PHP Release 8.0.24


PHP 8.0.24 Release Announcement

The PHP development team announces the immediate availability of PHP 8.0.24. This is a security release.

All PHP 8.0 users are encouraged to upgrade to this version.

For source downloads of PHP 8.0.24 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code
PHP 8.0.24 (tar.gz)
SHA256: 6020843a2f1ce36745d958b3ca17f3fdc42e78a43899f552ab5dbc509ff19232
PHP 8.0.24 (tar.bz2)
SHA256: 908e17cea331d5abb8506b4a89c6392b962e127c391327777c7485eb4b415d43
PHP 8.0.24 (tar.xz)
SHA256: 8e6a63ac9cdabe4c345b32a54b18f348d9e50a1decda217faf2d61278d22f08b
Change Logs
core
  • Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function)
  • Fixed bug GH-9361 (Segmentation fault on script exit #9379).
  • Fixed bug GH-9407 (LSP error in eval'd code refers to wrong class for static type).
  • Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629).
dom
  • Fixed bug #79451 (DOMDocument->replaceChild on doctype causes double free).
fpm
  • Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
  • Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
  • GMP
  • Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
  • Intl
  • Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
pdo_pgsql
  • Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
phar
  • Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628).
reflection
  • Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
  • Fixed bug GH-9409 (Private method is incorrectly dumped as "overwrites").
streams
  • Fixed bug GH-9316 ($http_response_header is wrong for long status line).
To Top