The PHP team has released the first release candidate for PHP 8.3.29, which is now available for testing. One key update involves syncing boost.context files to version 1.86.0, ensuring consistent features and improvements across context-handling libraries. The release also addresses several security issues, including bugs in the core and Bz2, as well as a potential crash related to stream filters. Additionally, various bug fixes have been applied to other areas of PHP, such as DOM, Fibers, FTP, and more.

PHP 8.3.29 RC1 released

The PHP team has announced the release candidate for PHP 8.3.29 for testing. One important update involves syncing the boost.context files with its latest release, 1.86.0. This makes sure you're getting consistent features and improvements across the board when using advanced context-handling libraries.

Security was also high on their list. The Core received fixes for issues like GH-20435 (problems involving SensitiveParameter and named args) and GH-20286 (the use-after-destroy bug during stream_close). And this release wasn't just about the main part of PHP; Bz2 was addressed too, fixing potential crashes related to stream filters. There is also a fix for how static constructors for dates handle classes that cannot be instantiated.

The DOM component has a patch now to prevent C14NFile() from mishandling inputs without NUL bytes checks. Fibers users should breathe easier knowing that GH-20483 (the ASAN stack overflow bug when fiber.stack_size is too small) is fixed up.

Other areas like FTP, GD, Intl, LibXML, MbString, MySQLnd, Opcache, SPL, Tidy, XML, and Zip have also been cleaned up with various bug fixes applied.

Release php-8.3.29RC1 · php/php-src

Tag for php-8.3.29RC1

Release php-8.3.29RC1 · php/php-src