PHP 8.4.14 Release Announcement

The PHP development team announces the immediate availability of PHP 8.4.14. This is a bug fix release.

All PHP 8.4 users are encouraged to upgrade to this version.

For source downloads of PHP 8.4.14 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code

• PHP 8.4.14 (tar.gz)
  sha256: 40341f3e03a36d48facdb6cc2ec600ff887a1af9a5e5fee0b40f40b61488afae
• PHP 8.4.14 (tar.bz2)
  sha256: f2139ce4cb7a6c5643ee98caa34e5c32ba841c2ba293e34a3d0357faa84bb3e7
• PHP 8.4.14 (tar.xz)
  sha256: bac90ee7cf738e814c89b6b27d4d2c4b70e50942a420837e1a22f5fd5f9867a3

Change Log

• core
  • Fixed bug GH-19765 (object_properties_load() bypasses readonly property checks).
  • Fixed hard_timeout with --enable-zend-max-execution-timers.
  • Fixed bug GH-19792 (SCCP causes UAF for return value if both warning and exception are triggered).
  • Fixed bug GH-19653 (Closure named argument unpacking between temporary closures can cause a crash).
  • Fixed bug GH-19839 (Incorrect HASH_FLAG_HAS_EMPTY_IND flag on userland array).
  • Fixed bug GH-19480 (error_log php.ini cannot be unset when open_basedir is configured).
  • Fixed bug GH-20002 (Broken build on *BSD with MSAN).
• cli
  • Fix useless "Failed to poll event" error logs due to EAGAIN in CLI server with PHP_CLI_SERVER_WORKERS.
• curl
  • Fix cloning of CURLOPT_POSTFIELDS when using the clone operator instead of the curl_copy_handle() function to clone a CurlHandle.
  • Fix curl build and test failures with version 8.16.
• date
  • Fixed GH-17159: "P" format for ::createFromFormat swallows string literals.
• dom
  • Fix macro name clash on macOS.
  • Fixed bug GH-20022 (docker-php-ext-install DOM failed).
• gd
  • Fixed GH-19955 (imagefttext() memory leak).
• mysqlnd
  • Fixed bug #67563 (mysqli compiled with mysqlnd does not take ipv6 adress as parameter).
• opcache
  • Fixed bug GH-19669 (assertion failure in zend_jit_trace_type_to_info_ex).
  • Fixed bug GH-19831 (function JIT may not deref property value).
  • Fixed bug GH-19889 (race condition in zend_runtime_jit(), zend_jit_hot_func()).
• phar
  • Fix memory leak and invalid continuation after tar header writing fails.
  • Fix memory leaks when creating temp file fails when applying zip signature.
• simplexml
  • Fixed bug GH-19988 (zend_string_init with NULL pointer in simplexml (UB)).
• soap
  • Fixed bug GH-19784 (SoapServer memory leak).
  • Fixed bug GH-20011 (Array of SoapVar of unknown type causes crash).
• standard
  • Fixed bug GH-12265 (Cloning an object breaks serialization recursion).
  • Fixed bug GH-19701 (Serialize/deserialize loses some data).
  • Fixed bug GH-19801 (leaks in var_dump() and debug_zval_dump()).
  • Fixed bug GH-20043 (array_unique assertion failure with RC1 array causing an exception on sort).
  • Fixed bug GH-19926 (reset internal pointer earlier while splicing array while COW violation flag is still set).
  • Fixed bug GH-19570 (unable to fseek in /dev/zero and /dev/null).
• streams
  • Fixed bug GH-19248 (Use strerror_r instead of strerror in main).
  • Fixed bug GH-17345 (Bug #35916 was not completely fixed).
  • Fixed bug GH-19705 (segmentation when attempting to flush on non seekable stream.
• xmlreader
  • Fixed bug GH-20009 (XMLReader leak on RelaxNG schema failure).
• zip
  • Fixed bug GH-19688 (Remove pattern overflow in zip addGlob()).
  • Fixed bug GH-19932 (Memory leak in zip setEncryptionName()/setEncryptionIndex()).