Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:123533 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by qa.php.net (Postfix) with ESMTPS id B4CFC1A009D for ; Thu, 6 Jun 2024 15:07:30 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1717686515; bh=1QGifouhqoPBwY0YY2K/gpz5lrCfzmT2zp79gK2/A3c=; h=Date:From:Subject:To:From; b=Ru49M718xHNZXIF/namxDvEpjDoihy5HvRPq6K1FOLH6RKkrMrauaDvEio+vcRs0d S5IJM43MDTJ9Vo+3lN5InKzDyMA/MhuCZ5beI/MFIPeNRq08eNuKTjiduIWuHPPhNZ NsHGVmHhyMPBgVn6hHEe35MMjMZo4D7H9Nm2BayQYgQcBMifIxr8R0KjZFXGbQwicV uVaj2LWpYUDr/d06dFiZRMZ4cxCdJ5vvpRSVv52xNr0N/MPUe8FnJLxSkTtwmJ8oP2 JI2FVwc/6LbQxY8tHXZqfOquqjcQ6GMaWveUfVgfTjAh6FItI1ngAca2mSpMovT83V AlbYzM6QniCxw== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 4E683180624 for ; Thu, 6 Jun 2024 15:08:33 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: **** X-Spam-Status: No, score=4.7 required=5.0 tests=BAYES_50,DMARC_NONE, HTML_MESSAGE,SPF_HELO_FAIL,SPF_SOFTFAIL,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: Error (Cannot connect to unix socket '/var/run/clamav/clamd.ctl': connect: Connection refused) X-Envelope-From: Received: from box.sixthree.me (box.sixthree.me [52.24.245.86]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Thu, 6 Jun 2024 15:08:31 +0000 (UTC) Authentication-Results: box.sixthree.me; dkim=none; dkim-atps=neutral Received: from authenticated-user (box.sixthree.me [52.24.245.86]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by box.sixthree.me (Postfix) with ESMTPSA id 47C757E6E0 for ; Thu, 6 Jun 2024 08:07:25 -0700 (PDT) Content-Type: multipart/alternative; boundary="------------imldvRxc0dQ3rqXfDFL1xWE3" Message-ID: Date: Thu, 6 Jun 2024 08:07:25 -0700 Precedence: bulk list-help: list-post: List-Id: internals.lists.php.net MIME-Version: 1.0 Content-Language: en-US Subject: [PHP-DEV] PHP 8.3.8 Released Autocrypt: addr=ericmann@php.net; keydata= xsFNBFg4q4YBEAD50HOLDAVpW88rUHnX/TYTCLpqmHMKXPjuf1l3ZEkY3PXF6wqmqaWWMPeW JFsik3cMebtLQzsgXHl4xDUBQhOOtdfax2ZKBHQmoUknw2dKkqdkVLh8Xpu8tw00SmcTiAFV CA2+HOqQ+Drq9NUpnMeJpJZiZu84eZbJBEzgabi0s4jf67NH7E3ENFb8DRilcM1aNT0rD1xV KR1spMKmBmOoJ/pj5OlWNH34/qdeqIrvKB46/pFELH8SRiorYTDhQTaS0PlT3LxRqVWo8+Jl