Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.3 » 8.3.33 »

PHP 8.3.13

The latest release of PHP 8.3 is 8.3.33 which includes important security patches.

Source Code

Change Log

  • calendar

    • Fixed GH-16240: jdtounix overflow on argument value.
      David Carlier
    • Fixed GH-16241: easter_days/easter_date overflow on year argument.
      David Carlier
    • Fixed GH-16263: jddayofweek overflow.
      cmb
    • Fixed GH-16234: jewishtojd overflow.
      nielsdos

  • cli

    • Fixed bug GH-16137: duplicate http headers when set several times by the client.
      David Carlier

  • core

    • Fixed bug GH-16054 (Segmentation fault when resizing hash table iterator list while adding).
      nielsdos
    • Fixed bug GH-15905 (Assertion failure for TRACK_VARS_SERVER).
      cmb
    • Fixed bug GH-15907 (Failed assertion when promoting Serialize deprecation to exception).
      ilutov
    • Fixed bug GH-15851 (Segfault when printing backtrace during cleanup of nested generator frame).
      ilutov
    • Fixed bug GH-15866 (Core dumped in Zend/zend_generators.c).
      Arnaud
    • Fixed bug GH-16188 (Assertion failure in Zend/zend_exceptions.c).
      Arnaud
    • Fixed bug GH-16233 (Observer segfault when calling user function in internal function via trampoline).
      nielsdos

  • dom

    • Fixed bug GH-16039 (Segmentation fault (access null pointer) in ext/dom/parentnode/tree.c).
      nielsdos
    • Fixed bug GH-16149 (Null pointer dereference in DOMElement->getAttributeNames()).
      nielsdos
    • Fixed bug GH-16151 (Assertion failure in ext/dom/parentnode/tree.c).
      nielsdos
    • Fixed bug GH-16150 (Use after free in php_dom.c).
      nielsdos
    • Fixed bug GH-16152 (Memory leak in DOMProcessingInstruction/DOMDocument).
      nielsdos

  • json

    • Fixed bug GH-15168 (stack overflow in json_encode()).
      nielsdos

  • gd

    • Fixed bug GH-16232 (bitshift overflow on wbmp file content reading / fix backport from upstream).
      David Carlier
    • Fixed bug GH-12264 (overflow/underflow on imagerotate degrees value) (David Carlier)
    • Fixed bug GH-16274 (imagescale underflow on RBG channels / fix backport from upstream).
      David Carlier

  • ldap

    • Fixed bug GH-16032 (Various NULL pointer dereferencements in ldap_modify_batch()).
      Girgias
    • Fixed bug GH-16101 (Segfault in ldap_list(), ldap_read(), and ldap_search() when LDAPs array is not a list).
      Girgias
    • Fix GH-16132 (php_ldap_do_modify() attempts to free pointer not allocated by ZMM.).
      Girgias
    • Fix GH-16136 (Memory leak in php_ldap_do_modify() when entry is not a proper dictionary).
      Girgias

  • mbstring

    • Fixed bug GH-16261 (Reference invariant broken in mb_convert_variables()).
      nielsdos

  • openssl

    • Fixed stub for openssl_csr_new.
      Jakub Zelenka

  • pcre

    • Fixed bug GH-16189 (underflow on offset argument).
      David Carlier
    • Fixed bug GH-16184 (UBSan address overflowed in ext/pcre/php_pcre.c).
      nielsdos

  • phpdbg

    • Fixed bug GH-15901 (phpdbg: Assertion failure on i funcs).
      cmb
    • Fixed bug GH-16181 (phpdbg: exit in exception handler reports fatal error).
      cmb

  • reflection

    • Fixed bug GH-16187 (Assertion failure in ext/reflection/php_reflection.c).
      DanielEScherzer

  • sapi

    • Fixed bug GH-15395 (php-fpm: zend_mm_heap corrupted with cgi-fcgi request).
      Jakub Zelenka
      David Carlier

  • simplexml

    • Fixed bug GH-15837 (Segmentation fault in ext/simplexml/simplexml.c).
      nielsdos

  • sockets

    • Fixed bug GH-16267 (socket_strerror overflow on errno argument).
      David Carlier

  • soap

    • Fixed bug #73182 (PHP SOAPClient does not support stream context HTTP headers in array form).
      nielsdos
    • Fixed bug #62900 (Wrong namespace on xsd import error message).
      nielsdos
    • Fixed bug GH-15711 (SoapClient can't convert BackedEnum to scalar value).
      nielsdos
    • Fixed bug GH-16237 (Segmentation fault when cloning SoapServer).
      nielsdos
    • Fix Soap leaking http_msg on error.
      nielsdos
    • Fixed bug GH-16256 (Assertion failure in ext/soap/php_encoding.c:460).
      nielsdos
    • Fixed bug GH-16259 (Soap segfault when classmap instantiation fails).
      nielsdos

  • spl

    • Fixed bug GH-15918 (Assertion failure in ext/spl/spl_fixedarray.c).
      nielsdos

  • standard

    • Fixed bug GH-16053 (Assertion failure in Zend/zend_hash.c).
      Arnaud
    • Fixed bug GH-15169 (stack overflow when var serialization in ext/standard/var).
      nielsdos

  • streams

    • Fixed bugs GH-15908 and GH-15026 (leak / assertion failure in streams.c).
      nielsdos
    • Fixed bug GH-15980 (Signed integer overflow in main/streams/streams.c).
      cmb

  • tsrm

    • Prevent closing of unrelated handles.
      cmb

  • windows

    • Fixed minimal Windows version.
      cmb

PHP 8.3


  Represents a security release