PHP-8.1 is now for PHP 8.1.31-dev

[skip ci] Fix typo in NEWS

Co-authored-by: Niels Dossche <7771979+nielsdos@users.noreply.github.com>

Update NEWS with security fixes info

PHP-8.1 is now for PHP 8.1.30-dev

Update NEWS

Co-authored-by: Eric Mann <ericmann@php.net>

PHP-8.1 is now for PHP 8.1.29-dev

Update NEWS

PHP-8.1 is now for PHP 8.1.28-dev

(If released one day!)

Fix bug GH-12705: Segmentation fault in fpm_status_export_to_zval

Closes GH-12706

Fix phpGH-12763: PGSQL pg_untrace(): Argument #1 ($connection) must be of type resource or null, PgSql\Connection given.

Avoid using uninitialised struct

Closes GH-12046.

Add NEWS entry for GH-12768

Fix in-place modification of filename in php_message_handler_for_zend

php_strip_url_passwd modifies url in-place. We cannot assume from
php_message_handler_for_zend that data is a tempor

Fix in-place modification of filename in php_message_handler_for_zend

php_strip_url_passwd modifies url in-place. We cannot assume from
php_message_handler_for_zend that data is a temporary, modifiable string.

Fixes oss-fuzz #64209
Closes GH-12733

show more ...

Fix use-after-free of name in var-var with malicious error handler

Fixes oss-fuzz #54325
Closes GH-12732

Fix #50713: openssl_pkcs7_verify() may ignore untrusted CAs

Closes GH-12499

Fix GH-12616: DOM: Removing XMLNS namespace node results in invalid default: prefix

The namespace data is freed and set to NULL, but there remain references
to the namespace declaration

Fix GH-12616: DOM: Removing XMLNS namespace node results in invalid default: prefix

The namespace data is freed and set to NULL, but there remain references
to the namespace declaration nodes. This (rightfully) confuses libxml2
because its invariants are broken. We also have to remove all remaining
references from the subtree. This fixes the data corruption bug.

Closes GH-12681.

show more ...

Fix GH-12702: libxml2 2.12.0 issue building from src

Fixes GH-12702.

Co-authored-by: nono303 <github@nono303.net>

Fix bug #79945: Stream wrappers in imagecreatefrompng causes segfault

Closes GH-12696

Fix GH-12675: MEMORY_LEAK in phpdbg_prompt.c

Have to use file_put_contents() instead of --FILE-- because we have to
actually load it using the exec command, *and* have to make multiple

Fix GH-12675: MEMORY_LEAK in phpdbg_prompt.c

Have to use file_put_contents() instead of --FILE-- because we have to
actually load it using the exec command, *and* have to make multiple
files, and note that we can only load files relative from the current
directory, so we can't rely on files being in the sapi/phpdbg/tests
folder.

Closes GH-12680.

show more ...

Fix GH-12655: proc_open() does not take into account references in the descriptor array

Closes GH-12658.

Fix GH-12621: browscap segmentation fault when configured in the vhost

The temporary HashTable has a destructor that releases the string held
by the entry's value. However, browscap_inte

Fix GH-12621: browscap segmentation fault when configured in the vhost

The temporary HashTable has a destructor that releases the string held
by the entry's value. However, browscap_intern_str(_ci) only incremented
the refcount for the reference created by the return value. As the
HashTable is only used during parsing, we don't need to manage the
reference count of the value anyway, so get rid of the destructor.

This is triggerable in two cases:
- When using php_admin_value to set the ini at the activation stage
- When running out of space for the opcache-interned strings

Closes GH-12634.

show more ...

Fix GH-12635: Test bug69398.phpt fails with ICU 74.1

ICU 74.1 contains new locale data that breaks the test.
Split the test based on the version number to resolve the issue.

Clo

Fix GH-12635: Test bug69398.phpt fails with ICU 74.1

ICU 74.1 contains new locale data that breaks the test.
Split the test based on the version number to resolve the issue.

Closes GH-12653.

show more ...

NEWS

Fix GH-12633: sqlite3_defensive.phpt fails with sqlite 3.44.0

Removes 'PRAGMA writable_schema;'.

From sqlite changelog https://www.sqlite.org/releaselog/3_44_0.html:
> The SQLIT

Fix GH-12633: sqlite3_defensive.phpt fails with sqlite 3.44.0

Removes 'PRAGMA writable_schema;'.

From sqlite changelog https://www.sqlite.org/releaselog/3_44_0.html:
> The SQLITE_DBCONFIG_DEFENSIVE setting now prevents PRAGMA writable_schema
> from being turned on.
> Previously writable_schema could be turned on, but would not actually allow
> the schema to be writable. Now it simply cannot be turned on.

Closes GH-12636.

show more ...

Fix GH-12628: The gh11374 test fails on Alpinelinux

Closes GH-12636.