Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:123115 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by qa.php.net (Postfix) with ESMTPS id ABEDE1A009C for ; Thu, 11 Apr 2024 16:08:41 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1712851754; bh=0RerQgytiqMIdu0/aLRxfGAN1eFuj5THGV0opsptxsE=; h=Date:Subject:To:References:From:In-Reply-To:From; b=M7v2k7qm/UHM9au8Mny6gjJkqiKkP298wBZBhQ1RXMD9BKn/IL8GImjw3kgE0cSPD yW3ooeaFlPucADq4UgzZhYXX6mJQy04uyVkTkAVgJrR/2/ODrnMtAITUNatAjSnAA5 c56/SnXec1Bzyfgaw208REoZMRfpVnZ8yGkkLdpbpCbtZ/98U6Vfdy5EnbpNWGLECi 5K/r4r+XpsEjoqokCKW9MzNsq/3d8FiA51GxuH/dX4sFNpjWc1LoFiI1XHL3hqkD5e MPzOq9BYj2ogCSA/x7cFvcbonbu1832iPuJnhulcKMe07tk6GMRPNvGQNTIG9ecpKU fQW7YN4CDCznA== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 5FBB2180699 for ; Thu, 11 Apr 2024 16:09:13 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: *** X-Spam-Status: No, score=3.8 required=5.0 tests=BAYES_50,DMARC_MISSING, HTML_MESSAGE,SPF_HELO_FAIL,SPF_SOFTFAIL,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from box.sixthree.me (box.sixthree.me [52.24.245.86]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Thu, 11 Apr 2024 16:09:12 +0000 (UTC) Authentication-Results: box.sixthree.me; dkim=none; dkim-atps=neutral Received: from authenticated-user (box.sixthree.me [52.24.245.86]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by box.sixthree.me (Postfix) with ESMTPSA id D799D7EB01 for ; Thu, 11 Apr 2024 09:08:38 -0700 (PDT) Content-Type: multipart/alternative; boundary="------------k4t107Bp4TuSnMkJYo60qpOg" Message-ID: <0dd463e0-1cd6-4ad9-8a63-bf6bb02a9b17@php.net> Date: Thu, 11 Apr 2024 09:08:38 -0700 Precedence: bulk list-help: list-post: List-Id: internals.lists.php.net MIME-Version: 1.0 Subject: Re: [PHP-DEV] PHP 8.3.6 Released To: internals@lists.php.net References: <7051f9b8-6b03-4820-bc26-d3f12949c418@php.net> Content-Language: en-US Autocrypt: addr=ericmann@php.net; keydata= xsFNBFg4q4YBEAD50HOLDAVpW88rUHnX/TYTCLpqmHMKXPjuf1l3ZEkY3PXF6wqmqaWWMPeW JFsik3cMebtLQzsgXHl4xDUBQhOOtdfax2ZKBHQmoUknw2dKkqdkVLh8Xpu8tw00SmcTiAFV CA2+HOqQ+Drq9NUpnMeJpJZiZu84eZbJBEzgabi0s4jf67NH7E3ENFb8DRilcM1aNT0rD1xV KR1spMKmBmOoJ/pj5OlWNH34/qdeqIrvKB46/pFELH8SRiorYTDhQTaS0PlT3LxRqVWo8+Jl gnFIe96p2d7JF1A1DwQUJerRY4789gNYzjW4fh1tc6jtTE2opbLVfbqujHsxrHFKoBO4CPBc Ptzf6TUPxDevvBh9omsd+V5FW7k/VFIiWFQv0RfQe8nwkNjmA0U3TOX3xKrU+59RU6w+uOuQ y564jxg691a7peiQ2Y90FqIVUlEL9Guf8U9ezp1DGo/UhnRNJcPmSwhYRcKMUV53mDqWQW8p 7XXjSqnVVF3cP9bc94UNAf28kXvnJBMGOZwp19dqD7ws+25WM6qQ7u7qQoGZzSI4Wn0ZaXnF rXwQXfY4+R20XSDt3oxGP8h08VSz09Xd3C7XV8Eg+0RrTSXVtZruAdcOIE/AWK4aBpN7yfGl MTfOOoYZa5tPFYf906yE56vtHcfJttJ7CO+kQMIW5PgRVMAE/QARAQABzRxFcmljIE1hbm4g PGVyaWNtYW5uQHBocC5uZXQ+wsGOBBMBCgA4FiEEr9hpH9rt8DvfbkYFY/Fam3FTdsoFAmRj nNgCGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQY/Fam3FTdsqv3BAAhDY7/d3oxt3Y zD5HGdJhqL0Ij6pqBMpW/GbF12eKxnnmz0VitT7lzayD7UHzUzTT8ZwSbrOaH2SIUFMl//vg L4PW7aUpYgSl00mowvazp1CG2085B8H8N1rXJKgUYuQfdmco8qfha0iI6YWH65CSBNupl5ma CBwXk6cX3C2XVJ3AP6rz4bnVJLohc88PQwSX33hWEHYxQh2mJ0Eb40QTB+pS2iU2W2+Mhd33 ryAGrCIZod76uCkNge+vioshDOlKxDA1j77tJiAO3FJkix1LOM13SQmapeqP7HnGfkNPZSNa ZiOcOxM6rPAGk1sBUZSfktnDu4gdW74yC/IcCqyQZVyXV3OVvatkBXHz90yje5zC6YKP3IU/ CUU4XMdWr9KfYpnfi42JF1KT9G8Iv33HbpMikgJrJtHgUxoKXQ0rzoT3gh4jUK8q4OPaCRBV CE3MqVwyc4Joj0/97X4/Hqa78pf874xKNRY5K18NDM+su3WwYfp7kkEpc2YMHDjzUenQZJRK