Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.3 » 8.3.33 »

PHP 8.3.24

The latest release of PHP 8.3 is 8.3.33 which includes important security patches.

Source Code

Change Log

  • calendar

    • Fixed jewishtojd overflow on year argument.
      David Carlier

  • core

    • Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order).
      Daniil Gentili
    • Fix OSS-Fuzz #427814456.
      nielsdos
    • Fix OSS-Fuzz #428983568 and #428760800.
      nielsdos
    • Fixed bug GH-17204 -Wuseless-escape warnings emitted by re2c.
      Peter Kokot

  • curl

    • Fix memory leaks when returning refcounted value from curl callback.
      nielsdos
    • Remove incorrect string release.
      nielsdos

  • intl

    • Fix memleak on failure in collator_get_sort_key().
      nielsdos

  • ldap

    • Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID.
      David Carlier

  • mbstring

    • Fixed bug GH-18901 (integer overflow mb_split).
      nielsdos

  • oci8

    • Fixed bug GH-18873 (OCI_RETURN_LOBS flag causes oci8 to leak memory).
      Saki Takamachi

  • opcache

    • Fixed bug GH-18639 (Internal class aliases can break preloading + JIT).
      nielsdos
    • Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c).
      nielsdos

  • openssl

    • Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server).
      Jakub Zelenka

  • pcntl

    • Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers).
      Arnaud

  • phar

    • Fix stream double free in phar.
      nielsdos
      dixyes
    • Fix phar crash and file corruption with SplFileObject.
      nielsdos

  • soap

    • Fixed bug GH-18990, bug #81029, bug #47314 (SOAP HTTP socket not closing on object destruction).
      nielsdos
    • Fix memory leak when URL parsing fails in redirect.
      Girgias

  • spl

    • Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash).
      nielsdos

  • standard

    • Fix misleading errors in printf().
      nielsdos
    • Fix RCN violations in array functions.
      nielsdos
    • Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value.
      David Carlier

  • streams

    • Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error).
      Jakub Zelenka

  • zip

    • Fix leak when path is too long in ZipArchive::extractTo().
      nielsdos

PHP 8.3


  Represents a security release