php-7.4.23

- Core:
. Fixed bug #72595 (php_output_handler_append illegal write access). (cmb)
. Fixed bug #66719 (Weird behaviour when using get_called_class() with call_user_func()). (Nikita)
. Fixed bug #81305 (Built-in Webserver Drops Requests With "Upgrade" Header). (cmb)
- BCMath:
. Fixed bug #78238 (BCMath returns "-0"). (cmb)

- CGI:
. Fixed bug #80849 (HTTP Status header truncation). (cmb)

- GD:
. Fixed bug #51498 (imagefilledellipse does not work for large circles). (cmb)

- MySQLi:
. Fixed bug #74544 (Integer overflow in mysqli_real_escape_string()). (cmb, johannes)

- OpenSSL:
. Fixed bug #81327 (Error build openssl extension on php 7.4.22). (cmb)

- PDO_ODBC:
. Fixed bug #81252 (PDO_ODBC doesn't account for SQL_NO_TOTAL). (cmb)

- Phar:
. Fixed bug #81211: Symlinks are followed when creating PHAR archive.(cmb)

- Shmop:
. Fixed bug #81283 (shmop can't read beyond 2147483647 bytes). (cmb, Nikita)

- Standard:
. Fixed bug #72146 (Integer overflow on substr_replace). (cmb)
. Fixed bug #81265 (getimagesize returns 0 for 256px ICO images). (George Dietrich)
. Fixed bug #74960 (Heap buffer overflow via str_repeat). (cmb, Dmitry)

- Streams:
. Fixed bug #81294 (Segfault when removing a filter). (cmb)

Release php-7.4.23 · php/php-src