PHP 7.4.9 Release: Detailed List of Bug Fixes

PHP 7.4.9 version has been released with the following updates:

Apache

Fixed bug #79030 – upgraded apache2handler so php_apache_sapi_get_request_time returns microseconds.

COM

Fixed bug #63208 – BSTR to PHP string conversion is now binary‑safe.

Fixed bug #63527 – DCOM can now accept username and password parameters.

Core

Fixed bug #79740 – static calls to serialize() and unserialize() are now allowed.

Fixed bug #79783 – resolved segmentation fault in php_str_replace_common.

Fixed bug #79778 – assertion failure when dumping a closure with unresolved static variables.

Fixed bug #79779 – assertion failure when assigning string offset by reference.

Fixed bug #79792 – HT iterator is correctly removed when an empty array is destroyed.

Fixed bug #78598 – prevented segfaults when changing an array during an undefined‑index read/write.

Fixed bug #79784 – eliminated use‑after‑free when an array is modified during write‑fetch on an undefined variable.

Fixed bug #79793 – eliminated use‑after‑free when a string is used in an undefined‑index warning.

Fixed bug #79862 – public non‑static properties in child classes now correctly override private static ones.

Fixed bug #79877 – getimagesize no longer silently truncates after a null byte.

Fileinfo

Fixed bug #79756 – finfo_file no longer crashes when using FILEINFO_MIME.

FTP

Fixed bug #55857 – corrected ftp_size handling for large files.

Mbstring

Fixed bug #79787 – mb_strimwidth now properly trims strings.

Phar

Fixed bug #79797 – resolved use of a freed hash key in phar_parse_zipfile (CVE‑2020‑7068).

Reflection

Fixed bug #79487 – ::getStaticProperties() now respects property modifications.

Fixed bug #69804 – ::getStaticPropertyValue() no longer throws on protected properties.

Fixed bug #79820 – prevented use‑after‑free when copying to ReflectionProperty with a parsed type.

Standard

Fixed bug #70362 – copy() can now handle large data:// streams with open_basedir restrictions.

Fixed bug #78008 – dns_check_record() now returns correct results on Alpine Linux.

Fixed bug #79839 – array_walk() now respects property types.