Skip to content

Commit 738cffd

Browse files
ericmannericmann
committed
Announce PHP 8.3.31
1 parent a0c3228 commit 738cffd

7 files changed

Lines changed: 121 additions & 8 deletions

File tree

‎ChangeLog-8.php‎

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3055,6 +3055,45 @@
30553055

30563056
<a id="PHP_8_3"></a>
30573057

3058+
<section class="version" id="8.3.31"><!-- {{{ 8.3.31 -->
3059+
<h3>Version 8.3.31</h3>
3060+
<b><?php release_date('07-May-2026'); ?></b>
3061+
<ul><li>Curl:
3062+
<ul>
3063+
<li>Add support for brotli and zstd on Windows.</li>
3064+
</ul></li>
3065+
<li>FPM:
3066+
<ul>
3067+
<li>Fixed <?php githubsecurityl('php/php-src', '7qg2-v9fj-4mwv'); ?> (XSS within status endpoint). (CVE-2026-6735)</li>
3068+
</ul></li>
3069+
<li>MBString:
3070+
<ul>
3071+
<li>Fixed <?php githubsecurityl('php/php-src', 'wm6j-2649-pv75'); ?> (Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()). (CVE-2026-7259)</li>
3072+
</ul></li>
3073+
<li>OpenSSL:
3074+
<ul>
3075+
<li>Fix compatibility issues with OpenSSL 4.0.</li>
3076+
</ul></li>
3077+
<li>PDO_Firebird:
3078+
<ul>
3079+
<li>Fixed <?php githubsecurityl('php/php-src', 'w476-322c-wpvm'); ?> (SQL injection via NUL bytes in quoted strings). (CVE-2025-14179)</li>
3080+
</ul></li>
3081+
<li>SOAP:
3082+
<ul>
3083+
<li>Fixed <?php githubsecurityl('php/php-src', '85c2-q967-79q5'); ?> (Stale SOAP_GLOBAL(ref_map) pointer with Apache Map). (CVE-2026-6722)</li>
3084+
<li>Fixed <?php githubsecurityl('php/php-src', 'm33r-qmcv-p97q'); ?> (Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION). (CVE-2026-7261)</li>
3085+
<li>Fixed <?php githubsecurityl('php/php-src', 'hmxp-6pc4-f3vv'); ?> (Broken Apache map value NULL check). (CVE-2026-7262)</li>
3086+
</ul></li>
3087+
<li>Standard:
3088+
<ul>
3089+
<li>Fixed <?php githubsecurityl('php/php-src', '96wq-48vp-hh57'); ?> (Signed integer overflow of char array offset). (CVE-2026-7568)</li>
3090+
<li>Fixed <?php githubsecurityl('php/php-src', 'm8rr-4c36-8gq4'); ?> (Consistently pass unsigned char to ctype.h functions). (CVE-2026-7258)</li>
3091+
</ul></li>
3092+
</ul>
3093+
<!-- }}} --></section>
3094+
3095+
3096+
30583097
<section class="version" id="8.3.30"><!-- {{{ 8.3.30 -->
30593098
<h3>Version 8.3.30</h3>
30603099
<b><?php release_date('15-Jan-2026'); ?></b>

‎archive/archive.xml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@
99
<uri>http://php.net/contact</uri>
1010
<email>php-webmaster@lists.php.net</email>
1111
</author>
12+
<xi:include href="entries/2026-05-07-1.xml"/>
1213
<xi:include href="entries/2026-05-04-1.xml"/>
1314
<xi:include href="entries/2026-04-09-2.xml"/>
1415
<xi:include href="entries/2026-04-09-1.xml"/>

‎archive/entries/2026-05-07-1.xml‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
<?xml version="1.0" encoding="utf-8"?>
2+
<entry xmlns="http://www.w3.org/2005/Atom">
3+
<title>PHP 8.3.31 Released!</title>
4+
<id>https://www.php.net/archive/2026.php#2026-05-07-1</id>
5+
<published>2026-05-07T13:30:32+00:00</published>
6+
<updated>2026-05-07T13:30:32+00:00</updated>
7+
<link href="https://www.php.net/index.php#2026-05-07-1" rel="alternate" type="text/html"/>
8+
<link href="https://www.php.net/archive/2026.php#2026-05-07-1" rel="via" type="text/html"/>
9+
<category term="releases" label="New PHP release"/>
10+
<category term="frontpage" label="PHP.net frontpage news"/>
11+
<content type="xhtml">
12+
<div xmlns="http://www.w3.org/1999/xhtml"><p>The PHP development team announces the immediate availability of PHP 8.3.31. This is a security release.</p>
13+
14+
<p>All PHP 8.3 users are encouraged to upgrade to this version.</p>
15+
16+
<p>For source downloads of PHP 8.3.31 please visit our <a href="https://www.php.net/downloads.php">downloads page</a>,
17+
Windows source and binaries can also be found <a href="https://www.php.net/downloads.php?os=windows&amp;version=8.3">there</a>.
18+
The list of changes is recorded in the <a href="https://www.php.net/ChangeLog-8.php#8.3.31">ChangeLog</a>.
19+
</p> </div>
20+
</content>
21+
</entry>

