PHP 8.4.19 Release Announcement

The PHP development team announces the immediate availability of PHP 8.4.19. This is a bug fix release.

All PHP 8.4 users are encouraged to upgrade to this version.

For source downloads of PHP 8.4.19 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.

Source Code

• PHP 8.4.19 (tar.gz)
  sha256: 9e862435ffb533dc5b0eb486170a74e5f7c8095e8eb8819a2ff5aad430292a18
• PHP 8.4.19 (tar.bz2)
  sha256: bceb7798ed37b442fe523ae7ef345ccc2231db0b022d30735c2e378d3254a0d4
• PHP 8.4.19 (tar.xz)
  sha256: 11f7164ab26d356c31f94d3d69cc0e0707d5d2d6494a221aaeae307c08eaaa1c

Change Log

• core
  • Fixed bug GH-21029 (zend_mm_heap corrupted on Aarch64, LTO builds).
  • Fixed bug GH-20657 (Assertion failure in zend_lazy_object_get_info triggered by setRawValueWithoutLazyInitialization() and newLazyGhost()).
  • Fixed bug GH-20504 (Assertion failure in zend_get_property_guard when accessing properties on Reflection LazyProxy via isset()).
  • Fixed OSS-Fuzz #478009707 (Borked assign-op/inc/dec on untyped hooked property backing value).
  • Fixed bug GH-21215 (Build fails with -std=).
  • Fixed bug GH-13674 (Build system installs libtool wrappers when using slibtool).
• curl
  • Fixed bug GH-21023 (CURLOPT_XFERINFOFUNCTION crash with a null callback).
  • Don't truncate length.
• date
  • Fixed bug GH-20936 (DatePeriod::__set_state() cannot handle null start).
  • Fix timezone offset with seconds losing precision.
• dom
  • Fixed bug GH-21077 (Accessing Dom\Node::baseURI can throw TypeError).
  • Fixed bug GH-21097 (Accessing Dom\Node properties can can throw TypeError).
• mbstring
  • Fixed bug GH-21223; mb_guess_encoding no longer crashes when passed huge list of candidate encodings (with 200,000+ entries).
• opcache
  • Fixed bug GH-20718 ("Insufficient shared memory" when using JIT on Solaris).
  • Fixed bug GH-21227 (Borked SCCP of array containing partial object).
  • Fixed bug GH-21052 (Preloaded constant erroneously propagated to file-cached script).
• openssl
  • Fix a bunch of leaks and error propagation.
• pcntl
  • Fixed pcntl_setns() internal errors handling regarding errnos.
  • Fixed cpuset leak in pcntl_setcpuaffinity on out-of-range CPU ID on NetBSD/Solaris platforms.
  • Fixed pcntl_signal() signal table registering the callback first OS-wise before the internal list.
  • Fixed pcntl_signal_dispatch() stale pointer and exception handling.
• pcre
  • Fixed preg_match memory leak with invalid regexes.
  • Fixed pcre2_code leak when pcre2_pattern_info() fails after a successful pcre2_compile(), and match_sets/match_data/marks leaks in php_pcre_match_impl().
• pdo_pgsql
  • Fixed bug GH-21055 (connection attribute status typo for GSS negotiation).
• pgsql
  • Fixed bug GH-21162 (pg_connect() memory leak on error).
• sockets
  • Fixed bug GH-21161 (socket_set_option() crash with array 'addr' entry as null).
  • Fixed possible addr length overflow with socket_connect() and AF_UNIX family sockets.
• windows
  • Fixed compilation with clang (missing intrin.h include).