PHP Release 8.3.30

    PHP 8.3.30 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.3.30. This is a bug fix release.

    All PHP 8.3 users are encouraged to upgrade to this version.

    For source downloads of PHP 8.3.30 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.3.30 (tar.gz)
    SHA256: e587dc95fb7f62730299fa7b36b6e4f91e6708aaefa2fff68a0098d320c16386
    PHP 8.3.30 (tar.bz2)
    SHA256: 800b7b6ed50b73c8ee7844ee5f2f7cc612faa7875a0aa7c4529e8ed5866a5030
    PHP 8.3.30 (tar.xz)
    SHA256: 67f084d36852daab6809561a7c8023d130ca07fc6af8fb040684dd1414934d48
    Change Logs
    core
    • Fix OSS-Fuzz #465488618 (Wrong assumptions when dumping function signature with dynamic class const lookup default argument).
    • Fixed bug GH-20695 (Assertion failure in normalize_value() when parsing malformed INI input via parse_ini_string()).
    • Fixed bug GH-20714 (Uncatchable exception thrown in generator).
    • Fixed bug GH-20352 (UAF in php_output_handler_free via re-entrant ob_start() during error deactivation).
    bz2
    • Fixed bug GH-20620 (bzcompress overflow on large source size).
    dom
    • Fixed bug GH-20722 (Null pointer dereference in DOM namespace node cloning via clone on malformed objects).
    gd
    • Fixed bug GH-20622 (imagestring/imagestringup overflow).
    intl
    • Fix leak in umsg_format_helper().
    ldap
    • Fix memory leak in ldap_set_options().
    mbstring
    • Fixed bug GH-20674 (mb_decode_mimeheader does not handle separator).
    phar
    • Fixed bug GH-20732 (Phar::LoadPhar undefined behavior when reading fails).
    • Fix SplFileInfo::openFile() in write mode.
    • Fix build on legacy OpenSSL 1.1.0 systems.
    posix
    • Fixed crash on posix groups to php array creation on macos.
    spl
    • Fixed bug GH-20678 (resource created by GlobIterator crashes with fclose()).
    sqlite3
    • Fixed bug GH-20699 (SQLite3Result fetchArray return array|false, null returned).
    standard
    • Fix error check for proc_open() command.
    • Fixed bug GH-20582 (Heap Buffer Overflow in iptcembed).
    zlib
    • Fix OOB gzseek() causing assertion failure.
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top