Issues

• convert.quoted-printable-encode drops or duplicates a CR at the end of a write

  php/php-src#24462 · Filter by author sebxt opened on Oct 20, 2026

• pdo_pgsql: DISCARD ALL on persistent connection cleanup drops PgBouncer's prepared statements (+52% CPU per request)

  BugExtension: pdo_pgsql
  php/php-src#24461 · Filter by author ArtUkrainskiy opened on Oct 20, 2026
  

• quoted_printable_encode does not encode trailing space

  BugStatus: Needs Triage
  php/php-src#24458 · Filter by author Sjord opened on Oct 20, 2026

• imagewebp() returns true when encoding fails

  php/php-src#24457 · Filter by author lacatoire opened on Oct 20, 2026

• Lazy object reset with object destructor can lead to use-after-free

  BugStatus: Needs Triage
  php/php-src#24455 · Filter by author alexandre-daubois opened on Oct 20, 2026
  1

• Allow distinguishing request-derived values from environment variables in $_SERVER

  FeatureStatus: Needs Triage
  php/php-src#24454 · Filter by author shyim opened on Oct 20, 2026

• mysqlnd: in ZTS builds every statistics update locks a process-wide mutex

  FeatureStatus: Needs Triage
  php/php-src#24447 · Filter by author ArtUkrainskiy opened on Oct 19, 2026

• Tracing JIT: a catch reads an int local as undefined after an internal call throws (8.4 regression)

  BugStatus: Needs Triage
  php/php-src#24445 · Filter by author EJ-Research opened on Oct 19, 2026

• quoted_printable_encode() produces lines longer than 76 characters for bytes 0xF5 to 0xFF

  php/php-src#24441 · Filter by author sebxt opened on Oct 19, 2026

• Tracing JIT: segfault on $f($arr[k]) when $f alternates between by-value and by-reference functions

  php/php-src#24438 · Filter by author waroad opened on Oct 19, 2026

• Tracing JIT: value of $x = $y + 2 is int with raw double bits when $x is a reference to a typed float property

  php/php-src#24436 · Filter by author waroad opened on Oct 19, 2026

• SEGV in zend_generator_dtor_storage when GC closes cyclic generators in a Fiber

  BugStatus: Needs Triage
  php/php-src#24430 · Filter by author alexandre-daubois opened on Oct 19, 2026
  1

• JIT: segfault with opcache.jit=1201 when a hooked property is passed to a run-time-resolved function

  BugCategory: JITExtension: opcacheStatus: Verified
  php/php-src#24398 · Filter by author waroad opened on Oct 18, 2026
  1

• JIT: ir_save assertion ((ref) < 0) failed when dumping IR with opcache.jit_debug on a foreach loop

  Category: JITStatus: Verified
  php/php-src#24397 · Filter by author waroad opened on Oct 18, 2026
  

• JIT: "reg forwarding" assertion in zend_jit_def_reg (segfault in release) on masked counter loop, opcache.jit=function

  BugCategory: JITExtension: opcacheStatus: Verified
  php/php-src#24396 · Filter by author waroad opened on Oct 18, 2026
  

• JIT: segfault when an inlined call's reference argument changes from int to float (zend_jit_trace_exit assertion)

  BugCategory: JITExtension: opcacheStatus: Verified
  php/php-src#24389 · Filter by author waroad opened on Oct 17, 2026
  1

• serialize() called from a destructor during var_hash destruction reuses the outer var_hash (wrong back references, use-after-free)

  BugExtension: standard
  php/php-src#24373 · Filter by author janhelke opened on Oct 16, 2026
  

• opcache_compile_file() on a file with a fatal compile error disables the cycle collector for the rest of the request

  php/php-src#24361 · Filter by author likemusic opened on Oct 15, 2026

• Intermittent memory exhaustion during WordPress bootstrap under PHP FPM with tracing JIT enabled

  BugStatus: Needs Triage
  php/php-src#24328 · Filter by author neoteknic opened on Oct 14, 2026
  2

• opcache: zend_accel_hash_update() links new entries without a release barrier; lock-free lookups can see a half-initialised entry on aarch64

  php/php-src#24319 · Filter by author iloveleon19 opened on Oct 14, 2026
  2

• Harden SoapClient cross-origin redirect handling

  BugExtension: soapStatus: Verified
  php/php-src#24315 · Filter by author alexandre-daubois opened on Oct 14, 2026
  1

  

• standard/syslog: the request shutdown hook calls closelog() even when the request never opened syslog

  BugExtension: standardStatus: Verified
  php/php-src#24308 · Filter by author andypost opened on Oct 13, 2026

• Tracing JIT loses the result of a dynamic method call traced with Closure::__invoke (8.5 regression)

  BugCategory: JITExtension: opcacheStatus: Verified
  php/php-src#24286 · Filter by author liquidice opened on Oct 13, 2026
  3

• Foreach by reference ignores property visibility

  BugStatus: Needs Triage
  php/php-src#24280 · Filter by author kamil-tekiela opened on Oct 12, 2026
  

• Unwind/GracefulExit discarded in zend_fiber_execute()

  BugCategory: FibersStatus: Verified
  php/php-src#24265 · Filter by author iluuu1994 opened on Oct 11, 2026