The latest release of PHP 8.3 is
8.3.33 which includes important security patches.
Source Code
Change Log
-
core
-
Fixed bug
GH-18850 (Repeated inclusion of file with __halt_compiler() triggers "Constant already defined" warning).
-
Partially fixed bug
GH-19542 (Scanning of string literals >=2GB will fail due to signed int overflow).
-
Fixed bug
GH-19544 (GC treats ZEND_WEAKREF_TAG_MAP references as WeakMap references).
-
Fixed bug
GH-19613 (Stale array iterator pointer).
-
Fixed bug
GH-19679 (zend_ssa_range_widening may fail to converge).
-
Fixed bug
GH-19681 (PHP_EXPAND_PATH broken with bash 5.3.0).
-
Fixed bug
GH-19720 (Assertion failure when error handler throws when accessing a deprecated constant).
-
cli
-
Fixed bug
GH-19461 (Improve error message on listening error with IPv6 address).
-
date
-
dom
-
Fixed bug
GH-19612 (Mitigate libxml2 tree dictionary bug).
-
fpm
-
gd
-
Fixed bug
GH-19579 (imagefilledellipse underflow on width argument).
-
intl
-
Fixed bug
GH-11952 (Fix locale strings canonicalization for IntlDateFormatter and NumberFormatter).
-
openssl
-
Fixed bug
GH-19245 (Success error message on TLS stream accept failure).
-
pgsql
-
Fixed bug
GH-19485 (potential use after free when using persistent pgsql connections).
-
phar
-
Fixed memory leaks when verifying OpenSSL signature.
-
Fix memory leak in phar tar temporary file error handling code.
-
Fix metadata leak when phar convert logic fails.
-
Fix memory leak on failure in phar_convert_to_other().
-
Fixed bug
GH-19752 (Phar decompression with invalid extension can cause UAF).
-
standard
-
Fixed bug
GH-16649 (UAF during array_splice).
-
Fixed bug
GH-19577 (Avoid integer overflow when using a small offset and PHP_INT_MAX with LimitIterator).
-
streams
-
tidy
-
Fixed
GH-19021 build issue with libtidy in regard of tidyOptIsReadonly deprecation and TidyInternalCategory being available later than tidyOptGetCategory.
-
zip