PHP Release 8.3.12

    PHP 8.3.12 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.3.12. This is a security release.

    All PHP 8.3 users are encouraged to upgrade to this version.

    For source downloads of PHP 8.3.12 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.3.12 (tar.gz)
    SHA256: 7090e551e05b26384546345d6a162c71b74550febf75bdfd16dfd1f0cfa8647c
    PHP 8.3.12 (tar.bz2)
    SHA256: 807633496ccdb370a8905458db82bd67366e98a6d59728914b797b87e9caecbf
    PHP 8.3.12 (tar.xz)
    SHA256: f774e28633e26fc8c5197f4dae58ec9e3ff87d1b4311cbc61ab05a7ad24bd131
    Change Logs
    cgi
    • Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926)
    • Fixed bug GHSA-94p6-54jq-9mwp (cgi.force_redirect configuration is bypassable due to the environment variable collision). (CVE-2024-8927)
    core
    • Fixed bug GH-15408 (MSan false-positve on zend_max_execution_timer).
    • Fixed bug GH-15515 (Configure error grep illegal option q).
    • Fixed bug GH-15514 (Configure error: genif.sh: syntax error).
    • Fixed bug GH-15565 (--disable-ipv6 during compilation produces error EAI_SYSTEM not found).
    • Fixed bug GH-15587 (CRC32 API build error on arm 32-bit).
    • Fixed bug GH-15330 (Do not scan generator frames more than once).
    • Fixed uninitialized lineno in constant AST of internal enums.
    curl
    • FIxed bug GH-15547 (curl_multi_select overflow on timeout argument).
    dom
    • Fixed bug GH-15551 (Segmentation fault (access null pointer) in ext/dom/xml_common.h).
    • Fixed bug GH-15654 (Signed integer overflow in ext/dom/nodelist.c).
    fileinfo
    • Fixed bug GH-15752 (Incorrect error message for finfo_file with an empty filename argument).
    fpm
    mysqlnd
    • Fixed bug GH-15432 (Heap corruption when querying a vector).
    opcache
    • Fixed bug GH-15661 (Access null pointer in Zend/Optimizer/zend_inference.c).
    • Fixed bug GH-15658 (Segmentation fault in Zend/zend_vm_execute.h).
    sapi
    standard
    • Fixed bug GH-15552 (Signed integer overflow in ext/standard/scanf.c).
    streams
    • Fixed bug GH-15628 (php_stream_memory_get_buffer() not zero-terminated).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top