Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:123113 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by qa.php.net (Postfix) with ESMTPS id 2D93D1A009C for ; Thu, 11 Apr 2024 15:03:34 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1712847847; bh=cxlw1kiSNwgG6vaZ2a9/eSW2mXrtDglejxmexTigZaU=; h=Date:To:From:Subject:From; b=Ullf4AEl/xQRaPBI4KqFo2aU2KhRvI0LfszmlCRbWmatzyrJNEmC5TDi3t9QbB+6/ LjnwvXN+qy/gAVevrk7ANK8gE64ovCu1hVvYVSod2sWrc6wtXr3oaHrNirtPYcq/6H FHWyoj2KRcp2kpGUG6+1Nm0L7pkYPs7hdYPgEhuxHTpkdS/kOWGR+tNmkz4seSn7Bw f1JpRAJpjPdMuBRNkoygBbSEiVMVYyOP4Oo8Hh1L7gLYFbFmautRo7C7F9na+I2T+A le+mcTX9RabXKHyi6OCxARoDLqP/KzHpQsjavK79gm5PFbD5b/KMqtQrenuKgc4wro XpJrHyzKTumcw== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 31816180079 for ; Thu, 11 Apr 2024 15:04:06 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: *** X-Spam-Status: No, score=3.8 required=5.0 tests=BAYES_50,DMARC_MISSING, HTML_MESSAGE,SPF_HELO_FAIL,SPF_SOFTFAIL,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from box.sixthree.me (box.sixthree.me [52.24.245.86]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Thu, 11 Apr 2024 15:04:05 +0000 (UTC) Authentication-Results: box.sixthree.me; dkim=none; dkim-atps=neutral Received: from authenticated-user (box.sixthree.me [52.24.245.86]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by box.sixthree.me (Postfix) with ESMTPSA id 8BDD87EB01 for ; Thu, 11 Apr 2024 08:03:31 -0700 (PDT) Content-Type: multipart/alternative; boundary="------------Mhr04GXGTEnrmb86JydI0kJw" Message-ID: <7051f9b8-6b03-4820-bc26-d3f12949c418@php.net> Date: Thu, 11 Apr 2024 08:03:31 -0700 Precedence: bulk list-help: list-post: List-Id: internals.lists.php.net MIME-Version: 1.0 Content-Language: en-US To: internals@lists.php.net Subject: [PHP-DEV] PHP 8.3.6 Released Autocrypt: addr=ericmann@php.net; keydata= xsFNBFg4q4YBEAD50HOLDAVpW88rUHnX/TYTCLpqmHMKXPjuf1l3ZEkY3PXF6wqmqaWWMPeW JFsik3cMebtLQzsgXHl4xDUBQhOOtdfax2ZKBHQmoUknw2dKkqdkVLh8Xpu8tw00SmcTiAFV CA2+HOqQ+Drq9NUpnMeJpJZiZu84eZbJBEzgabi0s4jf67NH7E3ENFb8DRilcM1aNT0rD1xV KR1spMKmBmOoJ/pj5OlWNH34/qdeqIrvKB46/pFELH8SRiorYTDhQTaS0PlT3LxRqVWo8+Jl gnFIe96p2d7JF1A1DwQUJerRY4789gNYzjW4fh1tc6jtTE2opbLVfbqujHsxrHFKoBO4CPBc Ptzf6TUPxDevvBh9omsd+V5FW7k/VFIiWFQv0RfQe8nwkNjmA0U3TOX3xKrU+59RU6w+uOuQ y564jxg691a7peiQ2Y90FqIVUlEL9Guf8U9ezp1DGo/UhnRNJcPmSwhYRcKMUV53mDqWQW8p 7XXjSqnVVF3cP9bc94UNAf28kXvnJBMGOZwp19dqD7ws+25WM6qQ7u7qQoGZzSI4Wn0ZaXnF rXwQXfY4+R20XSDt3oxGP8h08VSz09Xd3C7XV8Eg+0RrTSXVtZruAdcOIE/AWK4aBpN7yfGl MTfOOoYZa5tPFYf906yE56vtHcfJttJ7CO+kQMIW5PgRVMAE/QARAQABzRxFcmljIE1hbm4g PGVyaWNtYW5uQHBocC5uZXQ+wsGOBBMBCgA4FiEEr9hpH9rt8DvfbkYFY/Fam3FTdsoFAmRj nNgCGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQY/Fam3FTdsqv3BAAhDY7/d3oxt3Y zD5HGdJhqL0Ij6pqBMpW/GbF12eKxnnmz0VitT7lzayD7UHzUzTT8ZwSbrOaH2SIUFMl//vg L4PW7aUpYgSl00mowvazp1CG2085B8H8N1rXJKgUYuQfdmco8qfha0iI6YWH65CSBNupl5ma CBwXk6cX3C2XVJ3AP6rz4bnVJLohc88PQwSX33hWEHYxQh2mJ0Eb40QTB+pS2iU2W2+Mhd33 