Offizieller Changelog

Core

• Fixed bug GH-23088 (Stack overflow when comparing deeply nested arrays). (Lazizbek Ergashev)

Date

• Fixed leak on double DatePeriod::__construct() call. (ilutov)

DOM

• Fixed bug GH-23116 (Stack overflow when normalizing a deeply nested DOMDocument). (Lazizbek Ergashev)
• Fixed bug GH-23117 (Stack overflow when normalizing a deeply nested Dom\XMLDocument). (Lazizbek Ergashev)
• Fixed bug GH-22825 (DOMElement::setAttribute() fails silently when the DTD declares a default value for the attribute). (iliaal)
• Fixed bug GH-22447 (UAF at dom_objects_free_storage when setting an attribute node that collides by local name with a namespaced attribute). (David Carlier)
• Fixed bug GH-23120 (Stack overflow when comparing deeply nested DOM nodes with DOMNode::isEqualNode()). (Weilin Du)

LibXML

• Fixed bug GH-22752 (Build failure with libxml 2.15). (David Carlier)

MBString

• Fixed bug GH-22779 (mb_strrpos() returns the wrong position for a negative offset in a non-UTF-8 encoding). (Eyüp Can Akman)
• Fixed bug GH-21036 (mb_ereg_search_getregs() crashes after mb_eregi() invalidates the regex cache). (Matthias Goergens)

Opcache

• Fixed bug GH-22857 (Function JIT emits wrong code for FETCH_OBJ_FUNC_ARG on a property hook getter, losing register-held variables). (Zhao Hao)
• Fixed bug GH-22916 (Preserve parent regs in zend_jit_deoptimizer_start()). (Arnaud)

OpenSSL

• Fix missing error check on invalid alpn protocols. (ndossche)

PCRE

• Fixed bug GH-21134 (Crash with \C + UTF-8). Using \C in UTF-8 patterns is now forbidden. (Arnaud)

Reflection

• Fixed bug GH-22905 (Reflection exception messages truncate on null bytes). (DanielEScherzer)
• Fixed ReflectionProperty::isLazy() and skipLazyInitialization() using the parent slot when a child class hooks an inherited property. (iliaal)
• Fixed segfault in ReflectionMethod::createFromMethodName() on an uninstantiable subclass. (iliaal)

Session

• Fix corruption in mod_mm. (ndossche)
• Fixed bug GH-23043 (broken session id code can cause zend_mm_heap corrupted). (ndossche)

SimpleXML

• Fixed integer element offsets that cannot resolve aliasing an existing element. (iliaal)
• Fixed segfault when comparing uninitialized SimpleXMLElement instances. (iliaal)

Sockets

• Fixed various memory related issues in ext/sockets. (David Carlier)

SQLite

• Fix leak when trying to close db if blob stream is still open. (ndossche)

Standard

• Fixed bug GH-23111 (Stack overflow in array_walk_recursive() with deeply nested arrays). (Lazizbek Ergashev)
• Fixed bug GH-23113 (Stack overflow in array_replace_recursive() with deeply nested arrays). (Lazizbek Ergashev)
• Fixed bug GH-23115 (Stack overflow in compact() with deeply nested arrays). (Lazizbek Ergashev)
• Fixed stack overflow in count() with COUNT_RECURSIVE and deeply nested arrays. (Lazizbek Ergashev)

Streams

• Fixed bug GH-15836 (Use-after-free when a user stream filter accesses $this->stream during the close flush). (iliaal)

Sysvshm

• Fixed out-of-bounds write when shm_attach() opens an existing segment with a size larger than the segment actually is. (David Carlier)

XSL

• Fixed use-after-free when a DOMDocument subclass __clone() retains the stylesheet copy made by XSLTProcessor::importStylesheet(). (iliaal)

Zip

• Fixed ZipArchive::addGlob() and ZipArchive::addPattern() ignoring their default options when no options array is given. (David Carlier)

Offizielle Downloads

• php-8.4.25.tar.gz 27 Aug 2026
  sha256: 5cde1da976b728fa09e6b549a4c8afcd0c180337028dacf34f73b11be50253db Kopieren
• php-8.4.25.tar.bz2 27 Aug 2026
  sha256: 952ccc1785266b958f4a1dcfc580e08eabbb79f44222d1eff192bcd98d91f6e3 Kopieren
• php-8.4.25.tar.xz 27 Aug 2026
  sha256: dc1ad8b4109898d9db49744450403874858c23efc685b1032a50bd1e83906848 Kopieren

Quelle: php.net · NEWS-Datei aus php-src · NEWS · Offizielle Ankündigung · Downloads · PHP-Releases