ZendPHP Release Notes

Community Fixes for ZendPHP 8.2.4

• Core
  • Fixed incorrect check condition in ZEND_YIELD.
  • Fixed incorrect check condition in type inference.
  • Fix incorrect check in zend_internal_call_should_throw().
  • Fixed overflow check in OnUpdateMemoryConsumption.
  • Fixed

Version 8.2.3 Community Fixes

• Core
  • Fixed bug #81744: password_verify() always return true with some hashes. (CVE-2023-0567)
  • Fixed bug #81746: 1-byte array overrun in common path resolve code. (CVE-2023-0568)
• FPM
  • Fixed bug GHSA-54hq-v5wp-fqgv: DOS

Added

• ARM Support now available for ZendHQ, and for ZendPHP 7.2 and up.
  • All Docker images available via our container registry now include additional tags providing ARM variants.
• ZendPHP versions 7.4.33.1, 7.3.33.5, 7.2.34.13, and 7.1.33.17

Version 8

Added

ZendPHP runtimes for Debian 11 and Ubuntu 2022.04 are now available.

Updated

• Updated container registry to provide images supporting each version for supported ZendPHP versions
• Updated container registry to provide images supporting each operating

Community Fixes for ZendPHP 8.1.12

• Core

  • Fixes segfault with Fiber on FreeBSD i386 architecture.

• Fileinfo

  • Fixed bug GH-8805: finfo returns wrong mime type for woff/woff2 files.

• GD

  • Fixed bug #81739: OOB read due to insufficient input validation