ryAGrCIZod76uCkNge+vioshDOlKxDA1j77tJiAO3FJkix1LOM13SQmapeqP7HnGfkNPZSNa ZiOcOxM6rPAGk1sBUZSfktnDu4gdW74yC/IcCqyQZVyXV3OVvatkBXHz90yje5zC6YKP3IU/ CUU4XMdWr9KfYpnfi42JF1KT9G8Iv33HbpMikgJrJtHgUxoKXQ0rzoT3gh4jUK8q4OPaCRBV CE3MqVwyc4Joj0/97X4/Hqa78pf874xKNRY5K18NDM+su3WwYfp7kkEpc2YMHDjzUenQZJRK HOIJXgwK0pibSM41okMZFE3o9G8DdMUMQRqeCM/cbpivfmnCAVqGk5VFLYcWxQsq0b6nlqTv 9k+fqH3WtJAS1NDzX1axrJ0tPfKPQlZTvBAZIp6KDfO1MvovnVO21erG33lI2o+0fonX3k6g PuQKbXNZG4QcaSTAV9WUp0HOwU0EWDitHQEQAMW49+DpWQNZIhI6JchxlXEhK374TcZqKjpf 7D9Zdr7zDB2iRD8cKxvMyr566RHpoD/6otd0f267kRVjHTL11TKutSKlwT27+nJcoFRRF1Sh BU2gPj9u1tasUsDPuRXlW/BA8yPePWXdxaizTY7kGxwCo7M2QkSGhHh4m+1AuYhsZYdCudaN uKSNFD6CtxBwKE4Now3svD3TzZJ2L2IxGOUOUw7mq6WJygYIXeYycVUggEbHpYcL35vmbYNb Wqd1Cw0bcjzQ32Yi89u1t9YOtatPgAcMT9LLLgRkD0Fg6YOQuobhsosH2fRy332nuL6QFdk4 Zf1WlKF1PjiYRg3km+QgOipIjK3RfKiA74RrbvUr+zUWW3fN0qzxrF2ub8MyoECPzRjfo8x5 8gl45SV1pXBYlFJpdA0aS+T7upVOY6g6fvFB7n4xl/3aK5uXsH2klKa7TwRtLCAVttGV2dkC PHZxqTNKc0/UvO2rjGKtEMYgpvzoHwtSM6FiWphcgWGiRS7qHBZYcgL7wV9Lkm2ZNRyhtIko UDvkaEZXc3AlIis4cUEJjpGwIeSnViU8Fep9M26zhSwmHYjFD+lburOZAMpCK+wsU214Mlbn QZZhJcTyCnORHnvDUZTwM3XYVLdhfqP8a0sfdg6VkGJo0kht30CMHJzp0EyGt8mOPLyC3LIP ABEBAAHCwXYEGAEKAAkFAlg4rR0CGwwAIQkQY/Fam3FTdsoWIQSv2Gkf2u3wO99uRgVj8Vqb cVN2ylVlD/49gOcib5GxCuYJLYlpYJRKBpptFvfgBsiq2D03w0U7Y+POi+jrHqa2LSeW6DFL GEKgL+1xJCFGKFJ/Cm2eCt4fpGitfaOFgLO/gdjjgPFQsuFm3840sKcXSql4w9W9Z+oPg/9d uL4xDqevuv3mOQO+R1Bt/4V+9vNk01kX1ftMRyMXhlqjPRUUp+tSQTT5KM5uxD3tLCWxcBxE iOjZ94ngiRuFuiNSnZ16GMckEh9Mum1Y+R4wJsRaZeulrmA02aML41IkZTHALRhKyxbDfjVe MURHM5gBhPYUVw9joxnXCzC+BRCDFw7bVL853LwgSq2gXZC0Rfdu2aBtLXWliGdmtv9FwKCL FrECygxbUu2fGB5/aMQ0otV2rgjaigPfhZoEQY0QasAQ4W+CR8fOGURWosoAKpLbeUGd9/zO f253g3XoN13wwTKyjhXKENUPw8ZqvjdPO+tgNnOLUnPO6K10ePbW4vaZdFCdixumxqZPokeB PkBPZq8oeAswkgWahKwQ7ZfgU4HTLMte3NEn/2WZQsLUo68IMaTCKt3AHvGoYi86wtd6/3Db NMxNsWamr8SWzia/1DGM5F1o3ClrZetD+eZN13duF3gI/1x+++5LhWP+qxPPOzBhXZG5zJ2P 3+eRwWuS79ZGfoh6w7uF4A3rkjkKfpAIwrNI2WlAKXWdBQ== From: ericmann@php.net This is a multi-part message in MIME format. --------------Mhr04GXGTEnrmb86JydI0kJw Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit The PHP development team announces the immediate availability of PHP 8.3.6. This is a security release that addresses CVE-2024-1874, CVE-2024-2756, CVE-2024-3096, and CVE-2024-2757. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.6 please visit our downloads page:https://www.php.net/downloads Windows binaries can be found on the PHP for Windows site. The list of changes is recorded in the ChangeLog. Release Announcement: Downloads: Windows downloads: Changelog: Release Manifest: Many thanks to all the contributors and supporters! Eric Mann, Jakub Zelenka, and Pierrick Charron php-8.3.6.tar.bz2 SHA256 hash: 6324b1ddd8eb3025b041034b88dc2bc0b4819b0022129eeaeba37e47803108bc PGP signature: -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEESx/A2d+SMhztn2FdvsVV4ioUNVMFAmYWoT4ACgkQvsVV4ioU