ZendPHP Release Notes

Version 8.2.3 Community Fixes

• Core
  • Fixed bug #81744: password_verify() always return true with some hashes. (CVE-2023-0567)
  • Fixed bug #81746: 1-byte array overrun in common path resolve code. (CVE-2023-0568)
• FPM
  • Fixed bug GHSA-54hq-v5wp-fqgv: DOS

Added

• ARM Support now available for ZendHQ, and for ZendPHP 7.2 and up.
  • All Docker images available via our container registry now include additional tags providing ARM variants.
• ZendPHP versions 7.4.33.1, 7.3.33.5, 7.2.34.13, and 7.1.33.17

Version 8

Added

ZendPHP runtimes for Debian 11 and Ubuntu 2022.04 are now available.

Updated

• Updated container registry to provide images supporting each version for supported ZendPHP versions
• Updated container registry to provide images supporting each operating

Community Fixes for ZendPHP 8.1.12

• Core

  • Fixes segfault with Fiber on FreeBSD i386 architecture.

• Fileinfo

  • Fixed bug GH-8805: finfo returns wrong mime type for woff/woff2 files.

• GD

  • Fixed bug #81739: OOB read due to insufficient input validation

ZendPHP for Windows is the first commercial distribution of PHP. With this release, we provide up-to-date binaries of current community-supported PHP versions (currently 7.4, 8.0, and 8.1).

Additionally, we provide the first long term support (LTS)