‎include/release-qa.php‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -58,15 +58,15 @@
5858
],
5959
],
6060

61-
'8.3.30' => [
61+
'8.3.31' => [
6262
'active' => true,
6363
'release' => [
6464
'type' => 'RC',
6565
'number' => 0,
6666
'sha256_bz2' => '',
6767
'sha256_gz' => '',
6868
'sha256_xz' => '',
69-
'date' => '01 Jan 2026',
69+
'date' => '07 May 2026',
7070
'baseurl' => 'https://downloads.php.net/',
7171
],
7272
],

‎include/releases.inc‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,42 @@
22
$OLDRELEASES = array (
33
8 =>
44
array (
5+
'8.3.30' =>
6+
array (
7+
'announcement' =>
8+
array (
9+
'English' => '/releases/8_3_30.php',
10+
),
11+
'tags' =>
12+
array (
13+
),
14+
'date' => '15 Jan 2026',
15+
'source' =>
16+
array (
17+
0 =>
18+
array (
19+
'filename' => 'php-8.3.30.tar.gz',
20+
'name' => 'PHP 8.3.30 (tar.gz)',
21+
'sha256' => 'e587dc95fb7f62730299fa7b36b6e4f91e6708aaefa2fff68a0098d320c16386',
22+
'date' => '15 Jan 2026',
23+
),
24+
1 =>
25+
array (
26+
'filename' => 'php-8.3.30.tar.bz2',
27+
'name' => 'PHP 8.3.30 (tar.bz2)',
28+
'sha256' => '800b7b6ed50b73c8ee7844ee5f2f7cc612faa7875a0aa7c4529e8ed5866a5030',
29+
'date' => '15 Jan 2026',
30+
),
31+
2 =>
32+
array (
33+
'filename' => 'php-8.3.30.tar.xz',
34+
'name' => 'PHP 8.3.30 (tar.xz)',
35+
'sha256' => '67f084d36852daab6809561a7c8023d130ca07fc6af8fb040684dd1414934d48',
36+
'date' => '15 Jan 2026',
37+
),
38+
),
39+
'museum' => false,
40+
),
541
'8.4.19' =>
642
array (
743
'announcement' =>

‎include/version.inc‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -46,13 +46,13 @@ $RELEASES = (function () {
4646

4747
/* PHP 8.3 Release */
4848
$data['8.3'] = [
49-
'version' => '8.3.30',
50-
'date' => '15 Jan 2026',
51-
'tags' => [], // Set to ['security'] for security releases.
49+
'version' => '8.3.31',
50+
'date' => '07 May 2026',
51+
'tags' => ['security'], // Set to ['security'] for security releases.
5252
'sha256' => [
53-
'tar.gz' => 'e587dc95fb7f62730299fa7b36b6e4f91e6708aaefa2fff68a0098d320c16386',
54-
'tar.bz2' => '800b7b6ed50b73c8ee7844ee5f2f7cc612faa7875a0aa7c4529e8ed5866a5030',
55-
'tar.xz' => '67f084d36852daab6809561a7c8023d130ca07fc6af8fb040684dd1414934d48',
53+
'tar.gz' => '4e7baaf0a690e954a20e7ced3dd633ce8cb8094e2b6b612a55e703ecbbdcbf4f',
54+
'tar.bz2' => 'e6986b1fd37eb25402127fe4a7278a3e03b7f9025bb7a4bd292a271bdf930fb9',
55+
'tar.xz' => '66410cee07f4b2baeb0843140bb2a2b52ef930b5cf9b3d6e6d158b33aae8fa37',
5656
]
5757
];
5858

‎releases/8_3_31.php‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
<?php
2+
$_SERVER['BASE_PAGE'] = 'releases/8_3_31.php';
3+
include_once __DIR__ . '/../include/prepend.inc';
4+
site_header('PHP 8.3.31 Release Announcement');
5+
?>
6+
<h1>PHP 8.3.31 Release Announcement</h1>
7+
8+
<p>The PHP development team announces the immediate availability of PHP 8.3.31. This is a security release.</p>
9+
10+
<p>All PHP 8.3 users are encouraged to upgrade to this version.</p>
11+
12+
<p>For source downloads of PHP 8.3.31 please visit our <a href="https://www.php.net/downloads.php">downloads page</a>,
13+
Windows source and binaries can also be found <a href="https://www.php.net/downloads.php?os=windows&amp;version=8.3">there</a>.
14+
The list of changes is recorded in the <a href="https://www.php.net/ChangeLog-8.php#8.3.31">ChangeLog</a>.
15+
</p>
16+
<?php site_footer();

0 commit comments

Comments
 (0)