Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.3 » 8.3.33 »

PHP 8.3.27

The latest release of PHP 8.3 is 8.3.33 which includes important security patches.

Source Code

Change Log

  • core

    • Fixed bug GH-19765 (object_properties_load() bypasses readonly property checks).
      timwolla
    • Fixed hard_timeout with --enable-zend-max-execution-timers.
      Appla
    • Fixed bug GH-19792 (SCCP causes UAF for return value if both warning and exception are triggered).
      nielsdos
    • Fixed bug GH-19653 (Closure named argument unpacking between temporary closures can cause a crash).
      nielsdos
      Arnaud
      Bob
    • Fixed bug GH-19839 (Incorrect HASH_FLAG_HAS_EMPTY_IND flag on userland array).
      ilutov
    • Fixed bug GH-19480 (error_log php.ini cannot be unset when open_basedir is configured).
      nielsdos
    • Fixed bug GH-20002 (Broken build on *BSD with MSAN).
      outtersg

  • cli

    • Fix useless "Failed to poll event" error logs due to EAGAIN in CLI server with PHP_CLI_SERVER_WORKERS.
      leotaku

  • curl

    • Fix cloning of CURLOPT_POSTFIELDS when using the clone operator instead of the curl_copy_handle() function to clone a CurlHandle.
      timwolla
    • Fix curl build and test failures with version 8.16.
      nielsdos
      ilutov
      Jakub Zelenka

  • date

    • Fixed GH-17159: "P" format for ::createFromFormat swallows string literals.
      nielsdos

  • dba

    • Fixed GH-19885 (dba_fetch() overflow on skip argument).
      David Carlier

  • gd

    • Fixed GH-19955 (imagefttext() memory leak).
      David Carlier

  • mysqlnd

    • Fixed bug #67563 (mysqli compiled with mysqlnd does not take ipv6 adress as parameter).
      nielsdos

  • phar

    • Fix memory leak and invalid continuation after tar header writing fails.
      nielsdos
    • Fix memory leaks when creating temp file fails when applying zip signature.
      nielsdos

  • simplexml

    • Fixed bug GH-19988 (zend_string_init with NULL pointer in simplexml (UB)).
      nielsdos

  • soap

    • Fixed bug GH-19784 (SoapServer memory leak).
      nielsdos
    • Fixed bug GH-20011 (Array of SoapVar of unknown type causes crash).
      nielsdos

  • standard

    • Fixed bug GH-12265 (Cloning an object breaks serialization recursion).
      nielsdos
    • Fixed bug GH-19701 (Serialize/deserialize loses some data).
      nielsdos
    • Fixed bug GH-19801 (leaks in var_dump() and debug_zval_dump()).
      alexandre-daubois
    • Fixed bug GH-20043 (array_unique assertion failure with RC1 array causing an exception on sort).
      nielsdos
    • Fixed bug GH-19926 (reset internal pointer earlier while splicing array while COW violation flag is still set).
      alexandre-daubois
    • Fixed bug GH-19570 (unable to fseek in /dev/zero and /dev/null).
      nielsdos
      divinity76

  • streams

    • Fixed bug GH-19248 (Use strerror_r instead of strerror in main).
      Jakub Zelenka
    • Fixed bug GH-17345 (Bug #35916 was not completely fixed).
      nielsdos
    • Fixed bug GH-19705 (segmentation when attempting to flush on non seekable stream.
      bukka/David Carlier

  • xmlreader

    • Fixed bug GH-20009 (XMLReader leak on RelaxNG schema failure).
      nielsdos

  • zip

    • Fixed bug GH-19688 (Remove pattern overflow in zip addGlob()).
      nielsdos
    • Fixed bug GH-19932 (Memory leak in zip setEncryptionName()/setEncryptionIndex()).
      David Carlier

  • zlib

    • Fixed bug GH-19922 (Double free on gzopen).
      David Carlier

PHP 8.3


  Represents a security release