry) 1366 . Fixed bug #79582 (Crash seen when opcache.jit=1235 and 1367 opcache.jit_debug=2). (Laruence) 1368 . Fixed bug #79743 (Fatal error when assigning to array property 1369 with JIT enabled). (Laruence) 1370 . Fixed bug #79864 (JIT segfault in Symfony OptionsResolver). (Dmitry) 1371 . Fixed bug #79888 (Incorrect execution with JIT enabled). (Dmitry) 1372 1373 - JSON: 1374 . The JSON extension is now an integral part of PHP and cannot be disabled 1375 as per RFC: https://wiki.php.net/rfc/always_enable_json (tandre) 1376 1377 - LDAP: 1378 . Fixed memory leaks. (ptomulik) 1379 . Removed deprecated ldap_sort. (mcmic) 1380 1381 - MBString: 1382 . Fixed bug #76999 (mb_regex_set_options() return current options). (cmb) 1383 . Removed the unused $is_hex parameter from mb_decode_numericentity(). (cmb) 1384 1385 - MySQLi: 1386 . Fixed bug #76809 (SSL settings aren't respected when persistent connections 1387 are used). (fabiomsouto) 1388 1389 - Mysqlnd: 1390 . Fixed #60594 (mysqlnd exposes 160 lines of stats in phpinfo). (PeeHaa) 1391 1392 - OCI8: 1393 . Deprecated old OCI8 function aliases. (Jens de Nies) 1394 . Modernized oci_register_taf_callback() callable argument parsing 1395 implementation. (girgias) 1396 . Removed obsolete no-op function oci_internal_debug(). (Jens de Nies) 1397 1398 - ODBC: 1399 . Fixed bug #22986 (odbc_connect() may reuse persistent connection). (cmb) 1400 . Fixed bug #44618 (Fetching may rely on uninitialized data). (cmb) 1401 1402 - Opcache: 1403 . Fixed bug #76535 (Opcache does not replay compile-time warnings). (Nikita) 1404 . Fixed bug #78654 (Incorrectly computed opcache checksum on files with 1405 non-ascii characters). (mhagstrand) 1406 . Fixed bug #79665 (ini_get() and opcache_get_configuration() inconsistency). 1407 (cmb) 1408 . Fixed bug #80030 (Optimizer segfault with isset on static property with 1409 undef dynamic class name). (Nikita) 1410 . Fixed bug #80175 (PHP8 RC1 - JIT Buffer not working). (cmb) 1411 . Fixed bug #80184 (Complex expression in while / if statements resolves to 1412 false incorrectly). (Nikita) 1413 . Fixed bug #80255 (Opcache bug (bad condition result) in 8.0.0rc1). (Nikita) 1414 . Fixed run-time binding of preloaded dynamically declared function. (Dmitry) 1415 1416 - OpenSSL: 1417 . Added Cryptographic Message Syntax (CMS) support. (Eliot Lear) 1418 1419 - PCRE: 1420 . Don't ignore invalid escape sequences. (sjon) 1421 . Updated to PCRE2 10.35. (cmb) 1422 1423 - PDO: 1424 . Changed default PDO error mode to exceptions. (AllenJB) 1425 . Fixed bug #77849 (Disable cloning of PDO handle/connection objects). 1426 (camporter) 1427 1428 - PDO_Firebird: 1429 . Fixed bug #64937 (Firebird PDO preprocessing sql). (Simonov Denis) 1430 1431 - PDO_OCI: 1432 . Added support for setting and getting the oracle OCI 18c call timeout. 1433 (camporter) 1434 1435 - PDO_PGSQL: 1436 . Bumped required libpq version to 9.1. (cmb) 1437 1438 - PGSQL: 1439 . Bumped required libpq version to 9.1. (cmb) 1440 1441 - Phpdbg: 1442 . Fixed bug #76596 (phpdbg support for display_errors=stderr). (kabel) 1443 . Fixed bug #76801 (too many open files). (alekitto) 1444 . Fixed bug #77800 (phpdbg segfaults on listing some conditional breakpoints). 1445 (krakjoe) 1446 . Fixed bug #77805 (phpdbg build fails when readline is shared). (krakjoe) 1447 1448 - Reflection: 1449 . Fixed bug #64592 (ReflectionClass::getMethods() returns methods out of 1450 scope). (Nikita) 1451 . Fixed bug #69180 (Reflection does not honor trait conflict resolution / 1452 method aliasing). (Nikita) 1453 . Fixed bug #74939 (Nested traits' aliased methods are lowercased). (Nikita) 1454 . Fixed bug #77325 (ReflectionClassConstant::$class returns wrong class when 1455 extending). (Nikita) 1456 . Fixed bug #78697 (ReflectionClass::implementsInterface - inaccurate error 1457 message with traits). (villfa) 1458 . Fixed bug #80190 (ReflectionMethod::getReturnType() does not handle static 1459 as part of union type). (Nikita) 1460 . Fixed bug #80299 (ReflectionFunction->invokeArgs confused in arguments). 1461 (Nikita) 1462 . Fixed bug #80370 (getAttributes segfault on dynamic properties). (Benjamin 1463 Eberlei) 1464 . Implement #79628 (Add $filter parameter for ReflectionClass::getConstants 1465 and ReflectionClass::getReflectionConstants) (carusogabriel) 1466 . Implement ReflectionProperty::hasDefaultValue and 1467 Reflection::getDefaultValue (beberlei) 1468 1469 - SNMP: 1470 . Fixed bug #70461 (disable md5 code when it is not supported in net-snmp). 