Software 43918 Published by

PHP 8.3.27 Release Candidate 1 has been announced. This update includes numerous enhancements and bug fixes across various components of the PHP ecosystem, addressing issues related to security, serialization, and performance. 



PHP 8.3.27 RC1 released

PHP 8.3.27 Release Candidate 1 has been announced by Eric Mann.

The release notes for this version highlight a multitude of enhancements and fixes across various components of the PHP ecosystem. In terms of core functionality, several critical bugs have been addressed, including a security vulnerability related to object properties loading (GH-19765) and a hard timeout issue with the --enable-zend-max-execution-timers flag.

Other notable changes in the core include the resolution of issues related to serialization recursion, data loss during serialize/deserialize operations, and crashes caused by incorrect handling of return values. Additionally, bugs affecting the handling of userland arrays and array_unique assertions have been fixed.

The CLI (Command-Line Interface) server has also seen improvements, with useless error logs being eliminated due to EAGAIN issues in CLI server workers with PHP_CLI_SERVER_WORKERS enabled.

In terms of specific extensions, several significant bugs have been addressed across various components. The Curl extension saw fixes related to cloning and building versions 8.16, while the Date extension resolved an issue with format strings for ::createFromFormat. The DBA (Database Abstraction Layer) component fixed a bug affecting fetch operations, and the GD image processing library resolved a memory leak in the imagefttext() function.

The MySQLnd database driver has been improved by resolving an issue where it fails to take IPv6 addresses as parameters when compiled with mysqlnd. Phar (PHAR archives) has seen fixes for memory leaks related to tar header writing failures and zip signature application issues.

Furthermore, the SimpleXML extension resolved a bug affecting XML parsing and fixed a memory leak in the SoapServer component. The Standard library has addressed several critical issues, including crashes caused by cloning objects during serialization and data loss during serialize/deserialize operations.

Finally, the Streams component has seen improvements with fixes for issues related to error handling in main, COW (Copy-On-Write) violations, and non-seekable streams. The XMLReader extension resolved a memory leak issue when encountering RelaxNG schema failures, while the Zip library fixed bugs affecting pattern overflows in zip addGlob operations and memory leaks in setEncryptionName()/setEncryptionIndex() functions.

The Zlib compression library has also been improved by resolving an issue with double free errors on gzopen. These updates aim to enhance stability, security, and overall performance of PHP 8.3.27 Release Candidate 1, marking a significant step forward for the PHP development community.

You can download the release candidate from the GitHub page below:

php-8.3.27RC1

Tag for php-8.3.27RC1

Release php-8.3.27RC1 · php/php-src