Software 42750 Published by

Ben Ramsey has announced the release of PHP 8.1.22.



php-8.1.22

- Build:
. Fixed bug GH-11522 (PHP version check fails with '-' separator).
(SVGAnimate)

- CLI:
. Fix interrupted CLI output causing the process to exit. (nielsdos)

- Core:
. Fixed oss-fuzz #60011 (Mis-compilation of by-reference nullsafe operator).
(ilutov)
. Fixed use-of-uninitialized-value with ??= on assert. (ilutov)
. Fixed build for FreeBSD before the 11.0 releases. (David Carlier)

- Curl:
. Fix crash when an invalid callback function is passed to
CURLMOPT_PUSHFUNCTION. (nielsdos)

- Date:
. Fixed bug GH-11368 (Date modify returns invalid datetime). (Derick)

- DOM:
. Fixed bug GH-11625 (DOMElement::replaceWith() doesn't replace node with
DOMDocumentFragment but just deletes node or causes wrapping <></>
depending on libxml2 version). (nielsdos)

- Fileinfo:
. Fixed bug GH-11298 (finfo returns wrong mime type for xz files). (Anatol)

- FTP:
. Fix context option check for "overwrite". (JonasQuinten)
. Fixed bug GH-10562 (Memory leak and invalid state with consecutive
ftp_nb_fget). (nielsdos)

- GD:
. Fix most of the external libgd test failures. (Michael Orlitzky)

- Hash:
. Fix use-of-uninitialized-value in hash_pbkdf2(), fix missing $options
parameter in signature. (ilutov)

- Intl:
. Fix memory leak in MessageFormatter::format() on failure. (Girgias)

- Libxml:
. Fixed bug GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading
in XML without enabling it). (CVE-2023-3823) (nielsdos, ilutov)

- MBString:
. Fix GH-11300 (license issue: restricted unicode license headers).
(nielsdos)

- Opcache:
. Fixed bug GH-10914 (OPCache with Enum and Callback functions results in
segmentation fault). (nielsdos)
. Prevent potential deadlock if accelerated globals cannot be allocated.
(nielsdos)

- PCNTL:
. Fixed bug GH-11498 (SIGCHLD is not always returned from proc_open).
(nielsdos)

- PCRE:
. Mangle PCRE regex cache key with JIT option. (mvorisek)

- PDO:
. Fix GH-11587 (After php8.1, when PDO::ATTR_EMULATE_PREPARES is true
and PDO::ATTR_STRINGIFY_FETCHES is true, decimal zeros are no longer
filled). (SakiTakamachi)

- PDO SQLite:
. Fix GH-11492 (Make test failure: ext/pdo_sqlite/tests/bug_42589.phpt).
(KapitanOczywisty, CViniciusSDias)

- Phar:
. Add missing check on EVP_VerifyUpdate() in phar util. (nielsdos)
. Fixed bug GHSA-jqcx-ccgc-xwhv (Buffer mismanagement in phar_dir_read()).
(CVE-2023-3824) (nielsdos)

- PHPDBG:
. Fixed bug GH-9669 (phpdbg -h options doesn't list the -z option). (adsr)

- Session:
. Removed broken url support for transferring session ID. (ilutov)

- Standard:
. Fix serialization of RC1 objects appearing in object graph twice. (ilutov)

- SQLite3:
. Fix replaced error handling in SQLite3Stmt::__construct. (nielsdos)



Release php-8.1.22 · php/php-src