PHP 8.3.2 Release Announcement

The PHP development team announces the immediate availability of PHP 8.3.2. This is a bug fix release.

All PHP 8.3 users are encouraged to upgrade to this version.

For source downloads of PHP 8.3.2 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code

• PHP 8.3.2 (tar.gz)
  sha256: decf0f51e5415b21fb6350753e45b6c3be5cc0868e4ec561e5c89326c8e6ef16
• PHP 8.3.2 (tar.bz2)
  sha256: 582b3c837a8d952efffe274a5e49706c43a88c162830c2a8c358089fe7449284
• PHP 8.3.2 (tar.xz)
  sha256: 4ffa3e44afc9c590e28dc0d2d31fc61f0139f8b335f11880a121b9f9b9f0634e

Change Log

• core
  • Fixed bug GH-12953 (false positive SSA integrity verification failed when loading composer classmaps with more than 11k elements).
  • Fixed bug GH-12999 (zend_strnlen build when strnlen is unsupported).
  • Fixed bug GH-12966 (missing cross-compiling 3rd argument so Autoconf doesn't emit warnings).
  • Fixed bug GH-12854 (8.3 - as final trait-used method does not correctly report visibility in Reflection).
• cli
  • Fix incorrect timeout in built-in web server when using router script and max_input_time.
• dom
  • Fixed bug GH-12870 (Creating an xmlns attribute results in a DOMException).
  • Fix crash when toggleAttribute() is used without a document.
  • Fix crash in adoptNode with attribute references.
  • Fixed bug GH-13012 (DOMNode::isEqualNode() is incorrect when attribute order is different).
• ffi
  • Fixed bug GH-9698 (stream_wrapper_register crashes with FFI\CData).
  • Fixed bug GH-12905 (FFI::new interacts badly with observers).
• gd
  • Fixed GH-13082 undefined behavior with GdFont instances handling with imageload* and imagechar*.
• intl
  • Fixed GH-12943 (IntlDateFormatter::__construct accepts 'C' as valid locale).
• hash
  • Fixed bug GH-12936 (hash() function hangs endlessly if using sha512 on strings >= 4GiB).
• mbstring
  • When operating on a string with invalid encoding, mb_substr (as well as mb_strstr and its variants) defines character indices in the same way as other mbstring functions such as mb_strpos.
• odbc
  • Fix crash on Apache shutdown with persistent connections.
• opcache
  • Fixed oss-fuzz #64727 (JIT undefined array key warning may overwrite DIM with NULL when DIM is the same var as result).
  • Added workaround for SELinux mprotect execheap issue. See https://bugzilla.kernel.org/show_bug.cgi?id=218258.
• openssl
  • Fixed bug GH-12987 (openssl_csr_sign might leak new cert on error).
• pdo
  • Fix GH-12969 (Fixed PDO::getAttribute() to get PDO::ATTR_STRINGIFY_FETCHES).
• pdo_odbc
  • Fixed bug GH-12767 (Unable to turn on autocommit mode with setAttribute()).
• pgsql
  • Fixed auto_reset_persistent handling and allow_persistent type.
  • Fixed bug GH-12974 (Apache crashes on shutdown when using pg_pconnect()).
• phar
  • Fixed bug #77432 (Segmentation fault on including phar file).
• phpdbg
  • Fixed bug GH-12962 (Double free of init_file in phpdbg_prompt.c).
• simplexml
  • Fix getting the address of an uninitialized property of a SimpleXMLElement resulting in a crash.
  • Fixed bug GH-12929 (SimpleXMLElement with stream_wrapper_register can segfault).
• tidy
  • Fixed bug GH-12980 (tidynode.props.attribute is missing "Boolean Attributes" and empty attributes).