NVMHChAAsuI3dN/SSY9XMzAykH8yxfzL410WCgPaDGK+AU1PEGUEtHUtY5Z1L6G0 rDXvAIDVQKVFE4AV0rREILMmlRAo4L6vTesNU8yCy+KtgAoWvc7Fbp2+hO5Vmjq+ X59OR8qvESmjOGptCMJaOKUr7tc7kO30+GsTVajH38sSkzYVUNN18eFTd1ysuQwG 09extkGnuiTT5nHdzOA9XJ92P9Cshu3Gy6zutf6Ae55hkW8fFupR55FuacGccUTo wJMXwFEGF6+8QJAoN3OFxQAH+khY8ypY/8ILHbA7NpG/KOZSdGa4ve4itaDfZ0e2 YiA6V484vHULeO5h7Wa8Eeqy1HsaimF9egAwiRnBC+F0UM+oIF9Z+QSTOJplczq8 Uee8hohTab0oongPGAx8DfnEcSNHbm02iyDxO9GD+Q97K+cydDpV4CXcy3XsFuj+ q3XIS7uBZGOMDTUgcIQ2312Vjgtovj18QoJdnjvUG0WoYtGAyfUw+Wg1T9lmwgM8 S/izGJSPUPvvGrUhy7kWIpaDfijT302nNpAMrxawl2kmFUZScbvbUpKu4o6VIepF 3dIL/McEt95ZI4wdQimVfKEdVtr3354RgBsJ3QQ2TqKKy53BzD7c1GKE0vJYrUwY vKCf2IcqLcoSDQtEDONdvNifK+A09vwLNqxx6YoroE6jM7GFyRc= =Flu2 -----END PGP SIGNATURE----- php-8.3.6.tar.gz SHA256 hash: 39695f5bd107892e36fd2ed6b3d3a78140fd4b05d556d6c6531a921633cacb5f PGP signature: -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEESx/A2d+SMhztn2FdvsVV4ioUNVMFAmYWoT8ACgkQvsVV4ioU NVNthRAAloon80NuktD8PfAPE9Qy6LtmlteozmfHdtOyCN+EhW9BR707CV7JK5CD 3jpdUkzZUsqUTWrgc2BTLGlAtRW0P42TVPuvGbHAMG/JmQ1TT1iqdiXwTfTojHI1 xGUmrWqZFOhFNMcf6vc/tj3dP2HMn72UB2SqMjfQZDAYHG/R1BlhU0hT6yJ2I+XM 9sE7h8v4eYq1IA0mpIpDppLYLX/nR4Hj1Ni+k4Zgu8i/naGd3LaqtnXQbHoU290r 1EKb5eqTjl+dQV58k5A7B2r1k1zYNZiJ1b/Oc264GRNlmjHjwlo+8Q9YEbaUMN96 RueOXuyMUQNPdpY+vkgjOzFt1IcJDAkycrCPoBBydXtdXimzrGRFKh4uP01L938c oUOr3laNq8h3jG27XVcm2ZyflLnqZ1B9UMqDcCbzJpgnQdgk3Cl01CgMtxlksN3z +QMjXcSmjTUJ/kzA+Zd6+9lWglV1g5Nuhw8o603Df1r13PEZ61rzOKXCpq6mvrT4 cCTKOCSKgRJheVDbmehX0ThTUKvfVa06CiCZrTaE+90mnF9F8gvl5CEwjIdiMKG6 3lunnPZ2zaf0pThQWfGQx87hkUTL4PoAuVLuLJcqXV5hWH+Rg+PQviq/rV0OiVmF 0P/uzLPsBZcP5U0vKRThvWxPgVYbm61tNBd3m0XUeLmyOwFLrEA= =ZtXH -----END PGP SIGNATURE----- php-8.3.6.tar.xz SHA256 hash: 53c8386b2123af97626d3438b3e4058e0c5914cb74b048a6676c57ac647f5eae PGP signature: -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEESx/A2d+SMhztn2FdvsVV4ioUNVMFAmYWoT8ACgkQvsVV4ioU NVP+wA//dpAy9SQpgX9I/5KRvnd3B1NJxNIrncqUu7C/cZtUh2go5l3UfuVVzaxo 5PKYANC/izRDvLSPjgYp8dvrHjFeZhzuqgjlF2mzZGXMgxlRHzg8eWQn+6FEGhAS gw4jH0DjI748oTTQn8jrEq0SLl9sEx+fN10UBGQcEiQEPRMmBd6hzoGHxjesbdSE smGQWQMZTlQyT4k0JQoaUQVH4a3rBP+fkmqZzA5p4VbS63ybfZovNO/IgIPccCD1 /52KfXwh4GJdmoMlfLwQRUqnSKkDkltNOx4WN7qHWgleoSkPctDpb5+SSfYaBORA UH93TT+htnKtW37pJlICQklRfGnVL4ukcbPbz2HcYSBEY3oqevt2C3O1Kl47rTgT E7LPI+UKdTx3SfogiainlMACUZL0SeqGY7O6w7Hrhn5WktliSvIZ/7932b9Vi3du 70/fI+Zj4om3eKSn0sXRLoyW52CBH0WyV0FLwmlWM9y60kSSUISaYwqptpPg5QzH JiZxbM34g1tveFZs1F7B1XXDNdwsV8Eq93U7ggtzRCacotVJU/wnQlfLs9XP2FB1 1daia26X7PmSLCJVZbSNdgEmcaHj/X0LVgIpJ5B97O4z7rXAOQIAwCgHRy2BRQWP knDVvdJUx++BGrbOggrHF2CKoID32BJVJXnbmobkglNnQaOujwo= =UZez -----END PGP SIGNATURE----- --------------Mhr04GXGTEnrmb86JydI0kJw Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit 
The PHP development team announces the immediate availability of PHP 8.3.6. This is a security release that addresses CVE-2024-1874,
CVE-2024-2756, CVE-2024-3096, and CVE-2024-2757.

