PECL news

Recent Releases

• Judy 2.4.2 (stable) 2026-08-14
  - SECURITY: fix use-after-free write on *_TO_MIXED overwrite/unset when a stored
  value's destructor re-enters and mutates the same array (write-before-dtor /
  delete-before-free)
  - SECURITY: fix type confusion (UB) in getAll()/next()/rewind() for adaptive
  types, which queried a JudyHS operation against the JudyL (SSO) store
  - FIX: add get_gc handler so reference cycles through MIXED values ar ...
• Judy 2.4.1 (stable) 2026-08-14
  - FIX: PHP 8.6 build -- XtOffsetOf() alias removed in PHP 8.6.0alpha2; use
  standard C offsetof() instead (thanks Remi Collet, PR #65)
• zstd 0.18.0 (stable) 2026-08-14
  - add: built-in list of uncompressible MIME types for transparent output compression
  - add: negation tokens (!) in zstd.output_compression_exclude_types to compress a MIME type even though it is in the built-in list
• brotli 0.21.0 (stable) 2026-08-14
  - add: built-in MIME type exclusion list for transparent output compression
  - add: negation tokens (!) in brotli.output_compression_exclude_types
  - add: phpinfo() improvements (bundled/external library, APCu serializer status)
  - fix: memory leak when BrotliEncoderCompressStream() fails on PHP 7.4+
  - fix: compiler warnings
• taint 3.0.0 (beta) 2026-08-10
  - Support PHP 8.0 up to 8.5
  - Dropped PHP 7 support (use taint 2.1.x for PHP 7.x)
  - Propagate the taint mark through the frameless call fast paths (PHP 8.4+)
  - Extended sink coverage (see README for the full list)

Year 2003

• Call for PHP Extension authors (September)