Home » Releases » 8.3 » 8.3.33 »

PHP 8.3.15

The latest release of PHP 8.3 is 8.3.33 which includes important security patches.

Source Code

Change Log

  • calendar

    • Fixed jdtogregorian overflow.
      David Carlier
    • Fixed cal_to_jd julian_days argument overflow.
      David Carlier
  • com

    • Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults).
      cmb
  • core

    • Fail early in *nix configuration build script.
      hakre
    • Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)).
      nielsdos
    • Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469).
      nielsdos
    • Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs).
      nielsdos
    • Fix is_zend_ptr() huge block comparison.
      nielsdos
    • Fixed potential OOB read in zend_dirname() on Windows.
      cmb
  • curl

    • Fixed bug GH-16802 (open_basedir bypass using curl extension).
      nielsdos
    • Fix various memory leaks in curl mime handling.
      nielsdos
  • dom

    • Fixed bug GH-16777 (Calling the constructor again on a DOM object after it is in a document causes UAF).
      nielsdos
    • Fixed bug GH-16906 (Reloading document can cause UAF in iterator).
      nielsdos
  • fpm

    • Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status).
      Jakub Zelenka
  • gd

    • Fixed GH-16776 (imagecreatefromstring overflow).
      David Carlier
  • gmp

    • Fixed bug GH-16890 (array_sum() with GMP can loose precision (LLP64)).
      cmb
  • hash

    • Fixed GH-16711: Segfault in mhash().
      Girgias
  • opcache

    • Fixed bug GH-16770 (Tracing JIT type mismatch when returning UNDEF).
      nielsdos
      Dmitry
    • Fixed bug GH-16851 (JIT_G(enabled) not set correctly on other threads).
      dktapps
    • Fixed bug GH-16902 (Set of opcache tests fail zts+aarch64).
      nielsdos
  • openssl

    • Prevent unexpected array entry conversion when reading key.
      nielsdos
    • Fix various memory leaks related to openssl exports.
      nielsdos
    • Fix memory leak in php_openssl_pkey_from_zval().
      nielsdos
  • pdo

    • Fixed memory leak of `setFetchMode()`.
      SakiTakamachi
  • phar

    • Fixed bug GH-16695 (phar:// tar parser and zero-length file header blocks).
      nielsdos
      Hans Krentel
  • phpdbg

    • Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()).
      nielsdos
  • sapi

    • Fixed bug GH-16998 (UBSAN warning in rfc1867).
      nielsdos
  • simplexml

    • Fixed bug GH-16808 (Segmentation fault in RecursiveIteratorIterator ->current() with a xml element input).
      nielsdos
  • soap

    • Fix make check being invoked in ext/soap.
      Ma27
  • standard

    • Fixed bug GH-16905 (Internal iterator functions can't handle UNDEF properties).
      nielsdos
    • Fixed bug GH-16957 (Assertion failure in array_shift with self-referencing array).
      nielsdos
  • streams

    • Fixed network connect poll interuption handling.
      Jakub Zelenka
  • windows

    • Fixed bug GH-16849 (Error dialog causes process to hang).
      cmb

PHP 8.3


  Represents a security release