All PHP 8.3 users are encouraged to upgrade to this version.
For source downloads of PHP 8.3.6 please visit our downloads page: https://www.php.net/downloads
Windows binaries can be found on the PHP for Windows site.
The list of changes is recorded in the ChangeLog.

Release Announcement: <https://php.net/releases/8_3_6.php>
Downloads:            <https://php.net/downloads>
Windows downloads:    <https://windows.php.net/download#php-8.3>
Changelog:            <https://php.net/ChangeLog-8.php#8.3.6>
Release Manifest:     <https://gist.github.com/ericmann/93ec7609f372b05e55f24136c8b826c0>

Many thanks to all the contributors and supporters!


Eric Mann, Jakub Zelenka, and Pierrick Charron


php-8.3.6.tar.bz2
SHA256 hash: 6324b1ddd8eb3025b041034b88dc2bc0b4819b0022129eeaeba37e47803108bc
PGP signature:
-----BEGIN PGP SIGNATURE-----
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=Flu2
-----END PGP SIGNATURE-----


php-8.3.6.tar.gz
SHA256 hash: 39695f5bd107892e36fd2ed6b3d3a78140fd4b05d556d6c6531a921633cacb5f
PGP signature:
-----BEGIN PGP SIGNATURE-----
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=ZtXH
-----END PGP SIGNATURE-----


php-8.3.6.tar.xz
SHA256 hash: 53c8386b2123af97626d3438b3e4058e0c5914cb74b048a6676c57ac647f5eae
PGP signature:
-----BEGIN PGP SIGNATURE-----
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=UZez
-----END PGP SIGNATURE-----
--------------Mhr04GXGTEnrmb86JydI0kJw--