PHP Release 8.0.8


    PHP 8.0.8 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.0.8. This is a security release.

    All PHP 8.0 users are encouraged to upgrade to this version.

    For source downloads of PHP 8.0.8 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.0.8 (tar.gz)
    SHA256: 084a1e8020e86fb99b663d195fd9ac98a9f37dfcb9ecb5c159054cdb8f388945
    PHP 8.0.8 (tar.bz2)
    SHA256: 14bd77d71a98943e14b324da83e31b572781df583cda9650a184fae3214cd16f
    PHP 8.0.8 (tar.xz)
    SHA256: dc1668d324232dec1d05175ec752dade92d29bb3004275118bc3f7fc7cbfbb1c
    Change Logs
    core
    • Fixed bug #81076 (incorrect debug info on Closures with implicit binds).
    • Fixed bug #81068 (Double free in realpath_cache_clean()).
    • Fixed bug #76359 (open_basedir bypass through adding "..").
    • Fixed bug #81090 (Typed property performance degradation with .= operator).
    • Fixed bug #81070 (Integer underflow in memory limit comparison).
    • Fixed bug #81122: SSRF bypass in FILTER_VALIDATE_URL. (CVE-2021-21705)
    bzip2
    • Fixed bug #81092 (fflush before stream_filter_remove corrupts stream).
    fileinfo
    • Fixed bug #80197 (implicit declaration of function 'magic_stream' is invalid).
    gmp
    • Fixed bug #81119 (GMP operators throw errors with wrong parameter names).
    mysqlnd
    • Fixed bug #80761 (PDO uses too much memory).
    oci8
    • Fixed bug #81088 (error in regression test for oci_fetch_object() and oci_fetch_array()).
    opcache
    • Fixed bug #81051 (Broken property type handling after incrementing reference).
    • Fixed bug #80968 (JIT segfault with return from required file).
    openssl
    • Fixed bug #76694 (native Windows cert verification uses CN as sever name).
    pdo_firebird
    • Fixed bug #76448: Stack buffer overflow in firebird_info_cb. (CVE-2021-21704)
    • Fixed bug #76449: SIGSEGV in firebird_handle_doer. (CVE-2021-21704)
    • Fixed bug #76450: SIGSEGV in firebird_stmt_execute. (CVE-2021-21704)
    • Fixed bug #76452: Crash while parsing blob data in firebird_fetch_blob. (CVE-2021-21704)
    readline
    • Fixed bug #72998 (invalid read in readline completion).
    standard
    • Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string conversion").
    • Fixed bug #77627 (method_exists on Closure::__invoke inconsistency).
    windows
    • Fixed bug #81120 (PGO data for main PHP DLL are not used).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top