PHP 8.3.15 Release Announcement

The PHP development team announces the immediate availability of PHP 8.3.15. This is a bug fix release.

All PHP 8.3 users are encouraged to upgrade to this version.

For source downloads of PHP 8.3.15 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code

• PHP 8.3.15 (tar.gz)
  sha256: 67073c3c9c56c86461e0715d9e1806af5ddffe8e6e2eb9781f7923bbb5bd67fa
• PHP 8.3.15 (tar.bz2)
  sha256: b1675a4ff730b5811b8e6a7687488c42e835e156a99776aa3e6f017abda3be98
• PHP 8.3.15 (tar.xz)
  sha256: 3df5d45637283f759eef8fc3ce03de829ded3e200c3da278936a684955d2f94f

Change Log

• calendar
  • Fixed jdtogregorian overflow.
  • Fixed cal_to_jd julian_days argument overflow.
• com
  • Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults).
• core
  • Fail early in *nix configuration build script.
  • Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)).
  • Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469).
  • Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs).
  • Fix is_zend_ptr() huge block comparison.
  • Fixed potential OOB read in zend_dirname() on Windows.
• curl
  • Fixed bug GH-16802 (open_basedir bypass using curl extension).
  • Fix various memory leaks in curl mime handling.
• dom
  • Fixed bug GH-16777 (Calling the constructor again on a DOM object after it is in a document causes UAF).
  • Fixed bug GH-16906 (Reloading document can cause UAF in iterator).
• fpm
  • Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status).
• gd
  • Fixed GH-16776 (imagecreatefromstring overflow).
• gmp
  • Fixed bug GH-16890 (array_sum() with GMP can loose precision (LLP64)).
• hash
  • Fixed GH-16711: Segfault in mhash().
• opcache
  • Fixed bug GH-16770 (Tracing JIT type mismatch when returning UNDEF).
  • Fixed bug GH-16851 (JIT_G(enabled) not set correctly on other threads).
  • Fixed bug GH-16902 (Set of opcache tests fail zts+aarch64).
• openssl
  • Prevent unexpected array entry conversion when reading key.
  • Fix various memory leaks related to openssl exports.
  • Fix memory leak in php_openssl_pkey_from_zval().
• pdo
  • Fixed memory leak of `setFetchMode()`.
• phar
  • Fixed bug GH-16695 (phar:// tar parser and zero-length file header blocks).
• phpdbg
  • Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()).
• sapi
  • Fixed bug GH-16998 (UBSAN warning in rfc1867).
• simplexml
  • Fixed bug GH-16808 (Segmentation fault in RecursiveIteratorIterator ->current() with a xml element input).
• soap
  • Fix make check being invoked in ext/soap.
• standard
  • Fixed bug GH-16905 (Internal iterator functions can't handle UNDEF properties).
  • Fixed bug GH-16957 (Assertion failure in array_shift with self-referencing array).
• streams
  • Fixed network connect poll interuption handling.
• windows
  • Fixed bug GH-16849 (Error dialog causes process to hang).