intl extension, build fix for icu >= 69.x release. ubrk/ucnv_safeClone had been deprecated in favor of ubrk/ucnv_clone which does not use user provided stacks but remain thread safe.

FPM: Fix possible double free on configuration load failure.

Closes #8948.

[ci skip] drop NEWS entry for reverted fix

Abort LMDB transaction whe trying to delete non-existing key

Fix the crypt sha apis build (with recent clang versions).

Removing the said subtraction by casting instead.
While at it fixing werror level on phpdbg too.

Closes #8897.

Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file)

FPM: zlog, fix free on wrong address for message prepend.

Fixed #80047: DatePeriod doesn't warn with custom DateTimeImmutable

Fix GH-8848: imagecopyresized() error refers to the wrong argument

Closes GH-8849.

Prepare for 8.0.22

Fix GH-8827: Intentionally closing std handles no longer possible

We revert the commits which caused this regression from the PHP-8.0 and
PHP-8.1 branches for now. We keep it in "master

Fix GH-8827: Intentionally closing std handles no longer possible

We revert the commits which caused this regression from the PHP-8.0 and
PHP-8.1 branches for now. We keep it in "master" because of PR #8833
which may offer a proper fix without BC break.

show more ...

Fix GH-8563 Different results for seek() on SplFileObject and SplTempFileObject

With memory streams if we get a NULL buffer we must not instantiate an empty line

Fix potential use after free in php_binary_init()

Closes GH-8791.

Fix bug #67764: fpm: syslog.ident does not work

Fix GH-8778: Integer arithmethic with large number variants fails

When casting a `variant` to `int`, we need to heed the proper `zval`
type, which is an signed 64bit integer on x64, whil

Fix GH-8778: Integer arithmethic with large number variants fails

When casting a `variant` to `int`, we need to heed the proper `zval`
type, which is an signed 64bit integer on x64, while `VT_INT` is only
a signed 32bit integer.

Closes GH-8779.

show more ...

Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.

Merge remote-tracking branch 'derickr/bug77342' into PHP-8.0

FPM: Fix use after free in `fpm_evaluate_full_path`
Closes #8796.

NEWS

Fix handling of single-key connection strings

A connection string may contain just a single key, but
PHP used ";" as the heuristic to detect if a string was a connection
string versu

Fix handling of single-key connection strings

A connection string may contain just a single key, but
PHP used ";" as the heuristic to detect if a string was a connection
string versus plain DSN. However, a single-key connection string
would get treated like a DSN name, i.e. "DSN=*LOCAL". This makes it
so that "=" is used, as a connection string must contain a key.

Closes GH-8748.

show more ...

[ci skip] missing CVE

Fix bug #50293 and #81713: file path checking in OpenSSL functions

It introduces a single function to check file paths passed to OpenSSL
functions. It expands the path, check null bytes

Fix bug #50293 and #81713: file path checking in OpenSSL functions

It introduces a single function to check file paths passed to OpenSSL
functions. It expands the path, check null bytes and finally does
an open basedir check.

show more ...

NEWS for GH-8685

Closes GH-8626: Fix PDOStatement->execute() failed.
Then execute successfully, errorInfo() information is incorrect

Fixed bug #78139 (timezone_open accepts invalid timezone string argument).