Skip to content

Commit 8ed610b

Browse files
ericmannericmann
committed
Announce PHP 8.3.29
1 parent 0fa26a1 commit 8ed610b

File tree

7 files changed

+188
-11
lines changed

7 files changed

+188
-11
lines changed

‎ChangeLog-8.php‎

Lines changed: 103 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2387,6 +2387,109 @@
23872387

23882388
<a id="PHP_8_3"></a>
23892389

2390+
<section class="version" id="8.3.29"><!-- {{{ 8.3.29 -->
2391+
<h3>Version 8.3.29</h3>
2392+
<b><?php release_date('18-Dec-2025'); ?></b>
2393+
<ul><li>Core:
2394+
<ul>
2395+
<li>Sync all boost.context files with release 1.86.0.</li>
2396+
<li>Fixed bug <?php githubissuel('php/php-src', 20435); ?> (SensitiveParameter doesn't work for named argument passing to variadic parameter).</li>
2397+
<li>Fixed bug <?php githubissuel('php/php-src', 20286); ?> (use-after-destroy during userland stream_close()).</li>
2398+
</ul></li>
2399+
<li>Bz2:
2400+
<ul>
2401+
<li>Fix assertion failures resulting in crashes with stream filter object parameters.</li>
2402+
</ul></li>
2403+
<li>Date:
2404+
<ul>
2405+
<li>Fix crashes when trying to instantiate uninstantiable classes via date static constructors.</li>
2406+
</ul></li>
2407+
<li>DOM:
2408+
<ul>
2409+
<li>Fix missing NUL byte check on C14NFile().</li>
2410+
</ul></li>
2411+
<li>Fibers:
2412+
<ul>
2413+
<li>Fixed bug <?php githubissuel('php/php-src', 20483); ?> (ASAN stack overflow with fiber.stack_size INI small value).</li>
2414+
</ul></li>
2415+
<li>FTP:
2416+
<ul>
2417+
<li>Fixed bug <?php githubissuel('php/php-src', 20601); ?> (ftp_connect overflow on timeout).</li>
2418+
</ul></li>
2419+
<li>GD:
2420+
<ul>
2421+
<li>Fixed bug <?php githubissuel('php/php-src', 20511); ?> (imagegammacorrect out of range input/output values).</li>
2422+
<li>Fixed bug <?php githubissuel('php/php-src', 20602); ?> (imagescale overflow with large height values).</li>
2423+
</ul></li>
2424+
<li>Intl:
2425+
<ul>
2426+
<li>Fixed bug <?php githubissuel('php/php-src', 20426); ?> (Spoofchecker::setRestrictionLevel() error message suggests missing constants).</li>
2427+
</ul></li>
2428+
<li>LibXML:
2429+
<ul>
2430+
<li>Fix some deprecations on newer libxml versions regarding input buffer/parser handling.</li>
2431+
</ul></li>
2432+
<li>MbString:
2433+
<ul>
2434+
<li>Fixed bug <?php githubissuel('php/php-src', 20491); ?> (SLES15 compile error with mbstring oniguruma).</li>
2435+
<li>Fixed bug <?php githubissuel('php/php-src', 20492); ?> (mbstring compile warning due to non-strings).</li>
2436+
</ul></li>
2437+
<li>MySQLnd:
2438+
<ul>
2439+
<li>Fixed bug <?php githubissuel('php/php-src', 20528); ?> (Regression breaks mysql connexion using an IPv6 address enclosed in square brackets).</li>
2440+
</ul></li>
2441+
<li>Opcache:
2442+
<ul>
2443+
<li>Fixed bug <?php githubissuel('php/php-src', 20329); ?> (opcache.file_cache broken with full interned string buffer).</li>
2444+
</ul></li>
2445+
<li>PDO:
2446+
<ul>
2447+
<li>Fixed <?php githubsecurityl('php/php-src', '8xr5-qppj-gvwj'); ?> (PDO quoting result null deref). (CVE-2025-14180)</li>
2448+
</ul></li>
2449+
<li>Phar:
2450+
<ul>
2451+
<li>Fixed bug <?php githubissuel('php/php-src', 20442); ?> (Phar does not respect case-insensitiveness of __halt_compiler() when reading stub).</li>
2452+
<li>Fix broken return value of fflush() for phar file entries.</li>
2453+
<li>Fix assertion failure when fseeking a phar file out of bounds.</li>
2454+
</ul></li>
2455+
<li>PHPDBG:
2456+
<ul>
2457+
<li>Fixed ZPP type violation in phpdbg_get_executable() and phpdbg_end_oplog().</li>
2458+
</ul></li>
2459+
<li>SPL:
2460+
<ul>
2461+
<li>Fixed bug <?php githubissuel('php/php-src', 20614); ?> (SplFixedArray incorrectly handles references in deserialization).</li>
2462+
</ul></li>
2463+
<li>Standard:
2464+
<ul>
2465+
<li>Fix memory leak in array_diff() with custom type checks.</li>
2466+
<li>Fixed bug <?php githubissuel('php/php-src', 20583); ?> (Stack overflow in http_build_query via deep structures).</li>
2467+
<li>Fixed <?php githubsecurityl('php/php-src', 'www2-q4fc-65wf'); ?> (Null byte termination in dns_get_record()).</li>
2468+
<li>Fixed <?php githubsecurityl('php/php-src', 'h96m-rvf9-jgm2'); ?> (Heap buffer overflow in array_merge()). (CVE-2025-14178)</li>
2469+
<li>Fixed <?php githubsecurityl('php/php-src', '3237-qqm7-mfv7'); ?> (Information Leak of Memory in getimagesize). (CVE-2025-14177)</li>
2470+
</ul></li>
2471+
<li>Tidy:
2472+
<ul>
2473+
<li>Fixed bug <?php githubissuel('php/php-src', 20374); ?> (PHP with tidy and custom-tags).</li>
2474+
</ul></li>
2475+
<li>XML:
2476+
<ul>
2477+
<li>Fixed bug <?php githubissuel('php/php-src', 20439); ?> (xml_set_default_handler() does not properly handle special characters in attributes when passing data to callback).</li>
2478+
</ul></li>
2479+
<li>Zip:
2480+
<ul>
2481+
<li>Fix crash in property existence test.</li>
2482+
<li>Don't truncate return value of zip_fread() with user sizes.</li>
2483+
</ul></li>
2484+
<li>Zlib:
2485+
<ul>
2486+
<li>Fix assertion failures resulting in crashes with stream filter object parameters.</li>
2487+
</ul></li>
2488+
</ul>
2489+
<!-- }}} --></section>
2490+
2491+
2492+
23902493
<section class="version" id="8.3.28"><!-- {{{ 8.3.28 -->
23912494
<h3>Version 8.3.28</h3>
23922495
<b><?php release_date('20-Nov-2025'); ?></b>

