Ondřej Surý has released new PHP packages for Debian GNU/Linux 9 LTS and 10.

To add the repository:

#!/bin/bash # To add this repository please do:

if [ "$(whoami)" != "root" ]; then
SUDO=sudo
fi

${SUDO} apt-get -y install apt-transport-https lsb-release ca-certificates curl
${SUDO} wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
${SUDO} sh -c 'echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/php.list'
${SUDO} apt-get update

PHP Packages
Issues Tracker

PHP 8.0.1

- Core:
. Fixed bug #80345 (PHPIZE configuration has outdated PHP_RELEASE_VERSION). (cmb)
. Fixed bug #72964 (White space not unfolded for CC/Bcc headers). (cmb)
. Fixed bug #80391 (Iterable not covariant to mixed). (Nikita)
. Fixed bug #80393 (Build of PHP extension fails due to configuration gap with libtool). (kir dot morozov at gmail dot com)
. Fixed bug #77069 (stream filter loses final block of data). (cmb)

- Fileinfo:
. Fixed bug #77961 (finfo_open crafted magic parsing SIGABRT). (cmb)

- FPM:
. Fixed bug #69625 (FPM returns 200 status on request without SCRIPT_FILENAME env). (Jakub Zelenka)

- IMAP
. Fixed bug #80438 (imap_msgno() incorrectly warns and return false on valid UIDs in PHP 8.0.0). (girgias)
. Fix a regression with valid UIDs in imap_savebody() (girgias)
. Make warnings for invalid message numbers/UIDs between functions consistent (girgias)

- Intl:
. Fixed bug #80425 (MessageFormatAdapter::getArgTypeList redefined). (Nikita)

- Opcache:
. Fixed bug #80404 (Incorrect range inference result when division results in float). (Nikita)
. Fixed bug #80377 (Opcache misses executor_globals). (Nikita)
. Fixed bug #80433 (Unable to disable the use of the AVX command when using JIT). (Nikita)
. Fixed bug #80447 (Strange out of memory error when running with JIT). (Dmitry)
. Fixed bug #80480 (Segmentation fault with JIT enabled). (Dmitry)
. Fixed bug #80506 (Immediate SIGSEGV upon ini_set("opcache.jit_debug", 1)). (Dmitry)

- OpenSSL:
. Fixed bug #80368 (OpenSSL extension fails to build against LibreSSL due to lack of OCB support). (Nikita)

- PDO MySQL:
. Fixed bug #80458 (PDOStatement::fetchAll() throws for upsert queries). (Kamil Tekiela)
. Fixed bug #63185 (nextRowset() ignores MySQL errors with native prepared statements). (Nikita)
. Fixed bug #78152 (PDO::exec() - Bad error handling with multiple commands). (Nikita)
. Fixed bug #66878 (Multiple rowsets not returned unless PDO statement object is unset()). (Nikita)
. Fixed bug #70066 (Unexpected "Cannot execute queries while other unbuffered queries"). (Nikita)
. Fixed bug #71145 (Multiple statements in init command triggers unbuffered query error). (Nikita)
. Fixed bug #76815 (PDOStatement cannot be GCed/closeCursor-ed when a PROCEDURE resultset SIGNAL). (Nikita)
. Fixed bug #79872 (Can't execute query with pending result sets). (Nikita)
. Fixed bug #79131 (PDO does not throw an exception when parameter values are missing). (Nikita)
. Fixed bug #72368 (PdoStatement->execute() fails but does not throw an exception). (Nikita)
. Fixed bug #62889 (LOAD DATA INFILE broken). (Nikita)
. Fixed bug #67004 (Executing PDOStatement::fetch() more than once prevents releasing resultset). (Nikita)
. Fixed bug #79132 (PDO re-uses parameter values from earlier calls to execute()). (Nikita)

- Phar:
. Fixed bug #73809 (Phar Zip parse crash - mmap fail). (cmb)
. Fixed bug #75102 (`PharData` says invalid checksum for valid tar). (cmb)
. Fixed bug #77322 (PharData::addEmptyDir('/') Possible integer overflow). (cmb)

