Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.3 » 8.3.33 »

PHP 8.3.2

The latest release of PHP 8.3 is 8.3.33 which includes important security patches.

Source Code

  • PHP 8.3.2 (tar.gz)

    • sha256: decf0f51e5415b21fb6350753e45b6c3be5cc0868e4ec561e5c89326c8e6ef16

  • PHP 8.3.2 (tar.bz2)

    • sha256: 582b3c837a8d952efffe274a5e49706c43a88c162830c2a8c358089fe7449284

  • PHP 8.3.2 (tar.xz)

    • sha256: 4ffa3e44afc9c590e28dc0d2d31fc61f0139f8b335f11880a121b9f9b9f0634e

Change Log

  • core

    • Fixed bug GH-12953 (false positive SSA integrity verification failed when loading composer classmaps with more than 11k elements).
      nielsdos
    • Fixed bug GH-12999 (zend_strnlen build when strnlen is unsupported).
      rainerjung
    • Fixed bug GH-12966 (missing cross-compiling 3rd argument so Autoconf doesn't emit warnings).
      Peter Kokot
    • Fixed bug GH-12854 (8.3 - as final trait-used method does not correctly report visibility in Reflection).
      nielsdos

  • cli

    • Fix incorrect timeout in built-in web server when using router script and max_input_time.
      ilutov

  • dom

    • Fixed bug GH-12870 (Creating an xmlns attribute results in a DOMException).
      nielsdos
    • Fix crash when toggleAttribute() is used without a document.
      nielsdos
    • Fix crash in adoptNode with attribute references.
      nielsdos
    • Fixed bug GH-13012 (DOMNode::isEqualNode() is incorrect when attribute order is different).
      nielsdos

  • ffi

    • Fixed bug GH-9698 (stream_wrapper_register crashes with FFI\CData).
      Jakub Zelenka
    • Fixed bug GH-12905 (FFI::new interacts badly with observers).
      nielsdos

  • gd

    • Fixed GH-13082 undefined behavior with GdFont instances handling with imageload* and imagechar*.
      David Carlier

  • intl

    • Fixed GH-12943 (IntlDateFormatter::__construct accepts 'C' as valid locale).
      David Carlier

  • hash

    • Fixed bug GH-12936 (hash() function hangs endlessly if using sha512 on strings >= 4GiB).
      nielsdos

  • mbstring

    • When operating on a string with invalid encoding, mb_substr (as well as mb_strstr and its variants) defines character indices in the same way as other mbstring functions such as mb_strpos.
      Alex Dowad

  • odbc

    • Fix crash on Apache shutdown with persistent connections.
      nielsdos

  • opcache

    • Fixed oss-fuzz #64727 (JIT undefined array key warning may overwrite DIM with NULL when DIM is the same var as result).
      ilutov
    • Added workaround for SELinux mprotect execheap issue. See https://bugzilla.kernel.org/show_bug.cgi?id=218258.
      ilutov

  • openssl

    • Fixed bug GH-12987 (openssl_csr_sign might leak new cert on error).
      Jakub Zelenka

  • pdo

    • Fix GH-12969 (Fixed PDO::getAttribute() to get PDO::ATTR_STRINGIFY_FETCHES).
      SakiTakamachi

  • pdo_odbc

    • Fixed bug GH-12767 (Unable to turn on autocommit mode with setAttribute()).
      SakiTakamachi

  • pgsql

    • Fixed auto_reset_persistent handling and allow_persistent type.
      David Carlier
    • Fixed bug GH-12974 (Apache crashes on shutdown when using pg_pconnect()).
      nielsdos

  • phar

    • Fixed bug #77432 (Segmentation fault on including phar file).
      nielsdos

  • phpdbg

    • Fixed bug GH-12962 (Double free of init_file in phpdbg_prompt.c).
      nielsdos

  • simplexml

    • Fix getting the address of an uninitialized property of a SimpleXMLElement resulting in a crash.
      nielsdos
    • Fixed bug GH-12929 (SimpleXMLElement with stream_wrapper_register can segfault).
      nielsdos

  • tidy

    • Fixed bug GH-12980 (tidynode.props.attribute is missing "Boolean Attributes" and empty attributes).
      nielsdos

PHP 8.3


  Represents a security release