gnFIe96p2d7JF1A1DwQUJerRY4789gNYzjW4fh1tc6jtTE2opbLVfbqujHsxrHFKoBO4CPBc Ptzf6TUPxDevvBh9omsd+V5FW7k/VFIiWFQv0RfQe8nwkNjmA0U3TOX3xKrU+59RU6w+uOuQ y564jxg691a7peiQ2Y90FqIVUlEL9Guf8U9ezp1DGo/UhnRNJcPmSwhYRcKMUV53mDqWQW8p 7XXjSqnVVF3cP9bc94UNAf28kXvnJBMGOZwp19dqD7ws+25WM6qQ7u7qQoGZzSI4Wn0ZaXnF rXwQXfY4+R20XSDt3oxGP8h08VSz09Xd3C7XV8Eg+0RrTSXVtZruAdcOIE/AWK4aBpN7yfGl MTfOOoYZa5tPFYf906yE56vtHcfJttJ7CO+kQMIW5PgRVMAE/QARAQABzRxFcmljIE1hbm4g PGVyaWNtYW5uQHBocC5uZXQ+wsGOBBMBCgA4FiEEr9hpH9rt8DvfbkYFY/Fam3FTdsoFAmRj nNgCGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQY/Fam3FTdsqv3BAAhDY7/d3oxt3Y zD5HGdJhqL0Ij6pqBMpW/GbF12eKxnnmz0VitT7lzayD7UHzUzTT8ZwSbrOaH2SIUFMl//vg L4PW7aUpYgSl00mowvazp1CG2085B8H8N1rXJKgUYuQfdmco8qfha0iI6YWH65CSBNupl5ma CBwXk6cX3C2XVJ3AP6rz4bnVJLohc88PQwSX33hWEHYxQh2mJ0Eb40QTB+pS2iU2W2+Mhd33 ryAGrCIZod76uCkNge+vioshDOlKxDA1j77tJiAO3FJkix1LOM13SQmapeqP7HnGfkNPZSNa ZiOcOxM6rPAGk1sBUZSfktnDu4gdW74yC/IcCqyQZVyXV3OVvatkBXHz90yje5zC6YKP3IU/ CUU4XMdWr9KfYpnfi42JF1KT9G8Iv33HbpMikgJrJtHgUxoKXQ0rzoT3gh4jUK8q4OPaCRBV CE3MqVwyc4Joj0/97X4/Hqa78pf874xKNRY5K18NDM+su3WwYfp7kkEpc2YMHDjzUenQZJRK HOIJXgwK0pibSM41okMZFE3o9G8DdMUMQRqeCM/cbpivfmnCAVqGk5VFLYcWxQsq0b6nlqTv 9k+fqH3WtJAS1NDzX1axrJ0tPfKPQlZTvBAZIp6KDfO1MvovnVO21erG33lI2o+0fonX3k6g PuQKbXNZG4QcaSTAV9WUp0HOwU0EWDitHQEQAMW49+DpWQNZIhI6JchxlXEhK374TcZqKjpf 7D9Zdr7zDB2iRD8cKxvMyr566RHpoD/6otd0f267kRVjHTL11TKutSKlwT27+nJcoFRRF1Sh BU2gPj9u1tasUsDPuRXlW/BA8yPePWXdxaizTY7kGxwCo7M2QkSGhHh4m+1AuYhsZYdCudaN uKSNFD6CtxBwKE4Now3svD3TzZJ2L2IxGOUOUw7mq6WJygYIXeYycVUggEbHpYcL35vmbYNb Wqd1Cw0bcjzQ32Yi89u1t9YOtatPgAcMT9LLLgRkD0Fg6YOQuobhsosH2fRy332nuL6QFdk4 Zf1WlKF1PjiYRg3km+QgOipIjK3RfKiA74RrbvUr+zUWW3fN0qzxrF2ub8MyoECPzRjfo8x5 8gl45SV1pXBYlFJpdA0aS+T7upVOY6g6fvFB7n4xl/3aK5uXsH2klKa7TwRtLCAVttGV2dkC PHZxqTNKc0/UvO2rjGKtEMYgpvzoHwtSM6FiWphcgWGiRS7qHBZYcgL7wV9Lkm2ZNRyhtIko UDvkaEZXc3AlIis4cUEJjpGwIeSnViU8Fep9M26zhSwmHYjFD+lburOZAMpCK+wsU214Mlbn QZZhJcTyCnORHnvDUZTwM3XYVLdhfqP8a0sfdg6VkGJo0kht30CMHJzp0EyGt8mOPLyC3LIP ABEBAAHCwXYEGAEKAAkFAlg4rR0CGwwAIQkQY/Fam3FTdsoWIQSv2Gkf2u3wO99uRgVj8Vqb cVN2ylVlD/49gOcib5GxCuYJLYlpYJRKBpptFvfgBsiq2D03w0U7Y+POi+jrHqa2LSeW6DFL GEKgL+1xJCFGKFJ/Cm2eCt4fpGitfaOFgLO/gdjjgPFQsuFm3840sKcXSql4w9W9Z+oPg/9d