| # |
subject |
author |
date |
lines |
| 39674 |
[php-src] PR #24502: Security: Implement Defense-in-Depth Hardening for CVE-2026-109618 & CVE-2026-109619 (PHP2Shell) |
jorgsowa |
Wed, 21 Oct 2026 19:29:30 +0000 |
4 |
| 39675 |
[php-src] PR #24503: Add gd.png_ignore_warning INI setting |
cgsmith |
Wed, 21 Oct 2026 20:11:59 +0000 |
24 |
| 39676 |
[php-src] PR #24507: Fix stream error operation leak in stream_select() |
azjezz |
Wed, 21 Oct 2026 20:33:58 +0000 |
7 |
| 39677 |
[php-src] PR #24500: [7.1] Backport CVE-2026-109618 and CVE-2026-109619 mitigation |
kallesommernielsen |
Wed, 21 Oct 2026 20:49:12 +0000 |
4 |
| 39678 |
[php-src] PR #24510: Fix GH-11709: Line breaks in quoted strings fail with INI_SCANNER_RAW |
cgsmith |
Wed, 21 Oct 2026 21:19:19 +0000 |
29 |
| 39679 |
[php-src] PR #24511: JIT: Fix use-after-free in ASSIGN_DIM_OP with CONCAT |
jorgsowa |
Wed, 21 Oct 2026 21:19:54 +0000 |
5 |
| 39680 |
[php-src] PR #24512: Fix GH-24509: HTTP wrapper leaks Location buffer on empty Location header |
bercedev |
Wed, 21 Oct 2026 21:37:02 +0000 |
18 |
| 39681 |
[php-src] PR #24513: Fix GH-24508: HTTP wrapper leaks dechunk filter when header parsing fails |
bercedev |
Wed, 21 Oct 2026 21:39:00 +0000 |
18 |
| 39682 |
[php-src] PR #24514: Fix GH-10460: allow_url_include warning missing for php://filter inner URL |
cgsmith |
Wed, 21 Oct 2026 21:47:47 +0000 |
12 |
| 39683 |
[php-src] PR #24515: Fix gh 24497 hard limit default |
theworker02 |
Wed, 21 Oct 2026 22:13:55 +0000 |
40 |
| 39684 |
[php-src] PR #24516: ext/xml: Make Expat allocators fallible |
rmetzler |
Wed, 21 Oct 2026 22:31:11 +0000 |
20 |
| 39685 |
[php-src] PR #24520: Fix GH-24491: Static method stream error handler replaces pending exception |
lazerg |
Thu, 22 Oct 2026 01:21:22 +0000 |
9 |
| 39686 |
[php-src] PR #24521: Fix GH-24493: Upload progress destroys session on reserved property names |
lazerg |
Thu, 22 Oct 2026 01:22:04 +0000 |
9 |
| 39687 |
[php-src] PR #24522: Fix GH-24489: Restore mbstring buffer growth fix lost in merge |
lazerg |
Thu, 22 Oct 2026 01:24:02 +0000 |
7 |
| 39688 |
[php-src] PR #23514: [RFC] ext/intl: Implement `IntlRelativeDateTimeFormatter` |
LamentXU123 |
Thu, 22 Oct 2026 01:47:04 +0000 |
4 |
| 39689 |
[php-src] PR #24524: Fix GH-24523: UAF in zend_test_compile_to_ast() on parse error |
lazerg |
Thu, 22 Oct 2026 04:30:00 +0000 |
7 |
| 39690 |
[php-src] PR #24526: JIT: Fix reading packed-turned-hash array as packed after string key write |
jorgsowa |
Thu, 22 Oct 2026 07:54:49 +0000 |
5 |
| 39691 |
[php-src] PR #24402: JIT: Fix function JIT level 1 crash on FETCH_OBJ_FUNC_ARG of a hooked property |
ndossche |
Thu, 22 Oct 2026 08:48:01 +0000 |
4 |
| 39692 |
[php-src] PR #24456: JIT: Fix TLS access with SHM reattachment (8.6 follow-up) |
arnaud-lb |
Thu, 22 Oct 2026 09:43:08 +0000 |
4 |
| 39693 |
[php-src] PR #24528: ext/opcache: Fix tracing JIT range narrowing against a non-integer operand |
iliaal |
Thu, 22 Oct 2026 10:14:21 +0000 |
5 |