1471 (Alexander Bergmann, cmb) 1472 1473 - SPL: 1474 . Fixed bug #65006 (spl_autoload_register fails with multiple callables using 1475 self, same method). (Nikita) 1476 . Fixed bug #65387 (Circular references in SPL iterators are not garbage 1477 collected). (Nikita) 1478 . Fixed bug #71236 (Second call of spl_autoload_register() does nothing if it 1479 has no arguments). (Nikita) 1480 . Fixed bug #79987 (Memory leak in SplFileInfo because of missing 1481 zend_restore_error_handling()). (Dmitry) 1482 . SplFixedArray is now IteratorAggregate rather than Iterator. (alexdowad) 1483 1484 - SQLite3: 1485 . Added SQLite3::setAuthorizer() and respective class constants. (bohwaz) 1486 1487 - Session: 1488 . Fixed bug #73529 (session_decode() silently fails on wrong input). (cmb) 1489 . Fixed bug #78624 (session_gc return value for user defined session 1490 handlers). (bshaffer) 1491 1492 - Shmop: 1493 . Converted shmop resources to objects. (cmb) 1494 1495 - SimpleXML: 1496 . Fixed bug #63575 (Root elements are not properly cloned). (cmb) 1497 . Fixed bug #75245 (Don't set content of elements with only whitespaces). 1498 (eriklundin) 1499 1500 - Sodium: 1501 . Fixed bug #77646 (sign_detached() strings not terminated). (Frank) 1502 1503 - Standard: 1504 . Don't force rebuild of symbol table, when populating $http_response_header 1505 variable by the HTTP stream wrapper. (Dmitry) 1506 . Fixed bug #47983 (mixed LF and CRLF line endings in mail()). (cmb) 1507 . Fixed bug #64060 (lstat_stat_variation7.phpt fails on certain file systems). 1508 (M. Voelker, cmb) 1509 . Fixed bug #75902 (str_replace should warn when misused with nested arrays). 1510 (Nikita) 1511 . Fixed bug #76859 (stream_get_line skips data if used with data-generating 1512 filter). (kkopachev) 1513 . Fixed bug #77204 (getimagesize(): Read error! should mention file path). 1514 (peter279k) 1515 . Fixed bug #78385 (parse_url() does not include 'query' when question mark 1516 is the last char). (Islam Israfilov) 1517 . Fixed bug #79868 (Sorting with array_unique gives unwanted result). (Nikita) 1518 . Fixed bug #80256 (file_get_contents strip first line with chunked encoding 1519 redirect). (Nikita) 1520 . Fixed bug #80266 (parse_url silently drops port number 0). (cmb, Nikita) 1521 . Fixed bug #80290 (Double free when ASSERT_CALLBACK is used with a dynamic 1522 message). (Nikita) 1523 . Implemented FR #78638 (__PHP_Incomplete_Class should be final). (Laruence) 1524 . Made quoting of cmd execution functions consistent. (cmb) 1525 1526 - Tidy: 1527 . Removed the unused $use_include_path parameter from tidy_repair_string(). 1528 (cmb) 1529 1530 - Tokenizer: 1531 . Fixed bug #80328 (PhpToken::getAll() confusing name). (Nikita) 1532 1533 - XML: 1534 . Fixed bug #76874 (xml_parser_free() should never leak memory). (Nikita) 1535 1536 - XMLWriter: 1537 . Changed functions to accept/return XMLWriter objects instead of resources. 1538 (cmb) 1539 . Implemented FR #79344 (xmlwriter_write_attribute_ns: $prefix should be 1540 nullable). (cmb) 1541 . Removed return types from XMLWriter stubs. (cmb) 1542 1543 - Zip: 1544 . Add "flags" options to ZipArchive::addGlob and addPattern methods 1545 keeping previous behavior having FL_OVERWRITE by default. (Remi) 1546 . Add ZipArchive::EM_UNKNOWN and ZipArchive::EM_TRAD_PKWARE constants. (Remi) 1547 . Add ZipArchive::isCompressionMethodSupported() and 1548 ZipArchive::isEncryptionMethodSupported() method (libzip 1.7.0). (Remi) 1549 . Add ZipArchive::replaceFile() method. (Remi) 1550 . Add ZipArchive::setCancelCallback method (since libzip 1.6.0). (Remi) 1551 . Add ZipArchive::setMtimeName and ZipArchive::setMtimeIndex methods. (Remi) 1552 . Add ZipArchive::setProgressCallback method (since libzip 1.3.0). (Remi) 1553 . Add lastId property to ZipArchive. (Remi) 1554 . Add optional "flags" parameter to ZipArchive::addEmptyDir, addFile and 1555 addFromString methods. (Remi) 1556 . Fixed bug #50678 (files extracted by ZipArchive class lost their 1557 original modified time). (Remi) 1558 . Fixed bug #72374 (remove_path strips first char of filename). (tyage, Remi) 1559 . Implemented FR #77960 (add compression / encryption options for 1560 ZipArchive::addGlob and ZipArchive::addPattern). (Remi) 1561 . ZipArchive::status and ZipArchive::statusSys properties and 1562 ZipArchive::getStatusString() method stay valid after the archive 1563 is closed. (Remi) 1564 1565 - Zlib: 1566 . Fixed bug #71417 (fread() does not report zlib.inflate errors). (cmb) 1567 . Fixed bug #78792 (zlib.output_compression disabled by Content-Type: image/). 1568 (cmb)