Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.2 » 8.2.33 »

PHP 8.2.9

The latest release of PHP 8.2 is 8.2.33 which includes important security patches.

Source Code

  • PHP 8.2.9 (tar.gz)

    • sha256: 5fac52041335cacfb5845aeff2303f92403925338a0285f2e160feebcb840f04

  • PHP 8.2.9 (tar.bz2)

    • sha256: 48460b994ae7eb5096a310f44d13e865de1771104d4a550d53072be58a6f176c

  • PHP 8.2.9 (tar.xz)

    • sha256: 1e6cb77f997613864ab3127fbfc6a8c7fdaa89a95e8ed6167617b913b4de4765

Change Log

  • build

    • Fixed bug GH-11522 (PHP version check fails with '-' separator).
      SVGAnimate

  • cli

    • Fix interrupted CLI output causing the process to exit.
      nielsdos

  • core

    • Fixed oss-fuzz #60011 (Mis-compilation of by-reference nullsafe operator).
      ilutov
    • Fixed line number of JMP instruction over else block.
      ilutov
    • Fixed use-of-uninitialized-value with ??= on assert.
      ilutov
    • Fixed oss-fuzz #60411 (Fix double-compilation of arrow-functions).
      ilutov
    • Fixed build for FreeBSD before the 11.0 releases.
      David Carlier

  • curl

    • Fix crash when an invalid callback function is passed to CURLMOPT_PUSHFUNCTION.
      nielsdos

  • date

    • Fixed bug GH-11368 (Date modify returns invalid datetime).
      Derick
    • Fixed bug GH-11600 (Can't parse time strings which include (narrow) non-breaking space characters).
      Derick
    • Fixed bug GH-11854 (DateTime:createFromFormat stopped parsing datetime with extra space).
      nielsdos
      Derick

  • dom

    • Fixed bug GH-11625 (DOMElement::replaceWith() doesn't replace node with DOMDocumentFragment but just deletes node or causes wrapping <></> depending on libxml2 version).
      nielsdos

  • fileinfo

    • Fixed bug GH-11298 (finfo returns wrong mime type for xz files).
      Anatol

  • ftp

    • Fix context option check for "overwrite".
      JonasQuinten
    • Fixed bug GH-10562 (Memory leak and invalid state with consecutive ftp_nb_fget).
      nielsdos

  • gd

    • Fix most of the external libgd test failures.
      Michael Orlitzky

  • intl

    • Fix memory leak in MessageFormatter::format() on failure.
      Girgias

  • libxml

    • Fixed bug GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading in XML without enabling it). (CVE-2023-3823)
      nielsdos
      ilutov

  • mbstring

    • Fix GH-11300 (license issue: restricted unicode license headers).
      nielsdos

  • opcache

    • Fixed bug GH-10914 (OPCache with Enum and Callback functions results in segmentation fault).
      nielsdos
    • Prevent potential deadlock if accelerated globals cannot be allocated.
      nielsdos

  • pcntl

    • Fixed bug GH-11498 (SIGCHLD is not always returned from proc_open).
      nielsdos

  • pdo

    • Fix GH-11587 (After php8.1, when PDO::ATTR_EMULATE_PREPARES is true and PDO::ATTR_STRINGIFY_FETCHES is true, decimal zeros are no longer filled).
      SakiTakamachi

  • pdo sqlite

    • Fix GH-11492 (Make test failure: ext/pdo_sqlite/tests/bug_42589.phpt).
      KapitanOczywisty
      CViniciusSDias

  • phar

    • Add missing check on EVP_VerifyUpdate() in phar util.
      nielsdos
    • Fixed bug GHSA-jqcx-ccgc-xwhv (Buffer mismanagement in phar_dir_read()). (CVE-2023-3824)
      nielsdos

  • phpdbg

    • Fixed bug GH-9669 (phpdbg -h options doesn't list the -z option).
      adsr

  • session

    • Removed broken url support for transferring session ID.
      ilutov

  • standard

    • Fix serialization of RC1 objects appearing in object graph twice.
      ilutov

  • streams

    • Fixed bug GH-11735 (Use-after-free when unregistering user stream wrapper from itself).
      ilutov

  • sqlite3

    • Fix replaced error handling in SQLite3Stmt::__construct.
      nielsdos

  • xmlreader

    • Fix GH-11548 (Argument corruption when calling XMLReader::open or XMLReader::XML non-statically with observer active).
      Bob

PHP 8.2


  Represents a security release