Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.3 » 8.3.33 »

PHP 8.3.7

The latest release of PHP 8.3 is 8.3.33 which includes important security patches.

Source Code

  • PHP 8.3.7 (tar.gz)

    • sha256: 2e11d10b651459a8767401e66b5d70e3b048e446579fcdeb0b69bcba789af8c4

  • PHP 8.3.7 (tar.bz2)

    • sha256: 01c20cde1c5a5696651875ed22f507849679fba740f8c421616b7d43d7f797da

  • PHP 8.3.7 (tar.xz)

    • sha256: d53433c1ca6b2c8741afa7c524272e6806c1e895e5912a058494fea89988570a

Change Log

  • core

    • Fixed zend_call_stack build with Linux/uclibc-ng without thread support.
      Fabrice Fontaine
    • Fixed bug GH-13772 (Invalid execute_data->opline pointers in observer fcall handlers when JIT is enabled).
      Bob
    • Fixed bug GH-13931 (Applying zero offset to null pointer in Zend/zend_opcode.c).
      nielsdos
    • Fixed bug GH-13942 (Align the behavior of zend-max-execution-timers with other timeout implementations).
      Kévin Dunglas
    • Fixed bug GH-14003 (Broken cleanup of unfinished calls with callable convert parameters).
      ilutov
    • Fixed bug GH-14013 (Erroneous dnl appended in configure).
      Peter Kokot
    • Fixed bug GH-10232 (If autoloading occurs during constant resolution filename and lineno are identified incorrectly).
      ranvis
    • Fixed bug GH-13727 (Missing void keyword).
      Peter Kokot

  • fibers

    • Fixed bug GH-13903 (ASAN false positive underflow when executing copy()).
      nielsdos

  • fileinfo

    • Fixed bug GH-13795 (Test failing in ext/fileinfo/tests/bug78987.phpt on big-endian PPC).
      orlitzky

  • fpm

    • Fixed bug GH-13563 (Setting bool values via env in FPM config fails).
      Jakub Zelenka

  • intl

    • Fixed build for icu 74 and onwards.
      dunglas

  • mysqlnd

    • Fix shift out of bounds on 32-bit non-fast-path platforms.
      nielsdos

  • opcache

    • Fixed bug GH-13433 (Segmentation Fault in zend_class_init_statics when using opcache.preload).
      nielsdos
    • Fixed incorrect assumptions across compilation units for static calls.
      ilutov

  • openssl

    • Fixed bug GH-10495 (feof on OpenSSL stream hangs indefinitely).
      Jakub Zelenka

  • pdo sqlite

    • Fix GH-13984 (Buffer size is now checked before memcmp).
      Saki Takamachi
    • Fix GH-13998 (Manage refcount of agg_context->val correctly).
      Saki Takamachi

  • phar

    • Fixed bug GH-13836 (Renaming a file in a Phar to an already existing filename causes a NULL pointer dereference).
      nielsdos
    • Fixed bug GH-13833 (Applying zero offset to null pointer in zend_hash.c).
      nielsdos
    • Fix potential NULL pointer dereference before calling EVP_SignInit.
      icy17

  • phpdbg

    • Fixed bug GH-13827 (Null pointer access of type 'zval' in phpdbg_frame).
      nielsdos

  • posix

    • Fix usage of reentrant functions in ext/posix.
      Arnaud

  • session

    • Fixed bug GH-13856 (Member access within null pointer of type 'ps_files' in ext/session/mod_files.c).
      nielsdos
    • Fixed bug GH-13891 (memleak and segfault when using ini_set with session.trans_sid_hosts).
      nielsdos
      kamil-tekiela
    • Fixed buffer _read/_write size limit on windows for the file mode.
      David Carlier

  • streams

    • Fixed file_get_contents() on Windows fails with "errno=22 Invalid argument".
      Damian Wójcik
    • Fixed bug GH-13264 (Part 1 - Memory leak on stream filter failure).
      Jakub Zelenka
    • Fixed bug GH-13860 (Incorrect PHP_STREAM_OPTION_CHECK_LIVENESS case in ext/openssl/xp_ssl.c - causing use of dead socket).
      nielsdos
    • Fixed bug GH-11678 (Build fails on musl 1.2.4 - lfs64).
      Arnaud

  • treewide

    • Fix gcc-14 Wcalloc-transposed-args warnings.
      Cristian Rodríguez

PHP 8.3


  Represents a security release