Repository navigation

Php 8.1 security backport - #1

Draft

andypost wants to merge 7 commits into

PHP-8.1-security-backport

Draft

Php 8.1 security backport#1
andypost wants to merge 7 commits into
PHP-8.1from
PHP-8.1-security-backport

Commits on May 5, 2026
- GHSA-m8rr-4c36-8gq4: Consistently pass unsigned char to ctype.h functions
  
  iluuu1994
  authored and
  andypost
  committed
  759d119
- GHSA-96wq-48vp-hh57: [metaphone] Fix signed integer overflow of char array offset
  
  TimWolla
  authored and
  andypost
  committed
  c47c672
- GHSA-wm6j-2649-pv75: [mbstring] Fix null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
  
  vi3tL0u1s
  authored and
  andypost
  committed
  b980dcb
- GHSA-7qg2-v9fj-4mwv: [fpm] XSS within status endpoint
  
  bukka
  authored and
  andypost
  committed
  2e66696
- GHSA-hmxp-6pc4-f3vv: [soap] Fix broken Apache map value NULL check
  
  iluuu1994
  authored and
  andypost
  committed
  82c2b4c
- GHSA-m33r-qmcv-p97q: [soap] Fix use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
  
  iluuu1994
  authored and
  andypost
  committed
  e3ee67e
- GHSA-85c2-q967-79q5: [soap] Fix stale SOAP_GLOBAL(ref_map) pointer with Apache Map
  
  iluuu1994
  authored and
  andypost
  committed
  3441ffc