uL4xDqevuv3mOQO+R1Bt/4V+9vNk01kX1ftMRyMXhlqjPRUUp+tSQTT5KM5uxD3tLCWxcBxE iOjZ94ngiRuFuiNSnZ16GMckEh9Mum1Y+R4wJsRaZeulrmA02aML41IkZTHALRhKyxbDfjVe MURHM5gBhPYUVw9joxnXCzC+BRCDFw7bVL853LwgSq2gXZC0Rfdu2aBtLXWliGdmtv9FwKCL FrECygxbUu2fGB5/aMQ0otV2rgjaigPfhZoEQY0QasAQ4W+CR8fOGURWosoAKpLbeUGd9/zO f253g3XoN13wwTKyjhXKENUPw8ZqvjdPO+tgNnOLUnPO6K10ePbW4vaZdFCdixumxqZPokeB PkBPZq8oeAswkgWahKwQ7ZfgU4HTLMte3NEn/2WZQsLUo68IMaTCKt3AHvGoYi86wtd6/3Db NMxNsWamr8SWzia/1DGM5F1o3ClrZetD+eZN13duF3gI/1x+++5LhWP+qxPPOzBhXZG5zJ2P 3+eRwWuS79ZGfoh6w7uF4A3rkjkKfpAIwrNI2WlAKXWdBQ== To: internals@lists.php.net From: ericmann@php.net This is a multi-part message in MIME format. --------------imldvRxc0dQ3rqXfDFL1xWE3 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit The PHP development team announces the immediate availability of PHP 8.3.8. This is a security release that addresses CVE-2024-4577, CVE-2024-5458, and CVE-2024-5585. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.8 please visit our downloads page:https://www.php.net/downloads Windows binaries can be found on the PHP for Windows site. The list of changes is recorded in the ChangeLog. Release Announcement: Downloads: Windows downloads: Changelog: Release Manifest: Many thanks to all the contributors and supporters! Eric Mann, Jakub Zelenka, and Pierrick Charron php-8.3.8.tar.bz2 SHA256 hash: f4a6cb005ae117aba86c2044932cf563899a2e977ac09781aa74b2161ddc563b PGP signature: -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEESx/A2d+SMhztn2FdvsVV4ioUNVMFAmZfK+4ACgkQvsVV4ioU NVNInQ//Y87ElFhXBFrnbFijAX4sGYVPGsr9PbTnb4MsxwxIn818m2YfJythEA1A 9DxQz9rbI9coJnrS9cmQb0PbsEER6gwcFKZfx9sgrjS88wmQy7xOPzajh0nGAqqb r/LmnDYEjAenVt+vOT6msg88kSEYpWV7kxylHgqHxS2lql4yksntKFOIxnVYdpIW Ta3C5I9b3/VAUXTDBbWOwUxc8jupw9qDqTnV0cNXeydE48P4BFua2qu46Zr2y9zW WVaRSCS9gqotMQfWjafMlZiKPtJ3VtPiQdmAhlG0IpYVDK2x1bYqt+mNflVQJtgg foafyhIIoULU9EPxQruUXTj3CHg7CG90JoXdLpyrSm14GGkEMJoWAdQ9/chZoblE d9ulB0OAkJgCeQPS+o5HPyzVLhqWmtT9mLH6UOqrvxrwrxxEEYqohH+y8oYczhhQ CfN8peXwLO9LfHtookSeqo/hakAaQ/PLoYdyJbNzvfayJ9KPsSH/HNgQ5mzVDVY3 Bm0JLuichvvQY00z43ZZCD0LmKQc1G2/uSkRbxiFXojdI3CccIlbBWl4g22SlY1e kVxerHoFF70Cbc0r5S45yp6NT6cWrKQQ/R22b+jlKj5N+ITZK7+Fm+FQmzsHRjzy NJuYONEYvS94tkKHO6vNJXMPqsFkQdBp9BEehi/xcbpqCRf8WRE= =c8Sk -----END PGP SIGNATURE----- php-8.3.8.tar.gz SHA256 hash: 0ebed9f1471871cf131e504629f3947f2acd38a655cc31b036f99efd0e3dbdeb PGP signature: -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEESx/A2d+SMhztn2FdvsVV4ioUNVMFAmZfK+4ACgkQvsVV4ioU NVOzaQ//Y339nzzLbjpwam1G1pek3nZr9b+N+vOqHB9AgxAhiq/n5DhTp/weFloP 21iFbgrNn8b9f691uHhs1VTHCbOPfUG9AHacg5u284mpaAEEZhu+AoA2hRg8OjsZ SiJanDfzCql12oe/q07dQNMdJEDQFOAPJuYh2VL8GCdnUSYSBozqoQSMOwUQ7WRX Qzj6hGpC0p6XWAJ6YA//sgCLAYt6fZeuZBo66O1bNGDqXhA7to0kMX3k0gSRZH4z K6Tw6xkplzVkzis1qW5oZmDEmk26mTgJLuRDJlrGBfHc0PqKSGz56l/6PvWfrFVU 1bjo5VlU8jzCBWVmYJPzG37nUDo/rvXsOKT3hgNIVav6omKFZg8TAOFfgNaGbNd6 SimCocWwMONNN+Wg2Dt47VH98XCiubIIShxoVQE4RWXQHt5CWn1mR4fhWceacLKm vV5Ml659PwBZcpg817TESIaWweSDs19NFDhaSNZDgu61SHLZ4G4uylfYlEq299G0 Oqfg8DoaYcekcyqMf3SvPiBQRu543HelhoMdzJ9RrhNFRLh/uHCLVo8tzgq1WACc B+EpZ1lCvnsA1hb/umosHwejHzJPhX5FnH0k8CLKYFRhr98EfbjSqb9espjhmHak TCJ7/M+AgK25rvacJGS/vD6NOnjhLirxVqKONcG8vZH/IhZDu0o= =FObm -----END PGP SIGNATURE----- php-8.3.8.tar.xz SHA256 hash: aea358b56186f943c2bbd350c9005b9359133d47e954cfc561385319ae5bb8d7 PGP signature: -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEESx/A2d+SMhztn2FdvsVV4ioUNVMFAmZfK+4ACgkQvsVV4ioU NVNKGRAAp1I9pjv04n7OkvUyeIxCJ0Ou1GcoDTqoy30LpVrWswU1VkKBwb1Sr2Dj 5efWKylCZZ9+9IzJJVGxG6hAPlFer9JMSuO+FZXjLnvAAgDJy64L2eOadjsg0u9+ xKv2molW0arG25P3P8xRpXKisRy0JJpxNhTSUiXUUL/Gy0zW9Uc/6wrKPF5c3LQF i7UzpMuqaxOuXznwQaWhkcIk7GNDhZJAW5SsX6FFkxctbDXAICCfiFN1WPgfiG15 ZYLexBZKGzufnH0T6b7o/pylFWhlVSt59B55witdimZciE8QCNKnmqCGafhYda/J UZAOb9X2MJjvBMRQLI6jpCoV8XAY5Jo7F5QkaZmnECydGj9XDADWYlVG4XLP0p34 htcDB6odzURZDLxKYD97KRRL+bycj161Bh3WW7tRD9OIoNvtkgHg2ko531APUccl x1FFFkB9Trm9b/+y95EuCMN80BQXjd4Q6pQHaTo33UAlY182VfhewfWRB9OsLezn LXGZ9m4jC18AKnyrpLMPJuDUZjrorXOBjqQp0be8TlNhuXNbVgV+/WG/8+KChr7Y GBupFNkBpYHQsmQTZNuSJMqVzcxPFc1k4pp2SGvscVMPoqdgw9dRFsK6s40KbQ7g dXT8aLjWoYFAmE3bD7PJtWsnB3b/ghat6CuNGjLK9mp4V82Mv7Y= =aLaa -----END PGP SIGNATURE----- --------------imldvRxc0dQ3rqXfDFL1xWE3 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit 
The PHP development team announces the immediate availability of PHP 8.3.8. This is a security release that addresses CVE-2024-4577, CVE-2024-5458, and CVE-2024-5585.

