Issues

• ext/standard: Skip mbrlen() for ASCII bytes in php_mblen()

  ABI breakExtension: standard
  Unread
  php/php-src#24207·ArtUkrainskiy opened Oct 8, 2026 · Updated Oct 8, 2026·Draft

• Title: Zend: Read string arguments of #[\Deprecated] without constructing it

  ABI breakCategory: EngineExtension: zend_test
  Unread
  php/php-src#24198·ArtUkrainskiy opened Oct 8, 2026 · Updated Oct 8, 2026

• ext/hash: improve PBKDF2 performance

  ABI breakExtension: hash
  Unread
  php/php-src#24188·Sjord opened Oct 8, 2026 · Updated Oct 8, 2026
  3

• Use-after-free in stream_filter_remove() called from a stream callback

  ABI breakExtension: standard
  Unread
  php/php-src#24168·EdmondDantes opened Oct 6, 2026 · Updated Oct 7, 2026
  6

• Fix GH-23898: Keep user_filter_map alive until streams are closed

  ABI breakCategory: StreamsExtension: standard
  Unread
  php/php-src#24140·bukka opened Oct 5, 2026 · Updated Oct 5, 2026

• Zend: add new zend_object_init{_with_constructor}() API

  ABI breakCategory: EngineExtension: ftpExtension: hashExtension: libxmlExtension: mysqliExtension: pdo (core)Extension: pharExtension: reflectionExtension: shmopExtension: socketsExtension: spl
  Unread
  php/php-src#24135·Girgias opened Oct 5, 2026 · Updated Oct 6, 2026·Draft

• ext/filter: Add Filter\Filter and Filter\Flag enums and support them in the filter extension

  ABI breakCategory: EngineExtension: filterRFC
  Unread
  php/php-src#24111·arshidkv12 opened Oct 4, 2026 · Updated Oct 4, 2026
  3

• Zend: user opcode DISPATCH runs on a stale frame in the TAILCALL VM.

  ABI breakCategory: EngineExtension: zend_test
  Unread
  php/php-src#24109·devnexen opened Oct 3, 2026 · Updated Oct 4, 2026

• ext/pcre: Backport bundled PCRE2 security fixes

  ABI breakExtension: pcre
  Unread
  php/php-src#24106·iliaal opened Oct 3, 2026 · Updated Oct 3, 2026

• ext/pcre: Backport bundled PCRE2 security fixes

  ABI breakExtension: pcre
  Unread
  php/php-src#24105·iliaal opened Oct 3, 2026 · Updated Oct 3, 2026

• ext/pcre: Backport bundled PCRE2 security fixes

  ABI breakExtension: pcre
  Unread
  php/php-src#24104·iliaal opened Oct 3, 2026 · Updated Oct 5, 2026

• ext/pcre: Upgrade bundled PCRE2 to 10.49

  ABI breakCategory: Build SystemCategory: CIExtension: pcre
  Unread
  php/php-src#24103·iliaal opened Oct 3, 2026 · Updated Oct 3, 2026

• ext/pcre: Upgrade bundled PCRE2 to 10.49

  ABI breakCategory: Build SystemCategory: CIExtension: pcre
  Unread
  php/php-src#24102·iliaal opened Oct 3, 2026 · Updated Oct 3, 2026

• ext/standard: bcrypt-sha256 password hash

  ABI breakCategory: Build SystemExtension: hashExtension: standardRFC
  Unread
  php/php-src#24073·Sjord opened Oct 2, 2026 · Updated Oct 6, 2026
  22

• Clean up SAPI POST readers

  ABI breakCategory: Build SystemExtension: mbstring
  Unread
  php/php-src#24057·NattyNarwhal opened Oct 1, 2026 · Updated Oct 2, 2026

• sapi: Remove sapi_activate_headers_only

  ABI break
  Unread
  php/php-src#24051·NattyNarwhal opened Oct 1, 2026 · Updated Oct 2, 2026

• [Draft RFC] Automated delegation using implements by

  ABI breakCategory: EngineStatus: Requires RFC
  Unread
  php/php-src#24030·knegyesi opened Oct 1, 2026 · Updated Oct 1, 2026·Draft

• Backport PCRE2 security fixes to bundled 10.40

  ABI breakCI: All jobsExtension: pcre
  Unread
  php/php-src#24011·alexandre-daubois opened Sep 30, 2026 · Updated Oct 7, 2026
  1

• Zend: follow-up for GH-22145. Fix zend_fcc_closure_equals_ex() implementation

  ABI breakCategory: EngineExtension: spl
  Unread
  php/php-src#24007·Girgias opened Sep 30, 2026 · Updated Oct 1, 2026

• Remove unused libmbfl functions from mbstring

  ABI breakExtension: mbstring
  Unread
  php/php-src#24004·kamil-tekiela opened Sep 29, 2026 · Updated Sep 29, 2026

• Zend: derive lazy object initializer callble from FCC

  ABI breakCategory: EngineExtension: reflection
  Unread
  php/php-src#24000·Girgias opened Sep 29, 2026 · Updated Oct 5, 2026
  2

• IO hooks PoC

  ABI breakCategory: Build SystemCategory: CICategory: DNSCategory: EngineCategory: FilesystemCategory: IOCategory: StreamsExtension: curlExtension: hashExtension: libxmlExtension: mysqliExtension: mysqlndExtension: opensslExtension: pcntlExtension: reflectionExtension: socketsExtension: standardExtension: xmlreaderExtension: xmlwriterSTF: Streams
  Unread
  php/php-src#23997·bukka opened Sep 29, 2026 · Updated Oct 8, 2026·Draft
  11

• fibers: refactor fiber to only rely on a FCC

  ABI breakCategory: EngineExtension: reflectionExtension: zend_test
  Unread
  php/php-src#23994·Girgias opened Sep 29, 2026 · Updated Oct 1, 2026·Draft

• windows: support PGO with clang

  ABI breakCategory: Build SystemExtension: com_dotnetExtension: intlExtension: opcacheExtension: pdo_firebirdExtension: standard
  Unread
  php/php-src#23992·henderkes opened Sep 29, 2026 · Updated Oct 2, 2026·Draft
  3

• ext/standard: Check for UTF-8 first when resolving the charset of html functions

  ABI breakExtension: standard
  Unread
  php/php-src#23961·nicolas-grekas opened Sep 28, 2026 · Updated Oct 6, 2026
  6