PHP 8.3.13 변경 기록과 적용 점검

PHP 8.3.13 변경 사항

공식 php-src 태그의 NEWS에서 이 버전의 항목만 추출했습니다. 아래 구성요소와 확인 순서는 원문에 따라 자동 구성됩니다. 애플리케이션 호환성이나 취약점 영향 여부를 판정하지 않습니다.

변경된 구성요소

Calendar · CLI · Core · DOM · JSON · GD · LDAP · MBString · OpenSSL · PCRE · PHPDBG · Reflection · SAPI · SimpleXML · Sockets · SOAP · SPL · Standard · Streams · TSRM · Windows

원문에 명시된 CVE

이 NEWS 항목에 CVE 번호가 명시되어 있지 않습니다. 보안 문제가 없다는 의미는 아닙니다.

사용 환경별 확인 순서

• php -v와 php -m으로 실제 실행 버전과 확장 목록을 확인하고 아래 원문에서 사용 중인 구성요소의 변경을 찾으세요.
• composer check-platform-reqs로 설치 환경의 요구사항을 확인하세요. 성공하더라도 동작 호환성까지 보장하지는 않습니다.
• TLS 연결을 사용한다면 외부 API·메일 서버 연결과 인증서 검증을 점검하세요.
• GD를 사용한다면 이미지 업로드·리사이즈 처리를 실제 파일로 확인하세요.
• 배포 전 스테이징에서 애플리케이션 테스트를 실행하고, 배포 후 웹 프로세스와 큐 워커가 새 PHP를 사용하는지 확인하세요.

공식 변경 기록

24 Oct 2024, PHP 8.3.13

• Calendar: . Fixed GH-16240: jdtounix overflow on argument value. (David Carlier) . Fixed GH-16241: easter_days/easter_date overflow on year argument. (David Carlier) . Fixed GH-16263: jddayofweek overflow. (cmb) . Fixed GH-16234: jewishtojd overflow. (nielsdos)

• CLI: . Fixed bug GH-16137: duplicate http headers when set several times by the client. (David Carlier)

• Core: . Fixed bug GH-16054 (Segmentation fault when resizing hash table iterator list while adding). (nielsdos) . Fixed bug GH-15905 (Assertion failure for TRACK_VARS_SERVER). (cmb) . Fixed bug GH-15907 (Failed assertion when promoting Serialize deprecation to exception). (ilutov) . Fixed bug GH-15851 (Segfault when printing backtrace during cleanup of nested generator frame). (ilutov) . Fixed bug GH-15866 (Core dumped in Zend/zend_generators.c). (Arnaud) . Fixed bug GH-16188 (Assertion failure in Zend/zend_exceptions.c). (Arnaud) . Fixed bug GH-16233 (Observer segfault when calling user function in internal function via trampoline). (nielsdos)

• DOM: . Fixed bug GH-16039 (Segmentation fault (access null pointer) in ext/dom/parentnode/tree.c). (nielsdos) . Fixed bug GH-16149 (Null pointer dereference in DOMElement->getAttributeNames()). (nielsdos) . Fixed bug GH-16151 (Assertion failure in ext/dom/parentnode/tree.c). (nielsdos) . Fixed bug GH-16150 (Use after free in php_dom.c). (nielsdos) . Fixed bug GH-16152 (Memory leak in DOMProcessingInstruction/DOMDocument). (nielsdos)

• JSON: . Fixed bug GH-15168 (stack overflow in json_encode()). (nielsdos)

• GD: . Fixed bug GH-16232 (bitshift overflow on wbmp file content reading / fix backport from upstream). (David Carlier) . Fixed bug GH-12264 (overflow/underflow on imagerotate degrees value) (David Carlier) . Fixed bug GH-16274 (imagescale underflow on RBG channels / fix backport from upstream). (David Carlier)

• LDAP: . Fixed bug GH-16032 (Various NULL pointer dereferencements in ldap_modify_batch()). (Girgias) . Fixed bug GH-16101 (Segfault in ldap_list(), ldap_read(), and ldap_search() when LDAPs array is not a list). (Girgias) . Fix GH-16132 (php_ldap_do_modify() attempts to free pointer not allocated by ZMM.). (Girgias) . Fix GH-16136 (Memory leak in php_ldap_do_modify() when entry is not a proper dictionary). (Girgias)

• MBString: . Fixed bug GH-16261 (Reference invariant broken in mb_convert_variables()). (nielsdos)

• OpenSSL: . Fixed stub for openssl_csr_new. (Jakub Zelenka)

• PCRE: . Fixed bug GH-16189 (underflow on offset argument). (David Carlier) . Fixed bug GH-16184 (UBSan address overflowed in ext/pcre/php_pcre.c). (nielsdos)

• PHPDBG: . Fixed bug GH-15901 (phpdbg: Assertion failure on i funcs). (cmb) . Fixed bug GH-16181 (phpdbg: exit in exception handler reports fatal error). (cmb)

• Reflection: . Fixed bug GH-16187 (Assertion failure in ext/reflection/php_reflection.c). (DanielEScherzer)

• SAPI: . Fixed bug GH-15395 (php-fpm: zend_mm_heap corrupted with cgi-fcgi request). (Jakub Zelenka, David Carlier)

• SimpleXML: . Fixed bug GH-15837 (Segmentation fault in ext/simplexml/simplexml.c). (nielsdos)

• Sockets: . Fixed bug GH-16267 (socket_strerror overflow on errno argument). (David Carlier)

• SOAP: . Fixed bug #73182 (PHP SOAPClient does not support stream context HTTP headers in array form). (nielsdos) . Fixed bug #62900 (Wrong namespace on xsd import error message). (nielsdos) . Fixed bug GH-15711 (SoapClient can't convert BackedEnum to scalar value). (nielsdos) . Fixed bug GH-16237 (Segmentation fault when cloning SoapServer). (nielsdos) . Fix Soap leaking http_msg on error. (nielsdos) . Fixed bug GH-16256 (Assertion failure in ext/soap/php_encoding.c:460). (nielsdos) . Fixed bug GH-16259 (Soap segfault when classmap instantiation fails). (nielsdos)

• SPL: . Fixed bug GH-15918 (Assertion failure in ext/spl/spl_fixedarray.c). (nielsdos)

• Standard: . Fixed bug GH-16053 (Assertion failure in Zend/zend_hash.c). (Arnaud) . Fixed bug GH-15169 (stack overflow when var serialization in ext/standard/var). (nielsdos)

• Streams: . Fixed bugs GH-15908 and GH-15026 (leak / assertion failure in streams.c). (nielsdos) . Fixed bug GH-15980 (Signed integer overflow in main/streams/streams.c). (cmb)

• TSRM: . Prevent closing of unrelated handles. (cmb)

• Windows: . Fixed minimal Windows version. (cmb)

출처

PHP 8.3.13 공식 NEWS · 현재 PHP 지원 일정

원문에 없는 지원 종료일, CVE, Laravel 호환성 결론은 자동으로 추가하지 않습니다.