PHP version 8.3.17 (13 Feb 2025)

Core:

• Fixed bug GH-16892 (ini_parse_quantity() fails to parse inputs starting with 0x0b). (nielsdos)
• Fixed bug GH-16886 (ini_parse_quantity() fails to emit warning for 0x+0). (nielsdos)
• Fixed bug GH-17214 (Relax final+private warning for trait methods with inherited final). (ilutov)
• Fixed NULL arithmetic during system program execution on Windows. (cmb, nielsdos)
• Fixed potential OOB when checking for trailing spaces on Windows. (cmb)
• Fixed bug GH-17408 (Assertion failure Zend/zend_exceptions.c). (nielsdos, ilutov)
• Fix may_have_extra_named_args flag for ZEND_AST_UNPACK. (nielsdos)
• Fix NULL arithmetic in System V shared memory emulation for Windows. (cmb)

DOM:

• Fixed bug GH-17500 (Segfault with requesting nodeName on nameless doctype). (nielsdos)

Enchant:

• Fix crashes in enchant when passing null bytes. (nielsdos)

FTP:

• Fixed bug GH-16800 (ftp functions can abort with EINTR). (nielsdos)

GD:

• Fixed bug GH-17349 (Tiled truecolor filling looses single color transparency). (cmb)
• Fixed bug GH-17373 (imagefttext() ignores clipping rect for palette images). (cmb)
• Ported fix for libgd 223 (gdImageRotateGeneric() does not properly interpolate). (cmb)

Intl:

• Fixed bug GH-11874 (intl causing segfault in docker images). (nielsdos)
• Fixed bug GH-17469 (UConverter::transcode always emit E_WARNING on invalid encoding). (David Carlier)

Opcache:

• Fixed bug GH-17307 (Internal closure causes JIT failure). (nielsdos)
• Fixed bug GH-17564 (Potential UB when reading from / writing to struct padding). (ilutov)

PDO:

• Fixed a memory leak when the GC is used to free a PDOStatment. (Girgias)
• Fixed a crash in the PDO Firebird Statement destructor. (nielsdos)
• Fixed UAFs when changing default fetch class ctor args. (Girgias, nielsdos)

Phar:

• Fixed bug GH-17518 (offset overflow phar extractTo()). (nielsdos)

PHPDBG:

• Fix crashes in function registration + test. (nielsdos, Girgias)

Session:

• Fix type confusion with session SID constant. (nielsdos)
• Fixed bug GH-17541 (ext/session NULL pointer dereferencement during ID reset). (Girgias)

SimpleXML:

• Fixed bug GH-17409 (Assertion failure Zend/zend_hash.c:1730). (nielsdos)

SNMP:

• Fixed bug GH-17330 (SNMP::setSecurity segfault on closed session). (David Carlier)

SPL:

• Fixed bug GH-17463 (crash on SplTempFileObject::ftruncate with negative value). (David Carlier)