PHP Release 8.3.13

    PHP 8.3.13 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.3.13. This is a bug fix release.

    All PHP 8.3 users are encouraged to upgrade to this version.

    For source downloads of PHP 8.3.13 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.3.13 (tar.gz)
    SHA256: ffe34317d2688ed3161809c90ca4135c84ebfdfd12a46880a264d7d1e1d7739a
    PHP 8.3.13 (tar.bz2)
    SHA256: c7791c82e1a554ccaf84a40ba71cc1417ba9af67fb5b39780837fd7c7eb6f124
    PHP 8.3.13 (tar.xz)
    SHA256: 89adb978cca209124fe53fd6327bc4966ca21213a7fa2e9504f854e340873018
    Change Logs
    calendar
    • Fixed GH-16240: jdtounix overflow on argument value.
    • Fixed GH-16241: easter_days/easter_date overflow on year argument.
    • Fixed GH-16263: jddayofweek overflow.
    • Fixed GH-16234: jewishtojd overflow.
    cli
    • Fixed bug GH-16137: duplicate http headers when set several times by the client.
    core
    • Fixed bug GH-16054 (Segmentation fault when resizing hash table iterator list while adding).
    • Fixed bug GH-15905 (Assertion failure for TRACK_VARS_SERVER).
    • Fixed bug GH-15907 (Failed assertion when promoting Serialize deprecation to exception).
    • Fixed bug GH-15851 (Segfault when printing backtrace during cleanup of nested generator frame).
    • Fixed bug GH-15866 (Core dumped in Zend/zend_generators.c).
    • Fixed bug GH-16188 (Assertion failure in Zend/zend_exceptions.c).
    • Fixed bug GH-16233 (Observer segfault when calling user function in internal function via trampoline).
    dom
    • Fixed bug GH-16039 (Segmentation fault (access null pointer) in ext/dom/parentnode/tree.c).
    • Fixed bug GH-16149 (Null pointer dereference in DOMElement->getAttributeNames()).
    • Fixed bug GH-16151 (Assertion failure in ext/dom/parentnode/tree.c).
    • Fixed bug GH-16150 (Use after free in php_dom.c).
    • Fixed bug GH-16152 (Memory leak in DOMProcessingInstruction/DOMDocument).
    json
    • Fixed bug GH-15168 (stack overflow in json_encode()).
    gd
    • Fixed bug GH-16232 (bitshift overflow on wbmp file content reading / fix backport from upstream).
    • Fixed bug GH-12264 (overflow/underflow on imagerotate degrees value)
    • Fixed bug GH-16274 (imagescale underflow on RBG channels / fix backport from upstream).
    ldap
    • Fixed bug GH-16032 (Various NULL pointer dereferencements in ldap_modify_batch()).
    • Fixed bug GH-16101 (Segfault in ldap_list(), ldap_read(), and ldap_search() when LDAPs array is not a list).
    • Fix GH-16132 (php_ldap_do_modify() attempts to free pointer not allocated by ZMM.).
    • Fix GH-16136 (Memory leak in php_ldap_do_modify() when entry is not a proper dictionary).
    mbstring
    • Fixed bug GH-16261 (Reference invariant broken in mb_convert_variables()).
    openssl
    • Fixed stub for openssl_csr_new.
    pcre
    • Fixed bug GH-16189 (underflow on offset argument).
    • Fixed bug GH-16184 (UBSan address overflowed in ext/pcre/php_pcre.c).
    phpdbg
    • Fixed bug GH-15901 (phpdbg: Assertion failure on i funcs).
    • Fixed bug GH-16181 (phpdbg: exit in exception handler reports fatal error).
    reflection
    • Fixed bug GH-16187 (Assertion failure in ext/reflection/php_reflection.c).
    sapi
    • Fixed bug GH-15395 (php-fpm: zend_mm_heap corrupted with cgi-fcgi request).
    simplexml
    • Fixed bug GH-15837 (Segmentation fault in ext/simplexml/simplexml.c).
    sockets
    • Fixed bug GH-16267 (socket_strerror overflow on errno argument).
    soap
    • Fixed bug #73182 (PHP SOAPClient does not support stream context HTTP headers in array form).
    • Fixed bug #62900 (Wrong namespace on xsd import error message).
    • Fixed bug GH-15711 (SoapClient can't convert BackedEnum to scalar value).
    • Fixed bug GH-16237 (Segmentation fault when cloning SoapServer).
    • Fix Soap leaking http_msg on error.
    • Fixed bug GH-16256 (Assertion failure in ext/soap/php_encoding.c:460).
    • Fixed bug GH-16259 (Soap segfault when classmap instantiation fails).
    spl
    • Fixed bug GH-15918 (Assertion failure in ext/spl/spl_fixedarray.c).
    standard
    • Fixed bug GH-16053 (Assertion failure in Zend/zend_hash.c).
    • Fixed bug GH-15169 (stack overflow when var serialization in ext/standard/var).
    streams
    • Fixed bugs GH-15908 and GH-15026 (leak / assertion failure in streams.c).
    • Fixed bug GH-15980 (Signed integer overflow in main/streams/streams.c).
    tsrm
    • Prevent closing of unrelated handles.
    windows
    • Fixed minimal Windows version.
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top