Fedora 42: PHP 8.4.16 Major Fixes for Heap Overflow and Information Leak

PHP is an HTML-embedded scripting language. PHP attempts to make it

easy for developers to write dynamically generated web pages. PHP also

offers built-in database integration for several commercial and

non-commercial database management systems, so writing a

database-enabled webpage with PHP is fairly simple. The most common

use of PHP coding is probably as a replacement for CGI scripts.

PHP version 8.4.16 (18 Dec 2025) Core: Sync all boost.context files with release 1.86.0. (mvorisek) Fixed bug GH-20435 (SensitiveParameter doesn't work for named argument passing to variadic parameter). (ndossche) Fixed bug GH-20286 (use-after-destroy during userland stream_close()). (ndossche, David Carlier) Bz2: Fix assertion failures resulting in crashes with stream filter object parameters. (ndossche) Date: Fix crashes when trying to instantiate uninstantiable classes via date static constructors. (ndossche) DOM: Fix memory leak when edge case is hit when registering xpath callback. (ndossche) Fixed bug GH-20395 (querySelector and querySelectorAll requires elements in $selectors to be lowercase). (ndossche) Fix missing NUL byte check on C14NFile(). (ndossche) Fibers: Fixed bug GH-20483 (ASAN stack overflow with fiber.stack_size INI small value). (David Carlier) FTP: Fixed bug GH-20601 (ftp_connect overflow on timeout). (David Carlier) GD: Fixed bug GH-20...