php-8.4.13

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

25 Sep 2025, PHP 8.4.13

• Core:
  • Fixed bug GH-18850 (Repeated inclusion of file with halt_compiler() triggers "Constant already defined" warning)-
  • Partially fixed bug GH-19542 (Scanning of string literals >=2GB will fail due to signed int overflow)-
  • Fixed bug GH-19544 (GC treats ZEND_WEAKREF_TAG_MAP references as WeakMap references)-
  • Fixed bug GH-19613 (Stale array iterator pointer).
  • Fixed bug GH-19679 (zend_ssa_range_widening may fail to converge).
  • Fixed bug GH-19681 (PHP_EXPAND_PATH broken with bash 5.3.0).
  • Fixed bug GH-19720 (Assertion failure when error handler throws when accessing a deprecated constant)-

• CLI:
  • Fixed bug GH-19461 (Improve error message on listening error with IPv6 address)-

• Date:
  • Fixed date_sunrise() and date_sunset() with partial-hour UTC offset.

• DBA:
  • Fixed bug GH-19706 (dba stream resource mismanagement).

• DOM:
  • Fixed bug GH-19612 (Mitigate libxml2 tree dictionary bug).

• FPM:
  • Fixed failed debug assertion when php_admin_value setting fails.

• Intl:
  • Fixed bug GH-11952 (Fix locale strings canonicalization for IntlDateFormatter and NumberFormatter)-

• Opcache:
  • Fixed bug GH-19493 (JIT variable not stored before YIELD).

• OpenSSL:
  • Fixed bug GH-19245 (Success error message on TLS stream accept failure).

• PGSQL:
  • Fixed bug GH-19485 (potential use after free when using persistent pgsql connections)-

• Phar:
  • Fixed memory leaks when verifying OpenSSL signature.
  • Fix memory leak in phar tar temporary file error handling code.
  • Fix metadata leak when phar convert logic fails.
  • Fix memory leak on failure in phar_convert_to_other().
  • Fixed bug GH-19752 (Phar decompression with invalid extension can cause UAF)-

• Standard:
  • Fixed bug GH-16649 (UAF during array_splice).
  • Fixed bug GH-19577 (Avoid integer overflow when using a small offset and PHP_INT_MAX with LimitIterator)-

• Streams:
  • Remove incorrect call to zval_ptr_dtor() in user_wrapper_metadata(). (nielsdos)
  • Fix OSS-Fuzz #385993744.

• Zip:
  • Fix memory leak in zip when encountering empty glob result.

[Bruce Dubbs]

Fixed at commits

1b26f5d27e Update to FreeRDP-3.17.2.
fb37b68555 Update to abseil-cpp-20250814.1.
f43e11c3f3 Update to php-8.4.13.
62409e001d Update to shaderc-2025.4.

[Bruce Dubbs]

Milestone renamed