Issues

• Allow Closure interface

  FeatureStatus: Requires RFC
  php/php-src#24703 · Filter by author mvorisek opened on Oct 25, 2026

• opcache.preload: use-after-free on class-typed trait constants (missing type addref in zend_do_traits_constant_binding)

  php/php-src#24701 · Filter by author sanklamm opened on Oct 25, 2026

• sapi/cli: PHP_HTTP_PARSER_STRICT is defined but never referenced, so STRICT_CHECK() is always a no-op

  BugStatus: Needs Triage
  php/php-src#24697 · Filter by author akku1139 opened on Oct 25, 2026

• sapi/fpm/tests/tester.inc can send SIGUSR2 to pid 0, killing run-tests.php

  BugStatus: Needs Triage
  php/php-src#24695 · Filter by author Bill-Sommerfeld opened on Oct 25, 2026

• Tracing JIT: interpreter loop gives different results than without the JIT

  php/php-src#24691 · Filter by author ChrisOrlando opened on Oct 25, 2026

• PHP-FPM: PHP_VALUE settings persist across requests

  BugStatus: Needs Triage
  php/php-src#24689 · Filter by author ultravistor opened on Oct 25, 2026
  3

• Tracing JIT: local keeps a stale constant after a trace links into a loop trace

  php/php-src#24683 · Filter by author ChrisOrlando opened on Oct 25, 2026
  1

• OPcache JIT: IR context (malloc) is not freed when zend_bailout() is taken during compilation

  BugStatus: Needs Triage
  php/php-src#24680 · Filter by author matyapiro31 opened on Oct 25, 2026
  1

• Tracing JIT with opcache.jit_max_polymorphic_calls=0: local variable undefined after a call in a side trace

  php/php-src#24678 · Filter by author ChrisOrlando opened on Oct 25, 2026

• JIT: function with >~1.7 MB of machine code corrupts JIT buffer accounting; next compilation crashes (SIGBUS on arm64)

  BugCategory: JITExtension: opcacheStatus: Verified
  php/php-src#24675 · Filter by author ChrisOrlando opened on Oct 25, 2026
  3

  

• var_destroy() UAF also reachable through SplObjectStorage::__unserialize() — separate entry point from #24481

  php/php-src#24674 · Filter by author srayuth089 opened on Oct 25, 2026
  3

  

• Surfacing security issues with OpenBSD as part of the CI with hardened memory allocator

  FeatureStatus: Needs Triage
  php/php-src#24669 · Filter by author loganaden opened on Oct 25, 2026
  2

  

• zend_set_local_var() overwrites existing compiled variable (CV) zval without calling zval_ptr_dtor()

  BugStatus: Needs Triage
  php/php-src#24668 · Filter by author yasu20200121web-prog opened on Oct 25, 2026

• FPM: pools with different disable_functions sharing one opcache run scripts wrongly (var_export() calls var_dump(), SIGSEGV in the restricted pool) on 8.4/8.5/8.6

  php/php-src#24661 · Filter by author Enfiladeguide opened on Oct 24, 2026
  3

• Log Security-Relevant Request Rejections and Mitigated Exploit Attempts

  FeatureStatus: Needs Triage
  php/php-src#24657 · Filter by author hackerfactor opened on Oct 24, 2026
  1

• Change session.upload_progress.enabled from default-on to default-off

  FeatureStatus: Verified
  php/php-src#24648 · Filter by author Sainan opened on Oct 24, 2026
  1

• ext/dba: tcadb backend path allows injecting Tokyo Cabinet connection-string parameters (e.g. bnum) via unescaped '#'

  php/php-src#24640 · Filter by author kunwaratulhax0r opened on Oct 24, 2026

• Child constructor is checked against only one interface constructor, depending on the order of implements

  BugStatus: Needs Triage
  php/php-src#24637 · Filter by author zeynallow opened on Oct 24, 2026
  1

• Tracing JIT reads a stale stack slot at a side exit

  BugStatus: Needs Triage
  php/php-src#24634 · Filter by author dixyes opened on Oct 24, 2026
  1

• Delayed OOM raised during compilation is dropped when compilation fails

  php/php-src#24631 · Filter by author pentolope opened on Oct 24, 2026
  1

• Vendor Build Version field needed, visible in phpinfo()

  php/php-src#24627 · Filter by author JDBushQuacken opened on Oct 23, 2026

• Tracing JIT: a bool read from three object properties is stale right after read()/write()/unread() warm their own traces (opcache.jit=1254)

  BugCategory: JITExtension: opcacheStatus: Verified
  php/php-src#24622 · Filter by author frodeborli opened on Oct 23, 2026
  3

  

• fsockopen()/stream_socket_client() accept TCP ports above 65535, which wrap to another port

  php/php-src#24616 · Filter by author Marti2203 opened on Oct 23, 2026

• ArrayObject backing storage cycle causes unbounded recursion in spl_array_get_hash_table_ptr()

  php/php-src#24615 · Filter by author Marti2203 opened on Oct 23, 2026

• mysqlnd: OK packets without info message rejected on x32 builds since GHSA-r6x9-5r99-36j7 (size_t truncation)

  BugStatus: Needs Triage
  php/php-src#24609 · Filter by author themofleur opened on Oct 23, 2026
  1