PHP8.0.1

Core:

• PHPIZE configuration has outdated PHP_RELEASE_VERSION
• White space not unfolded for CC/Bcc headers
• Iterable not covariant to mixed
• Build of PHP extension fails due to configuration gap with libtool
• Stream filter loses final block of data

Fileinfo:

• Finfo_open crafted magic parsing SIGABRT

FPM:

• FPM returns 200 status on request without SCRIPT_FILENAME env

IMAP:

• Imap_msgno() incorrectly warns and return false on valid UIDs in PHP 8
• Fix a regression with valid UIDs in imap_savebody(
• Make warnings for invalid message numbers/UIDs between functions consistent.

Intl:

• MessageFormatAdapter::getArgTypeList redefined

Opcache:

• Incorrect range inference result when division results in float
• Opcache misses executor_globals
• Unable to disable the use of the AVX command when using JIT
• Strange out of memory error when running with JIT
• Segmentation fault with JIT enabled
• Immediate SIGSEGV upon ini_set("opcache.jit_debug", 1)

OpenSSL:

• OpenSSL extension fails to build against LibreSSL due to lack of OCB support

PDO MySQL:

• PDOStatement::fetchAll() throws for upsert queries
• NextRowset() ignores MySQL errors with native prepared statements
• PDO::exec() - Bad error handling with multiple commands
• Multiple rowsets not returned unless PDO statement object is unset()
• Unexpected "Cannot execute queries while other unbuffered queries"
• Multiple statements in init command triggers unbuffered query error
• PDOStatement cannot be GCed/closeCursor-ed when a PROCEDURE resultset SIGNAL
• Can't execute query with pending result sets
• PDO does not throw an exception when parameter values are missing
• PdoStatement->execute() fails but does not throw an exception
• LOAD DATA INFILE broken
• Executing PDOStatement::fetch() more than once prevents releasing resultset
• PDO re-uses parameter values from earlier calls to execute()

Phar:

• Phar Zip parse crash - mmap fail
• `PharData` says invalid checksum for valid tar
• PharData::addEmptyDir('/') Possible integer overflow

Phpdbg:

• Access violation near NULL on source operand

SPL:

• SplFileObject: fgets after seek returns wrong line

Standard:

• Return Value of zend_fstat() not Checked
• FILTER_VALIDATE_URL accepts URLs with invalid userinfo (CVE-2020-7071)

Tidy:

• Ob_tidyhandler is never reset

Tokenizer:

• Nullsafe operator tokenize with TOKEN_PARSE flag fails

XML

• XmlParser opaque object renamed to XMLParser for consistency with other XML objects.

Zlib:

• Support for flushing in zlib stream