PHP 8.3.24 RC1 released

Published by

The first release candidate for PHP 8.3.24, designated as php-8.3.24 RC1, has been made available for testing. This release addresses a variety of bugs across multiple components, including calendar functions, core PHP, LDAP, MbString, OCI8, Opcache, OpenSSL, PCNTL, Phar, SOAP, SPL, Standard, and Zip functionalities.

Key fixes in this version include:
- Calendar: Resolution of a jewishtojd overflow issue related to year arguments.
- Core: Fixes for memory management issues, warnings related to re2c, and other bugs that could lead to crashes or undefined behavior.
- Curl: Corrections for memory leaks and improper string releases during callback executions.
- LDAP: Resolution of assertion issues triggered by erroneous empty request OIDs.
- MbString: Fixes for integer overflow vulnerabilities in mb_split.
- OCI8: Addressing memory leaks caused by certain flags.
- Opcache: Improvements to prevent preloading and JIT-related segmentation faults.
- OpenSSL: Fixing issues with client peer certificate retrieval in socket servers.
- PCNTL: Resolutions for fatal errors during process handling when using execution timers.
- Phar: Fixes for double free issues and crashes related to file handling.
- SOAP: Improvements to memory management and socket closure upon object destruction.
- SPL: Corrections for iterator-related crashes.
- Standard: Adjustments to misleading error messages and overflow in pack() operations.
- Streams: Ensuring proper error handling for fgets() and stream_get_line() functions.
- Zip: Fixes for memory leaks when handling excessively long paths.

This release emphasizes stability and performance improvements, alongside addressing security vulnerabilities and memory management issues. Developers are encouraged to test this release candidate and provide feedback before the final version is released.

As PHP continues to evolve, future updates are expected to enhance functionality, improve performance, and address emerging security concerns, further solidifying its role as a leading server-side scripting language. The community is actively engaged in the development process, ensuring that updates reflect user needs and the latest technological advancements

PHP 8.3.24 RC1 released

The first release candidate for PHP 8.3.24 has been released for testing, fixing several bugs in various areas, including calendar, core, LDAP, MbString, OCI8, Opcache, OpenSSL, PCNTL, Phar, SOAP, SPL, Standard, and Zip. These fixes include addressing issues with jewishtojd overflow, using after free with weakmaps, OSS-Fuzz, re2c warnings, curl, LDAP, MbString, OCI8, ocache, OpenSSL, PCNTL, Phar, SOAP, SPL, standard, printf(), RCN violations, pack() overflow, fgets() and stream_get_line(), and zip. The release addresses issues with oci8, ocache, phar, SOAP, SPL, standard, fgets(), stream_get_line(), and zip.

PHP 8.3.24 RC1 released @ Linux Compatible