All PHP 8.3 users are encouraged to upgrade to this version.
For source downloads of PHP 8.3.8 please visit our downloads page: https://www.php.net/downloads
Windows binaries can be found on the PHP for Windows site.
The list of changes is recorded in the ChangeLog.

Release Announcement: <https://php.net/releases/8_3_8.php>
Downloads:            <https://php.net/downloads>
Windows downloads:    <https://windows.php.net/download#php-8.3>
Changelog:            <https://php.net/ChangeLog-8.php#8.3.8>
Release Manifest:     <https://gist.github.com/ericmann/5692e2872a88439589342268bd0c7d40>

Many thanks to all the contributors and supporters!


Eric Mann, Jakub Zelenka, and Pierrick Charron


php-8.3.8.tar.bz2
SHA256 hash: f4a6cb005ae117aba86c2044932cf563899a2e977ac09781aa74b2161ddc563b
PGP signature:
-----BEGIN PGP SIGNATURE-----
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=c8Sk
-----END PGP SIGNATURE-----


php-8.3.8.tar.gz
SHA256 hash: 0ebed9f1471871cf131e504629f3947f2acd38a655cc31b036f99efd0e3dbdeb
PGP signature:
-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEESx/A2d+SMhztn2FdvsVV4ioUNVMFAmZfK+4ACgkQvsVV4ioU
NVOzaQ//Y339nzzLbjpwam1G1pek3nZr9b+N+vOqHB9AgxAhiq/n5DhTp/weFloP
21iFbgrNn8b9f691uHhs1VTHCbOPfUG9AHacg5u284mpaAEEZhu+AoA2hRg8OjsZ
SiJanDfzCql12oe/q07dQNMdJEDQFOAPJuYh2VL8GCdnUSYSBozqoQSMOwUQ7WRX
Qzj6hGpC0p6XWAJ6YA//sgCLAYt6fZeuZBo66O1bNGDqXhA7to0kMX3k0gSRZH4z
K6Tw6xkplzVkzis1qW5oZmDEmk26mTgJLuRDJlrGBfHc0PqKSGz56l/6PvWfrFVU
1bjo5VlU8jzCBWVmYJPzG37nUDo/rvXsOKT3hgNIVav6omKFZg8TAOFfgNaGbNd6
SimCocWwMONNN+Wg2Dt47VH98XCiubIIShxoVQE4RWXQHt5CWn1mR4fhWceacLKm
vV5Ml659PwBZcpg817TESIaWweSDs19NFDhaSNZDgu61SHLZ4G4uylfYlEq299G0
Oqfg8DoaYcekcyqMf3SvPiBQRu543HelhoMdzJ9RrhNFRLh/uHCLVo8tzgq1WACc
B+EpZ1lCvnsA1hb/umosHwejHzJPhX5FnH0k8CLKYFRhr98EfbjSqb9espjhmHak
TCJ7/M+AgK25rvacJGS/vD6NOnjhLirxVqKONcG8vZH/IhZDu0o=
=FObm
-----END PGP SIGNATURE-----


php-8.3.8.tar.xz
SHA256 hash: aea358b56186f943c2bbd350c9005b9359133d47e954cfc561385319ae5bb8d7
PGP signature:
-----BEGIN PGP SIGNATURE-----
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=aLaa
-----END PGP SIGNATURE-----
--------------imldvRxc0dQ3rqXfDFL1xWE3--