Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: php/php-src
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: master
Choose a base ref
...
head repository: php/php-src
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: PHP-8.5.1
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 13 commits
  • 29 files changed
  • 9 contributors

Commits on Dec 9, 2025

  1. Fix GH-20603 issue on windows 32 bits. 

    the timeout needed to be unsigned.

close GH-20634
    @devnexen @edorian
    devnexen authored and edorian committed Dec 9, 2025
    Configuration menu
    Copy the full SHA
    671f95e View commit details
    Browse the repository at this point in the history

  2. uri: Update to uriparser-0.9.9-79-gf47a7f0 (#20671) 

    This is in preparation of importing a fix for the uriparser/uriparser#282
security issue, which will likely depend on this refactoring to cleanly apply.
    @TimWolla @edorian
    TimWolla authored and edorian committed Dec 9, 2025
    Configuration menu
    Copy the full SHA
    3ae61e4 View commit details
    Browse the repository at this point in the history

  3. Fix GH-20553: PDO::FETCH_CLASSTYPE ignores $constructorArgs in PHP 8.5.0 

    We must assign the ctor_arguments regardless of modes.
This regression was introduced during the refactoring of PDO's internals

Closes GH-20595
    @Girgias @edorian
    Girgias authored and edorian committed Dec 9, 2025
    Configuration menu
    Copy the full SHA
    b9d7268 View commit details
    Browse the repository at this point in the history

  4. Update news after cherry-picks

    @edorian
    edorian committed Dec 9, 2025
    Configuration menu
    Copy the full SHA
    eb617f3 View commit details
    Browse the repository at this point in the history

Commits on Dec 12, 2025

  1. Fix GHSA-8xr5-qppj-gvwj: PDO quoting result null deref

    @bukka
    bukka committed Dec 12, 2025
    Configuration menu
    Copy the full SHA
    501b15e View commit details
    Browse the repository at this point in the history

Commits on Dec 14, 2025

  1. Fix GHSA-h96m-rvf9-jgm2

    @ndossche
    ndossche committed Dec 14, 2025
    Configuration menu
    Copy the full SHA
    a7f2a15 View commit details
    Browse the repository at this point in the history

  2. Fix GHSA-www2-q4fc-65wf

    @ndossche
    ndossche committed Dec 14, 2025
    Configuration menu
    Copy the full SHA
    6ba8313 View commit details
    Browse the repository at this point in the history

  3. Update NEWS with info about security issues

    @bukka @ndossche
    bukka authored and ndossche committed Dec 14, 2025
    Configuration menu
    Copy the full SHA
    9f903fb View commit details
    Browse the repository at this point in the history

  4. Suppress libxml deprecations 

    Closes GH-20538
    @iluuu1994 @ndossche
    iluuu1994 authored and ndossche committed Dec 14, 2025
    Configuration menu
    Copy the full SHA
    1754cdc View commit details
    Browse the repository at this point in the history

  5. intl: Fix tests for icu update

    @ndossche
    ndossche committed Dec 14, 2025
    Configuration menu
    Copy the full SHA
    b8b7add View commit details
    Browse the repository at this point in the history

Commits on Dec 15, 2025

  1. uri: Update to uriparser-0.9.9-85-g9a31011 (#20707) 

    This is specifically to import uriparser/uriparser#284 to fix CVE-2025-67899.

(cherry picked from commit 284e202)
    @TimWolla @edorian
    TimWolla authored and edorian committed Dec 15, 2025
    Configuration menu
    Copy the full SHA
    631b364 View commit details
    Browse the repository at this point in the history

Commits on Dec 16, 2025

  1. Merge remote-tracking branch 'security/PHP-8.5.1-security' into PHP-8… 

    ….5.1

* security/PHP-8.5.1-security:
  intl: Fix tests for icu update
  Suppress libxml deprecations
  Update NEWS with info about security issues
  Fix GHSA-www2-q4fc-65wf
  Fix GHSA-h96m-rvf9-jgm2
  Fix GHSA-8xr5-qppj-gvwj: PDO quoting result null deref
    @edorian
    edorian committed Dec 16, 2025
    Configuration menu
    Copy the full SHA
    d469621 View commit details
    Browse the repository at this point in the history

  2. Update NEWS

    @edorian
    edorian committed Dec 16, 2025
    Configuration menu
    Copy the full SHA
    346fc95 View commit details
    Browse the repository at this point in the history
Loading