‎archive/archive.xml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@
99
<uri>http://php.net/contact</uri>
1010
<email>[email protected]</email>
1111
</author>
12+
<xi:include href="entries/2025-12-18-2.xml"/>
1213
<xi:include href="entries/2025-12-18-1.xml"/>
1314
<xi:include href="entries/2025-12-17-1.xml"/>
1415
<xi:include href="entries/2025-11-30-1.xml"/>

‎archive/entries/2025-12-18-2.xml‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
<?xml version="1.0" encoding="utf-8"?>
2+
<entry xmlns="http://www.w3.org/2005/Atom">
3+
<title>PHP 8.3.29 Released!</title>
4+
<id>https://www.php.net/archive/2025.php#2025-12-18-2</id>
5+
<published>2025-12-18T15:37:23+00:00</published>
6+
<updated>2025-12-18T15:37:23+00:00</updated>
7+
<link href="https://www.php.net/index.php#2025-12-18-2" rel="alternate" type="text/html"/>
8+
<link href="https://www.php.net/archive/2025.php#2025-12-18-2" rel="via" type="text/html"/>
9+
<category term="releases" label="New PHP release"/>
10+
<category term="frontpage" label="PHP.net frontpage news"/>
11+
<content type="xhtml">
12+
<div xmlns="http://www.w3.org/1999/xhtml"><p>The PHP development team announces the immediate availability of PHP 8.3.29. This is a security release.</p>
13+
14+
<p>All PHP 8.3 users are encouraged to upgrade to this version.</p>
15+
16+
<p>For source downloads of PHP 8.3.29 please visit our <a href="https://www.php.net/downloads.php">downloads page</a>,
17+
Windows source and binaries can be found on <a href="https://windows.php.net/download/">windows.php.net/download/</a>.
18+
The list of changes is recorded in the <a href="https://www.php.net/ChangeLog-8.php#8.3.29">ChangeLog</a>.
19+
</p> </div>
20+
</content>
21+
</entry>