- Phpdbg:
. Fixed bug #76813 (Access violation near NULL on source operand). (cmb)

- SPL:
. Fixed #62004 (SplFileObject: fgets after seek returns wrong line). (cmb)

- Standard:
. Fixed bug #80366 (Return Value of zend_fstat() not Checked). (sagpant, cmb)
. Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo). (CVE-2020-7071) (cmb)

- Tidy:
. Fixed bug #77594 (ob_tidyhandler is never reset). (cmb)

- Tokenizer:
. Fixed bug #80462 (Nullsafe operator tokenize with TOKEN_PARSE flag fails). (Nikita)

- XML:
. XmlParser opaque object renamed to XMLParser for consistency with other XML objects. (girgias)

- Zlib:
. Fixed #48725 (Support for flushing in zlib stream). (cmb)

PHP 7.4.14

- Core:
. Fixed bug #74558 (Can't rebind closure returned by Closure::fromCallable()). (cmb)
. Fixed bug #80345 (PHPIZE configuration has outdated PHP_RELEASE_VERSION). (cmb)
. Fixed bug #72964 (White space not unfolded for CC/Bcc headers). (cmb)
. Fixed bug #80362 (Running dtrace scripts can cause php to crash). (al at coralnet dot name)
. Fixed bug #80393 (Build of PHP extension fails due to configuration gap with libtool). (kir dot morozov at gmail dot com)
. Fixed bug #80402 (configure filtering out -lpthread). (Nikita)
. Fixed bug #77069 (stream filter loses final block of data). (cmb)

- Fileinfo:
. Fixed bug #77961 (finfo_open crafted magic parsing SIGABRT). (cmb)

- FPM:
. Fixed bug #69625 (FPM returns 200 status on request without SCRIPT_FILENAME env). (Jakub Zelenka)

- Intl:
. Fixed bug #80425 (MessageFormatAdapter::getArgTypeList redefined). (Nikita)

- OpenSSL:
. Fixed bug #80368 (OpenSSL extension fails to build against LibreSSL due to lack of OCB support). (Nikita)

- Phar:
. Fixed bug #73809 (Phar Zip parse crash - mmap fail). (cmb)
. Fixed bug #75102 (`PharData` says invalid checksum for valid ar). (cmb)
. Fixed bug #77322 (PharData::addEmptyDir('/') Possible integer overflow). (cmb)

- PDO MySQL:
. Fixed bug #80458 (PDOStatement::fetchAll() throws for upsert queries). (Kamil Tekiela)
. Fixed bug #63185 (nextRowset() ignores MySQL errors with native prepared statements). (Nikita)
. Fixed bug #78152 (PDO::exec() - Bad error handling with multiple commands). (Nikita)
. Fixed bug #70066 (Unexpected "Cannot execute queries while other unbuffered queries"). (Nikita)
. Fixed bug #71145 (Multiple statements in init command triggers unbuffered query error). (Nikita)
. Fixed bug #76815 (PDOStatement cannot be GCed/closeCursor-ed when a PROCEDURE resultset SIGNAL). (Nikita)

- Standard:
. Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo). (CVE-2020-7071) (cmb)
. Fixed bug #80366 (Return Value of zend_fstat() not Checked). (sagpant, cmb)
. Fixed bug #80411 (References to null-serialized object break serialize()). (Nikita)

- Tidy:
. Fixed bug #77594 (ob_tidyhandler is never reset). (cmb)

- Zlib:
. Fixed #48725 (Support for flushing in zlib stream). (cmb)

PHP 7.3.26

- Standard:
. Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo). (CVE-2020-7071) (cmb)
. Fixed bug #80457 (stream_get_contents() fails with maxlength=-1 or default). (bruno dot premont at restena dot lu)

PHP 5.6.40-39, 7.0.33-38, 7.1.33-25, 7.2.34-9

Backported from 7.3.26

- Standard:
. Fixed bug #77423 (FILTER_VALIDATE_URL accepts URLs with invalid userinfo). (CVE-2020-7071) (cmb)