PHP 8.4.8 Release Announcement

The PHP development team announces the immediate availability of PHP 8.4.8. This is a bug fix release.

All PHP 8.4 users are encouraged to upgrade to this version.

For source downloads of PHP 8.4.8 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code

• PHP 8.4.8 (tar.gz)
  sha256: 26d5ae014925b7dee3a61ec02422795f008fbb3a36f9355edaee2d9d78b89b07
• PHP 8.4.8 (tar.bz2)
  sha256: 36569c64dd1499e570c436603b641eee7cde4af576af786597d0ee711b3a3a8a
• PHP 8.4.8 (tar.xz)
  sha256: aa6a4d330b47eacd83e351658ba8c47747a1e4356456219cfb6d75e7838da091

Change Log

• core
  • Fixed GH-18480 (array_splice with large values for offset/length arguments).
  • Partially fixed GH-18572 (nested object comparisons leading to stack overflow).
  • Fixed OSS-Fuzz #417078295.
  • Fixed OSS-Fuzz #418106144.
• curl
  • Fixed GH-18460 (curl_easy_setopt with CURLOPT_USERPWD/CURLOPT_USERNAME/ CURLOPT_PASSWORD set the Authorization header when set to NULL).
• date
  • Fixed bug GH-18076 (Since PHP 8, the date_sun_info() function returns inaccurate sunrise and sunset times, but other calculated times are correct) .
  • Fixed bug GH-18481 (date_sunrise with unexpected nan value for the offset).
• dom
  • Backport lexbor/lexbor#274.
• intl
  • Fix various reference issues.
• ldap
  • Fixed bug GH-18529 (ldap no longer respects TLS_CACERT from ldaprc in ldap_start_tls()).
• opcache
  • Fixed bug GH-18417 (Windows SHM reattachment fails when increasing memory_consumption or jit_buffer_size).
  • Fixed bug GH-18297 (Exception not handled when jit guard is triggered).
  • Fixed bug GH-18408 (Snapshotted poly_func / poly_this may be spilled).
  • Fixed bug GH-18567 (Preloading with internal class alias triggers assertion failure).
  • Fixed bug GH-18534 (FPM exit code 70 with enabled opcache and hooked properties in traits).
  • Fix leak of accel_globals->key.
• openssl
  • Fix missing checks against php_set_blocking() in xp_ssl.c.
• spl
  • Fixed bug GH-18421 (Integer overflow with large numbers in LimitIterator).
• standard
  • Fixed bug GH-17403 (Potential deadlock when putenv fails).
  • Fixed bug GH-18400 (http_build_query type error is inaccurate).
  • Fixed bug GH-18509 (Dynamic calls to assert() ignore zend.assertions).
• windows
  • Fix leak+crash with sapi_windows_set_ctrl_handler().
• zip
  • Fixed bug GH-18431 (Registering ZIP progress callback twice doesn't work).
  • Fixed bug GH-18438 (Handling of empty data and errors in ZipArchive::addPattern).