Home » Releases » 8.3 » 8.3.33 »

PHP 8.3.17

The latest release of PHP 8.3 is 8.3.33 which includes important security patches.

Source Code

Change Log

  • core

    • Fixed bug GH-16892 (ini_parse_quantity() fails to parse inputs starting with 0x0b).
      nielsdos
    • Fixed bug GH-16886 (ini_parse_quantity() fails to emit warning for 0x+0).
      nielsdos
    • Fixed bug GH-17214 (Relax final+private warning for trait methods with inherited final).
      ilutov
    • Fixed NULL arithmetic during system program execution on Windows.
      cmb
      nielsdos
    • Fixed potential OOB when checking for trailing spaces on Windows.
      cmb
    • Fixed bug GH-17408 (Assertion failure Zend/zend_exceptions.c).
      nielsdos
      ilutov
    • Fix may_have_extra_named_args flag for ZEND_AST_UNPACK.
      nielsdos
    • Fix NULL arithmetic in System V shared memory emulation for Windows.
      cmb
  • dom

    • Fixed bug GH-17500 (Segfault with requesting nodeName on nameless doctype).
      nielsdos
  • enchant

    • Fix crashes in enchant when passing null bytes.
      nielsdos
  • ftp

    • Fixed bug GH-16800 (ftp functions can abort with EINTR).
      nielsdos
  • gd

    • Fixed bug GH-17349 (Tiled truecolor filling looses single color transparency).
      cmb
    • Fixed bug GH-17373 (imagefttext() ignores clipping rect for palette images).
      cmb
    • Ported fix for libgd 223 (gdImageRotateGeneric() does not properly interpolate).
      cmb
  • intl

    • Fixed bug GH-11874 (intl causing segfault in docker images).
      nielsdos
    • Fixed bug GH-17469 (UConverter::transcode always emit E_WARNING on invalid encoding).
      David Carlier
  • opcache

    • Fixed bug GH-17307 (Internal closure causes JIT failure).
      nielsdos
    • Fixed bug GH-17564 (Potential UB when reading from / writing to struct padding).
      ilutov
  • pdo

    • Fixed a memory leak when the GC is used to free a PDOStatment.
      Girgias
    • Fixed a crash in the PDO Firebird Statement destructor.
      nielsdos
    • Fixed UAFs when changing default fetch class ctor args.
      Girgias
      nielsdos
  • phar

    • Fixed bug GH-17518 (offset overflow phar extractTo()).
      nielsdos
  • phpdbg

    • Fix crashes in function registration + test.
      nielsdos
      Girgias
  • session

    • Fix type confusion with session SID constant.
      nielsdos
    • Fixed bug GH-17541 (ext/session NULL pointer dereferencement during ID reset).
      Girgias
  • simplexml

    • Fixed bug GH-17409 (Assertion failure Zend/zend_hash.c:1730).
      nielsdos
  • snmp

    • Fixed bug GH-17330 (SNMP::setSecurity segfault on closed session).
      David Carlier
  • spl

    • Fixed bug GH-17463 (crash on SplTempFileObject::ftruncate with negative value).
      David Carlier
  • zip

    • Fixed bug GH-17139 (Fix zip_entry_name() crash on invalid entry).
      nielsdos

PHP 8.3


  Represents a security release