| # |
subject |
author |
date |
lines |
| 253159 |
[php-src] Issue #24648: Change session.upload_progress.enabled from default-on to default-off |
Sainan |
Sat, 24 Oct 2026 14:46:27 +0000 |
7 |
| 253160 |
[php-src] Issue #24649: applying PHP-8.1-CVE-2026-109618-109619 triggers regeneration of Zend files |
BjarneDMat |
Sat, 24 Oct 2026 14:50:55 +0000 |
38 |
| 253161 |
[php-src] Issue #24649: applying PHP-8.1-CVE-2026-109618-109619 triggers regeneration of Zend files |
iluuu1994 |
Sat, 24 Oct 2026 15:32:15 +0000 |
4 |
| 253162 |
[php-src] Issue #24657: Log Security-Relevant Request Rejections and Mitigated Exploit Attempts |
hackerfactor |
Sat, 24 Oct 2026 16:28:36 +0000 |
52 |
| 253163 |
[php-src] Issue #24641: ext/dba: ndbm backend never checks dbm_open() return value, NULL deref on first use after a failed open |
Girgias |
Sat, 24 Oct 2026 16:44:16 +0000 |
4 |
| 253164 |
[php-src] Issue #24661: FPM: pools with different disable_functions sharing one opcache run scripts wrongly (var_export() calls var_dump(), SIGSEGV in... |
Enfiladeguide |
Sat, 24 Oct 2026 18:58:39 +0000 |
153 |
| 253165 |
[php-src] Issue #23346: PHP 8.5.9 OPcache executes wrong internal functions (number format → dechex, acos → hypot) under PHP-FPM |
ndossche |
Sat, 24 Oct 2026 20:45:50 +0000 |
4 |
| 253166 |
[php-src] Issue #24549: I may have found a problem in PHP |
iliaal |
Sat, 24 Oct 2026 22:24:50 +0000 |
4 |
| 253167 |
[php-src] Issue #24667: zend_hash_iterator_pos_ex() calls zend_hash_iterator_pos() without _ex in fallback path |
yasu20200121web-prog |
Sun, 25 Oct 2026 03:40:16 +0000 |
30 |
| 253168 |
[php-src] Issue #24668: [PHP-8.4] Fixed-size 2048-byte stack buffer truncation for Auth-User in php_security_log() / SAPI auth handling |
yasu20200121web-prog |
Sun, 25 Oct 2026 03:42:31 +0000 |
46 |
| 253169 |
[php-src] Issue #24669: Surfacing security issues with OpenBSD as part of the CI with hardened memory allocator |
loganaden |
Sun, 25 Oct 2026 05:32:52 +0000 |
14 |
| 253170 |
[php-src] Issue #24672: var_destroy() destructor re-entry UAF survives the 2026-10 security fixes (stock 8.3.36 / 8.4.27) |
srayuth089 |
Sun, 25 Oct 2026 08:32:02 +0000 |
26 |
| 253171 |
[php-src] Issue #24672: var_destroy() destructor re-entry UAF survives the 2026-10 security fixes (stock 8.3.36 / 8.4.27) |
srayuth089 |
Sun, 25 Oct 2026 08:46:39 +0000 |
4 |
| 253172 |
[php-src] Issue #24674: var destroy() UAF also reachable through SplObjectStorage:: unserialize() — separate entry point from #24481 |
srayuth089 |
Sun, 25 Oct 2026 10:05:46 +0000 |
92 |
| 253173 |
[php-src] Issue #24667: Typo in zend_hash_iterator_pos_ex() checks !HT_ITERATORS_OVERFLOW(ht) instead of !HT_ITERATORS_OVERFLOW(iter->ht) |
ndossche |
Sun, 25 Oct 2026 10:25:28 +0000 |
4 |
| 253174 |
[php-src] Issue #24675: JIT: function with >~1.7 MB of machine code corrupts JIT buffer accounting; next compilation crashes (SIGBUS on arm64) |
ChrisOrlando |
Sun, 25 Oct 2026 10:28:54 +0000 |
74 |
| 253175 |
[php-src] Issue #24315: Harden SoapClient cross-origin redirect handling |
iliaal |
Sun, 25 Oct 2026 11:01:09 +0000 |
4 |
| 253176 |
[php-src] Issue #24678: Tracing JIT with opcache.jit_max_polymorphic_calls=0: local variable undefined after a call in a side trace |
ChrisOrlando |
Sun, 25 Oct 2026 11:09:22 +0000 |
91 |
| 253177 |
[php-src] Issue #24680: OPcache JIT: IR context (malloc) is not freed when zend_bailout() is taken during compilation |
matyapiro31 |
Sun, 25 Oct 2026 11:27:51 +0000 |
208 |
| 253178 |
[php-src] Issue #24264: Unwind/GracefulExit discarded in spl_iterators.c |
ndossche |
Sun, 25 Oct 2026 11:52:41 +0000 |
4 |