HOIJXgwK0pibSM41okMZFE3o9G8DdMUMQRqeCM/cbpivfmnCAVqGk5VFLYcWxQsq0b6nlqTv 9k+fqH3WtJAS1NDzX1axrJ0tPfKPQlZTvBAZIp6KDfO1MvovnVO21erG33lI2o+0fonX3k6g PuQKbXNZG4QcaSTAV9WUp0HOwU0EWDitHQEQAMW49+DpWQNZIhI6JchxlXEhK374TcZqKjpf 7D9Zdr7zDB2iRD8cKxvMyr566RHpoD/6otd0f267kRVjHTL11TKutSKlwT27+nJcoFRRF1Sh BU2gPj9u1tasUsDPuRXlW/BA8yPePWXdxaizTY7kGxwCo7M2QkSGhHh4m+1AuYhsZYdCudaN uKSNFD6CtxBwKE4Now3svD3TzZJ2L2IxGOUOUw7mq6WJygYIXeYycVUggEbHpYcL35vmbYNb Wqd1Cw0bcjzQ32Yi89u1t9YOtatPgAcMT9LLLgRkD0Fg6YOQuobhsosH2fRy332nuL6QFdk4 Zf1WlKF1PjiYRg3km+QgOipIjK3RfKiA74RrbvUr+zUWW3fN0qzxrF2ub8MyoECPzRjfo8x5 8gl45SV1pXBYlFJpdA0aS+T7upVOY6g6fvFB7n4xl/3aK5uXsH2klKa7TwRtLCAVttGV2dkC PHZxqTNKc0/UvO2rjGKtEMYgpvzoHwtSM6FiWphcgWGiRS7qHBZYcgL7wV9Lkm2ZNRyhtIko UDvkaEZXc3AlIis4cUEJjpGwIeSnViU8Fep9M26zhSwmHYjFD+lburOZAMpCK+wsU214Mlbn QZZhJcTyCnORHnvDUZTwM3XYVLdhfqP8a0sfdg6VkGJo0kht30CMHJzp0EyGt8mOPLyC3LIP ABEBAAHCwXYEGAEKAAkFAlg4rR0CGwwAIQkQY/Fam3FTdsoWIQSv2Gkf2u3wO99uRgVj8Vqb cVN2ylVlD/49gOcib5GxCuYJLYlpYJRKBpptFvfgBsiq2D03w0U7Y+POi+jrHqa2LSeW6DFL GEKgL+1xJCFGKFJ/Cm2eCt4fpGitfaOFgLO/gdjjgPFQsuFm3840sKcXSql4w9W9Z+oPg/9d uL4xDqevuv3mOQO+R1Bt/4V+9vNk01kX1ftMRyMXhlqjPRUUp+tSQTT5KM5uxD3tLCWxcBxE iOjZ94ngiRuFuiNSnZ16GMckEh9Mum1Y+R4wJsRaZeulrmA02aML41IkZTHALRhKyxbDfjVe MURHM5gBhPYUVw9joxnXCzC+BRCDFw7bVL853LwgSq2gXZC0Rfdu2aBtLXWliGdmtv9FwKCL FrECygxbUu2fGB5/aMQ0otV2rgjaigPfhZoEQY0QasAQ4W+CR8fOGURWosoAKpLbeUGd9/zO f253g3XoN13wwTKyjhXKENUPw8ZqvjdPO+tgNnOLUnPO6K10ePbW4vaZdFCdixumxqZPokeB PkBPZq8oeAswkgWahKwQ7ZfgU4HTLMte3NEn/2WZQsLUo68IMaTCKt3AHvGoYi86wtd6/3Db NMxNsWamr8SWzia/1DGM5F1o3ClrZetD+eZN13duF3gI/1x+++5LhWP+qxPPOzBhXZG5zJ2P 3+eRwWuS79ZGfoh6w7uF4A3rkjkKfpAIwrNI2WlAKXWdBQ== In-Reply-To: From: ericmann@php.net This is a multi-part message in MIME format. --------------k4t107Bp4TuSnMkJYo60qpOg Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 4/11/24 08:55, Athos Ribeiro wrote: > On Thu, Apr 11, 2024 at 08:03:31AM -0700, ericmann@php.net wrote: >> The PHP development team announces the immediate availability of PHP >> 8.3.6. This is a security release that addresses CVE-2024-1874, >> CVE-2024-2756, CVE-2024-3096, and CVE-2024-2757. > > Thank you!!! > > May I ask what happened to 8.3.5 and why it was never released? > -- 8.3.5 was frozen at the RC1 stage and we elected to include the fixes for the aforementioned CVEs in this release, bumping things instead to 8.3.6 to avoid any confusion as to why someting was in a stable release that /wasn't/ included in the RC. This is rare but does happen. --------------k4t107Bp4TuSnMkJYo60qpOg Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit
On 4/11/24 08:55, Athos Ribeiro wrote:
On Thu, Apr 11, 2024 at 08:03:31AM -0700, ericmann@php.net wrote:
The PHP development team announces the immediate availability of PHP 8.3.6. This is a security release that addresses CVE-2024-1874,
CVE-2024-2756, CVE-2024-3096, and CVE-2024-2757.

Thank you!!!

May I ask what happened to 8.3.5 and why it was never released?

--
8.3.5 was frozen at the RC1 stage and we elected to include the fixes for the aforementioned CVEs in this release, bumping things instead to 8.3.6 to avoid any confusion as to why someting was in a stable release that wasn't included in the RC. This is rare but does happen.
--------------k4t107Bp4TuSnMkJYo60qpOg--