The PHP development team announces the immediate availability of PHP
8.4.16. This is a security release.
All PHP 8.4 users are encouraged to upgrade to this version.
For source downloads of PHP 8.4.16 please visit our downloads page.
Windows binaries can be found on the PHP for Windows site.
The list of changes is recorded in the ChangeLog.
Release Announcement: https://php.net/releases/8_4_16.php
Downloads: https://php.net/downloads
Windows downloads: https://www.php.net/downloads.php?os=windows&version=8.4
Changelog: https://php.net/ChangeLog-8.php#8.4.16
Release Manifest: https://gist.github.com/SakiTakamachi/e3adaac8c64126665714c282a6d1f939
Many thanks to all the contributors and supporters!
Regards,
Saki Takamachi, Calvin Buckley, and Eric Mann
php-8.4.16.tar.bz2
SHA256 hash: 6c48c65eba6a2f7a102925d08772239b1f45110aed2187fdd81b933ed439c692
PGP signature:
-----BEGIN PGP SIGNATURE-----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=Fr0J
-----END PGP SIGNATURE-----
php-8.4.16.tar.gz
SHA256 hash: 8e35d24f148ea7c2a93e9b9bcc329e8bf78b5bb922f3723a727c74c19d184e98
PGP signature:
-----BEGIN PGP SIGNATURE-----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=dqna
-----END PGP SIGNATURE-----
php-8.4.16.tar.xz
SHA256 hash: f66f8f48db34e9e29f7bfd6901178e9cf4a1b163e6e497716dfcb8f88bcfae30
PGP signature:
-----BEGIN PGP SIGNATURE-----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=LDlD
-----END PGP SIGNATURE
The PHP development team announces the immediate availability of PHP
8.4.16. This is a security release.
In the git repository, there are some oddities with the patch-level branch
PHP-8.4.16 used for the corresponding release: It contains a
cherry-picked commit cbb854f0260 that did not make into the actual
release (tag php-8.4.16), and consequently, the release tag does not
contain the patch-level branch, which normally does (or should).
- | | | 51f4450b47d Merge branch 'PHP-8.3' into PHP-8.4
|\ \ \
| |/ / /
| * | | ff51ac161d6 Fix GH-20603 issue on windows 32 bits. - | | | baf193fc0de Merge branch 'PHP-8.3' into PHP-8.4
|\ \ \
| |/ / /
| * | | 0106134bb92 Merge branch 'PHP-8.2' into PHP-8.3
| |\ \
| | |/ /
| | * | fe070fcc756 Fix yet another xml deprecation - | | | 2ec8c29fda7 PHP-8.4 is now for PHP 8.4.17-dev
| | | | * 2890cbbc494 (tag: php-8.4.16) Update versions for PHP 8.4.16
| | | | * 769a8807d99 Update NEWS with info about security issues
| | | | * 7ac9c40f67e Fix GHSA-www2-q4fc-65wf
| | | | * e6d7d34c1ae Fix GHSA-h96m-rvf9-jgm2
| | | | * d521259e442 Fix GHSA-8xr5-qppj-gvwj: PDO quoting result null deref
| |||/
|/| | |
| | | | * cbb854f0260 (upstream/PHP-8.4.16) Fix GH-20603 issue on windows
32 bits. <<---
| |||/
|/| | | - | | | 78e3d05d7de Merge branch 'PHP-8.3' into PHP-8.4 <<---
I believe the PHP-8.4.16 branch should be force-pushed to 78e3d05d7de,
which is the most common ancestor with PHP-8.4, or to 7ac9c40f67e if
you wish to include the security patches, but definitely not to
cbb854f0260 as that commit is not in the released tarballs! (this caused
some oddities in my setup as I usually merge the patch branch with the tag
in my local repository).