Debian 10261 Published by

Ondřej Surý has released PHP 8.0.21, 8.1.7, and 8.2.0 Alpha 3 packages for Debian GNU/Linux 10 and 11.





To add the repository:
#!/bin/bash # To add this repository please do:

if [ "$(whoami)" != "root" ]; then
SUDO=sudo
fi

${SUDO} apt-get -y install apt-transport-https lsb-release ca-certificates curl
${SUDO} wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
${SUDO} sh -c 'echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/php.list'
${SUDO} apt-get update
PHP 8.1.1 for Debian 10

PHP Packages
Issues Tracker

php-8.0.21

- Core:
. Fixed potential use after free in php_binary_init(). (Heiko Weber)

- CLI:
. Fixed GH-8827 (Intentionally closing std handles no longer possible). (cmb)

- COM:
. Fixed bug GH-8778 (Integer arithmethic with large number variants fails). (cmb)

- Curl:
. Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option. (Pierrick)

- Date:
. Fixed bug #74671 (DST timezone abbreviation has incorrect offset). (Derick)
. Fixed bug #77243 (Weekdays are calculated incorrectly for negative years). (Derick)
. Fixed bug #78139 (timezone_open accepts invalid timezone string argument). (Derick)

- FPM:
. Fixed bug #67764 (fpm: syslog.ident don't work). (Jakub Zelenka)
- MBString:
. Fixed bug GH-8685 (pcre not ready at mbstring startup). (Remi)

- ODBC:
. Fixed handling of single-key connection strings. (Calvin Buckley)

- OpenSSL:
. Fixed bug #50293 (Several openssl functions ignore the VCWD). (Jakub Zelenka, cmb)
. Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates). (Jakub Zelenka)

- PDO_ODBC:
. Fixed errorInfo() result on successful PDOStatement->execute(). (Yurunsoft)
. Fixed handling of single-key connection strings. (Calvin Buckley)

- SPL:
. Fixed bug GH-8563 (Different results for seek() on SplFileObject and SplTempFileObject). (Girgias)

- Zip:
. Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache). (Remi)

php-8.1.8

- Core:
. Fixed bug GH-8338 (Intel CET is disabled unintentionally). (Chen, Hu)
. Fixed leak in Enum::from/tryFrom for internal enums when using JIT (ilutov)
. Fixed calling internal methods with a static return type from extension code. (Sara)
. Fixed bug GH-8655 (Casting an object to array does not unwrap refcount=1 references). (Nicolas Grekas)
. Fixed potential use after free in php_binary_init(). (Heiko Weber)

- CLI:
. Fixed GH-8827 (Intentionally closing std handles no longer possible). (cmb)

- COM:
. Fixed bug GH-8778 (Integer arithmethic with large number variants fails). (cmb)

- Curl:
. Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option. (Pierrick)

- Date:
. Fixed bug #72963 (Null-byte injection in CreateFromFormat and related functions). (Derick)
. Fixed bug #74671 (DST timezone abbreviation has incorrect offset). (Derick)
. Fixed bug #77243 (Weekdays are calculated incorrectly for negative years). (Derick)
. Fixed bug #78139 (timezone_open accepts invalid timezone string argument). (Derick)

- Fileinfo:
. Fixed bug #81723 (Heap buffer overflow in finfo_buffer). (CVE-2022-31627) (cmb)

- FPM:
. Fixed bug #67764 (fpm: syslog.ident don't work). (Jakub Zelenka)

- GD:
. Fixed imagecreatefromavif() memory leak. (cmb)

- MBString:
. mb_detect_encoding recognizes all letters in Czech alphabet (alexdowad)
. mb_detect_encoding recognizes all letters in Hungarian alphabet (alexdowad)
. Fixed bug GH-8685 (pcre not ready at mbstring startup). (Remi)
. Backwards-compatible mappings for 0x5C/0x7E in Shift-JIS are restored, after they had been changed in 8.1.0. (Alex Dowad)

- ODBC:
. Fixed handling of single-key connection strings. (Calvin Buckley)

- OPcache:
. Fixed bug GH-8591 (tracing JIT crash after private instance method change). (Arnaud, Dmitry, Oleg Stepanischev)

- OpenSSL:
. Fixed bug #50293 (Several openssl functions ignore the VCWD). (Jakub Zelenka, cmb)
. Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates). (Jakub Zelenka)

- PDO_ODBC:
. Fixed handling of single-key connection strings. (Calvin Buckley)

- SPL:
. Fixed bug GH-8563 (Different results for seek() on SplFileObject and SplTempFileObject). (Girgias)

- Zip:
. Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache). (Remi)

php-8.2.0alpha3

- Core:
. Uses safe_perealloc instead of perealloc for the ZEND_PTR_STACK_RESIZE_IF_NEEDED to avoid possible overflows. (David Carlier)

- DBA:
. Fixed LMDB driver hanging when attempting to delete a non-existing key (Girgias)

- Opcache:
. Allocate JIT buffer close to PHP .text segemnt to allow using direct IP-relative calls and jumps. (Su Tao, Wang Xue, Chen Hu, Lizhen Lizhen, Dmitry)

- Sockets:
. Added TCP_CONGESTION socket option. (David Carlier)

- SPL:
. Uses safe_erealloc instead of erealloc to handle heap growth for the SplHeap::insert method to avoid possible overflows. (David Carlier)

- Standard:
. Fixed the crypt_sha256/512 api build with clang > 12. (David Carlier)
. Uses safe_erealloc instead of erealloc to handle options in getopt to avoid possible overflows. (David Carlier)

- Zip:
. Implement fseek for zip stream when possible with libzip 1.9.1. (Remi)