‎include/release-qa.php‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -75,12 +75,12 @@
7575
'active' => true,
7676
'release' => [
7777
'type' => 'RC',
78-
'number' => 1,
79-
'sha256_bz2' => 'b82bc56afcdd406f2f28611612bb51b21805b7cf222c97d6bfa2fdc1918145b0',
80-
'sha256_gz' => 'c74b7e27b06ec12e8d1e9e04baac084bd5ff1aff41cc640ab431a7a51eac8914',
81-
'sha256_xz' => 'f405920ef2281b47a97bd6972c78917922c9c174e00576791a96f32713696d56',
78+
'number' => 0,
79+
'sha256_bz2' => '',
80+
'sha256_gz' => '',
81+
'sha256_xz' => '',
8282
'date' => '04 Dec 2025',
83-
'baseurl' => 'https://downloads.php.net/~eric/',
83+
'baseurl' => 'https://downloads.php.net/',
8484
],
8585
],
8686

‎include/releases.inc‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,42 @@
22
$OLDRELEASES = array (
33
8 =>
44
array (
5+
'8.3.28' =>
6+
array (
7+
'announcement' =>
8+
array (
9+
'English' => '/releases/8_3_28.php',
10+
),
11+
'tags' =>
12+
array (
13+
),
14+
'date' => '20 Nov 2025',
15+
'source' =>
16+
array (
17+
0 =>
18+
array (
19+
'filename' => 'php-8.3.28.tar.gz',
20+
'name' => 'PHP 8.3.28 (tar.gz)',
21+
'sha256' => '2f7dda35bbef2842ec61510aaefe52c78361a61f9cfabd99a7789204d6383d9f',
22+
'date' => '20 Nov 2025',
23+
),
24+
1 =>
25+
array (
26+
'filename' => 'php-8.3.28.tar.bz2',
27+
'name' => 'PHP 8.3.28 (tar.bz2)',
28+
'sha256' => 'd5b385ee351ec463c85d47eeb53b51156f3483eaf3ff43a7ad5080c2b6d4c557',
29+
'date' => '20 Nov 2025',
30+
),
31+
2 =>
32+
array (
33+
'filename' => 'php-8.3.28.tar.xz',
34+
'name' => 'PHP 8.3.28 (tar.xz)',
35+
'sha256' => '25e3860f30198a386242891c0bf9e2955931f7b666b96c3e3103d36a2a322326',
36+
'date' => '20 Nov 2025',
37+
),
38+
),
39+
'museum' => false,
40+
),
541
'8.5.0' =>
642
array (
743
'announcement' =>

‎include/version.inc‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -46,13 +46,13 @@ $RELEASES = (function () {
4646

4747
/* PHP 8.3 Release */
4848
$data['8.3'] = [
49-
'version' => '8.3.28',
50-
'date' => '20 Nov 2025',
51-
'tags' => [], // Set to ['security'] for security releases.
49+
'version' => '8.3.29',
50+
'date' => '18 Dec 2025',
51+
'tags' => ['security'], // Set to ['security'] for security releases.
5252
'sha256' => [
53-
'tar.gz' => '2f7dda35bbef2842ec61510aaefe52c78361a61f9cfabd99a7789204d6383d9f',
54-
'tar.bz2' => 'd5b385ee351ec463c85d47eeb53b51156f3483eaf3ff43a7ad5080c2b6d4c557',
55-
'tar.xz' => '25e3860f30198a386242891c0bf9e2955931f7b666b96c3e3103d36a2a322326',
53+
'tar.gz' => '8565fa8733c640b60da5ab4944bf2d4081f859915b39e29b3af26cf23443ed97',
54+
'tar.bz2' => 'c7337212e655325d499ea8108fa76f69ddde2fff7cb0fad36aa63eed540cb8a5',
55+
'tar.xz' => 'f7950ca034b15a78f5de9f1b22f4d9bad1dd497114d175cb1672a4ca78077af5',
5656
]
5757
];
5858

‎releases/8_3_29.php‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
<?php
2+
$_SERVER['BASE_PAGE'] = 'releases/8_3_29.php';
3+
include_once __DIR__ . '/../include/prepend.inc';
4+
site_header('PHP 8.3.29 Release Announcement');
5+
?>
6+
<h1>PHP 8.3.29 Release Announcement</h1>
7+
8+
<p>The PHP development team announces the immediate availability of PHP 8.3.29. This is a security release.</p>
9+
10+
<p>All PHP 8.3 users are encouraged to upgrade to this version.</p>
11+
12+
<p>For source downloads of PHP 8.3.29 please visit our <a href="https://www.php.net/downloads.php">downloads page</a>,
13+
Windows source and binaries can be found on <a href="https://windows.php.net/download/">windows.php.net/download/</a>.
14+
The list of changes is recorded in the <a href="https://www.php.net/ChangeLog-8.php#8.3.29">ChangeLog</a>.
15+
</p>
16+
<?php site_footer();

0 commit comments

Comments
 (0)