ZendPHP January 2026 Releases
Community Changes
PHP Version PHP ZendPHP 8.5.2 Changes
-
Core
- Fix OSS-Fuzz #465488618 (Wrong assumptions when dumping function signature with dynamic class const lookup default argument). (ilutov)
- Fixed bug GH-20695 (Assertion failure in
normalize_value()when parsing malformed INI input viaparse_ini_string()). (ndossche) - Fixed bug GH-20714 (Uncatchable exception thrown in generator). (ilutov)
- Fixed bug GH-20352 (UAF in
php_output_handler_freevia re-entrantob_start()during error deactivation). (ndossche) - Fixed bug GH-20745 ("Casting out of range floats to int" applies to strings). (Bob)
-
DOM
- Fixed bug GH-20722 (Null pointer dereference in DOM namespace node cloning via clone on malformed objects). (ndossche)
- Fixed bug GH-20444 (
Dom\XMLDocument::C14N()seems broken compared toDOMDocument::C14N()). (ndossche)
-
EXIF
- Fixed bug GH-20631 (Integer underflow in exif HEIF parsing when
pos.size 2). (Oblivionsage)
- Fixed bug GH-20631 (Integer underflow in exif HEIF parsing when
-
Intl
- Fix leak in
umsg_format_helper(). (ndossche)
- Fix leak in
-
LDAP
- Fix memory leak in
ldap_set_options(). (ndossche)
- Fix memory leak in
-
Lexbor
- Fixed bug GH-20668 (
\Uri\WhatWg\Url::withHost()crashes (SEGV) for URLs using thefile:scheme). (lexborisov)
- Fixed bug GH-20668 (
-
Mbstring
- Fixed bug GH-20674 (
mb_decode_mimeheaderdoes not handle separator). (Yuya Hamada)
- Fixed bug GH-20674 (
-
OpenSSL
- Fixed bug GH-20802 (undefined behavior with invalid
SNI_server_certsoptions). (David Carlier)
- Fixed bug GH-20802 (undefined behavior with invalid
-
PCNTL
- Fixed bug with
pcntl_getcpuaffinity()on solaris regarding invalid process ids handling. (David Carlier)
- Fixed bug with
-
Phar
- Fixed bug GH-20732 (
Phar::LoadPharundefined behavior when reading fails). (ndossche) - Fix
SplFileInfo::openFile()in write mode. (ndossche) - Fix build on legacy OpenSSL 1.1.0 systems. (Giovanni Giacobbi)
- Fixed bug #74154 (Phar
extractTocreates empty files). (ndossche)
- Fixed bug GH-20732 (
-
Session
- Fix support for MM module. (Michael Orlitzky)
-
Sqlite3
- Fixed bug GH-20699 (
SQLite3ResultfetchArrayreturnarray|false, null returned). (ndossche, plusminmax)
- Fixed bug GH-20699 (
-
Standard
- Fix error check for
proc_open()command. (ndossche) - Fix memory leak in
mail()when header key is numeric. (Girgias) - Fixed bug GH-20582 (Heap Buffer Overflow in
iptcembed). (ndossche)
- Fix error check for
-
URI
- Fixed bug GH-20771 (Assertion failure when
getUnicodeHost()returns empty string). (ndossche)
- Fixed bug GH-20771 (Assertion failure when
-
Zlib
- Fix OOB
gzseek()causing assertion failure. (ndossche)
- Fix OOB
PHP Version PHP ZendPHP 8.4.17 Changes
-
Core
- Fix OSS-Fuzz #465488618 (Wrong assumptions when dumping function signature with dynamic class const lookup default argument). (ilutov)
- Fixed bug GH-20695 (Assertion failure in
normalize_value()when parsing malformed INI input viaparse_ini_string()). (ndossche) - Fixed bug GH-20714 (Uncatchable exception thrown in generator). (ilutov)
- Fixed bug GH-20352 (UAF in
php_output_handler_freevia re-entrantob_start()during error deactivation). (ndossche)
-
Bz2
- Fixed bug GH-20620 (
bzcompressoverflow on large source size). (David Carlier)
- Fixed bug GH-20620 (
-
DOM
- Fixed bug GH-20722 (Null pointer dereference in DOM namespace node cloning via clone on malformed objects). (ndossche)
- Fixed bug GH-20444 (
Dom\XMLDocument::C14N()seems broken compared toDOMDocument::C14N()). (ndossche)
-
GD
- Fixed bug GH-20622 (
imagestring/imagestringupoverflow). (David Carlier)
