PHP

This is a PHP module for the Apache Web server included in OS X. PHP is a server-side, cross-platform scripting language. PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML.

Bug fixes

Core:

• #77589 (Core dump using parse_ini_string with numeric sections).
• #77329 (Buffer Overflow via overly long Error Messages).
• #77494 (Disabling class causes segfault on member access).
• #77498 (Custom extension Segmentation fault when declare static property).
• #77530 (PHP crashes when parsing `(2)::class`).
• #77546 (iptcembed broken function).
• #77630 (rename() across the device may allow unwanted access during processing).

COM:

• #77621 (Already defined constants are not properly reported).
• #77626 (Persistence confusion in php_com_import_typelib()).

EXIF:

• #77509 (Uninitialized read in exif_process_IFD_in_TIFF).
• #77540 (Invalid Read on exif_process_SOFn).
• #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).
• #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE).

Mbstring:

• #77514 (mb_ereg_replace() with trailing backslash adds null byte).

MySQL:

• Disabled LOCAL INFILE by default, can be enabled using php.ini directive mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE attribute for pdo_mysql.

OpenSSL:

• #77390 (feof might hang on TLS streams in case of fragmented TLS records).

PDO_OCI:

• Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO, and CLIENT_IDENTIFIER.

PHAR:

• #77396 (Null Pointer Dereference in phar_create_or_parse_filename).
• #77586 (phar_tar_writeheaders_int() buffer overflow).

phpdbg:

• #76596 (phpdbg support for display_errors=stderr).

SPL:

• #51068 (DirectoryIterator glob:// don't support current path relative queries).
• #77431 (openFile() silently truncates after a null byte).

Standard:

• #77552 (Unintialized php_stream_statbuf in stat functions).
• #77612 (setcookie() sets incorrect SameSite header if all of its options filled).