PHP 8.3.17 Release Announcement

The PHP development team announces the immediate availability of PHP 8.3.17. This is a bug fix release.

All PHP 8.3 users are encouraged to upgrade to this version.

For source downloads of PHP 8.3.17 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code

• PHP 8.3.17 (tar.gz)
  sha256: e2bbeca5fa62ff27d6ba6241619cf92a80e5346556be187aa962b91bd0eb9df1
• PHP 8.3.17 (tar.bz2)
  sha256: 4e034dca7ab16fc6062c8c53067528f4ecaa246bf22310e6841f7008094264ac
• PHP 8.3.17 (tar.xz)
  sha256: 6158ee678e698395da13d72c7679a406d2b7554323432f14d37b60ed87d8ccfb

Change Log

• core
  • Fixed bug GH-16892 (ini_parse_quantity() fails to parse inputs starting with 0x0b).
  • Fixed bug GH-16886 (ini_parse_quantity() fails to emit warning for 0x+0).
  • Fixed bug GH-17214 (Relax final+private warning for trait methods with inherited final).
  • Fixed NULL arithmetic during system program execution on Windows.
  • Fixed potential OOB when checking for trailing spaces on Windows.
  • Fixed bug GH-17408 (Assertion failure Zend/zend_exceptions.c).
  • Fix may_have_extra_named_args flag for ZEND_AST_UNPACK.
  • Fix NULL arithmetic in System V shared memory emulation for Windows.
• dom
  • Fixed bug GH-17500 (Segfault with requesting nodeName on nameless doctype).
• enchant
  • Fix crashes in enchant when passing null bytes.
• ftp
  • Fixed bug GH-16800 (ftp functions can abort with EINTR).
• gd
  • Fixed bug GH-17349 (Tiled truecolor filling looses single color transparency).
  • Fixed bug GH-17373 (imagefttext() ignores clipping rect for palette images).
  • Ported fix for libgd 223 (gdImageRotateGeneric() does not properly interpolate).
• intl
  • Fixed bug GH-11874 (intl causing segfault in docker images).
  • Fixed bug GH-17469 (UConverter::transcode always emit E_WARNING on invalid encoding).
• opcache
  • Fixed bug GH-17307 (Internal closure causes JIT failure).
  • Fixed bug GH-17564 (Potential UB when reading from / writing to struct padding).
• pdo
  • Fixed a memory leak when the GC is used to free a PDOStatment.
  • Fixed a crash in the PDO Firebird Statement destructor.
  • Fixed UAFs when changing default fetch class ctor args.
• phar
  • Fixed bug GH-17518 (offset overflow phar extractTo()).
• phpdbg
  • Fix crashes in function registration + test.
• session
  • Fix type confusion with session SID constant.
  • Fixed bug GH-17541 (ext/session NULL pointer dereferencement during ID reset).
• simplexml
  • Fixed bug GH-17409 (Assertion failure Zend/zend_hash.c:1730).
• snmp
  • Fixed bug GH-17330 (SNMP::setSecurity segfault on closed session).
• spl
  • Fixed bug GH-17463 (crash on SplTempFileObject::ftruncate with negative value).
• zip
  • Fixed bug GH-17139 (Fix zip_entry_name() crash on invalid entry).