- Fixed bug GH-20622 (
-
Intl
- Fix leak in
umsg_format_helper(). (ndossche)
- Fix leak in
-
LDAP
- Fix memory leak in
ldap_set_options(). (ndossche)
- Fix memory leak in
-
Mbstring
- Fixed bug GH-20674 (
mb_decode_mimeheaderdoes not handle separator). (Yuya Hamada)
- Fixed bug GH-20674 (
-
OpenSSL
- Fixed bug GH-20802 (undefined behavior with invalid
SNI_server_certsoptions). (David Carlier)
- Fixed bug GH-20802 (undefined behavior with invalid
-
PCNTL
- Fixed bug with
pcntl_getcpuaffinity()on solaris regarding invalid process ids handling. (David Carlier)
- Fixed bug with
-
Phar
- Fixed bug GH-20732 (
Phar::LoadPharundefined behavior when reading fails). (ndossche) - Fix
SplFileInfo::openFile()in write mode. (ndossche) - Fix build on legacy OpenSSL 1.1.0 systems. (Giovanni Giacobbi)
- Fixed bug #74154 (Phar
extractTocreates empty files). (ndossche)
- Fixed bug GH-20732 (
-
POSIX
- Fixed crash on posix groups to php array creation on macos. (David Carlier)
-
SPL
- Fixed bug GH-20678 (resource created by
GlobIteratorcrashes withfclose()). (David Carlier)
- Fixed bug GH-20678 (resource created by
-
Sqlite3
- Fixed bug GH-20699 (
SQLite3ResultfetchArrayreturnarray|false, null returned). (ndossche, plusminmax)
- Fixed bug GH-20699 (
-
Standard
- Fix error check for
proc_open()command. (ndossche) - Fix memory leak in
mail()when header key is numeric. (Girgias) - Fixed bug GH-20582 (Heap Buffer Overflow in
iptcembed). (ndossche)
- Fix error check for
-
Zlib
- Fix OOB
gzseek()causing assertion failure. (ndossche)
- Fix OOB
PHP Version PHP ZendPHP 8.3.30 Changes
-
Core
- Fix OSS-Fuzz #465488618 (Wrong assumptions when dumping function signature with dynamic class const lookup default argument). (ilutov)
- Fixed bug GH-20695 (Assertion failure in
normalize_value()when parsing malformed INI input viaparse_ini_string()). (ndossche) - Fixed bug GH-20714 (Uncatchable exception thrown in generator). (ilutov)
- Fixed bug GH-20352 (UAF in
php_output_handler_freevia re-entrantob_start()during error deactivation). (ndossche)
-
Bz2
- Fixed bug GH-20620 (
bzcompressoverflow on large source size). (David Carlier)
- Fixed bug GH-20620 (
-
DOM
- Fixed bug GH-20722 (Null pointer dereference in DOM namespace node cloning via clone on malformed objects). (ndossche)
-
GD
- Fixed bug GH-20622 (
imagestring/imagestringupoverflow). (David Carlier)
- Fixed bug GH-20622 (
-
Intl
- Fix leak in
umsg_format_helper(). (ndossche)
- Fix leak in
-
LDAP
- Fix memory leak in
ldap_set_options(). (ndossche)
- Fix memory leak in
-
Mbstring
- Fixed bug GH-20674 (
mb_decode_mimeheaderdoes not handle separator). (Yuya Hamada)
- Fixed bug GH-20674 (
-
Phar
- Fixed bug GH-20732 (
Phar::LoadPharundefined behavior when reading fails). (ndossche) - Fix
SplFileInfo::openFile()in write mode. (ndossche) - Fix build on legacy OpenSSL 1.1.0 systems. (Giovanni Giacobbi)
- Fixed bug GH-20732 (
-
POSIX
- Fixed crash on posix groups to php array creation on macos. (David Carlier)
-
SPL
- Fixed bug GH-20678 (resource created by
GlobIteratorcrashes withfclose()). (David Carlier)
- Fixed bug GH-20678 (resource created by
-
Sqlite3
- Fixed bug GH-20699 (
SQLite3ResultfetchArrayreturnarray|false, null returned). (ndossche, plusminmax)
- Fixed bug GH-20699 (
-
Standard
- Fix error check for
proc_open()command. (ndossche) - Fixed bug GH-20582 (Heap Buffer Overflow in
iptcembed). (ndossche)
- Fix error check for
-
Zlib
- Fix OOB
gzseek()causing assertion failure. (ndossche)
- Fix OOB
ZendHQ 1.7.5 Changes
- Added copy or export to file option for Jobqueue Job history item