PHP Release 8.4.11

    PHP 8.4.11 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.4.11. This is a bug fix release.

    All PHP 8.4 users are encouraged to upgrade to this version.

    For source downloads of PHP 8.4.11 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.4.11 (tar.gz)
    SHA256: 422548cd8cf14ab0264ba510d3586476b0e77a3272356ba486bc82e706dc6cc8
    PHP 8.4.11 (tar.bz2)
    SHA256: 2c39c75b54df89b01195b72ad0ee1fcd490c71db18bc52bcd61fb2ffb57b26fa
    PHP 8.4.11 (tar.xz)
    SHA256: 04cd331380a8683a5c2503938eb51764d48d507c53ad4208d2c82e0eed779a00
    Change Logs
    calendar
    • Fixed jewishtojd overflow on year argument.
    core
    • Fixed bug GH-18833 (Use after free with weakmaps dependent on destruction order).
    • Fixed bug GH-18907 (Leak when creating cycle in hook).
    • Fix OSS-Fuzz #427814456.
    • Fix OSS-Fuzz #428983568 and #428760800.
    curl
    • Fix memory leaks when returning refcounted value from curl callback.
    • Remove incorrect string release.
    dom
    • Fixed bug GH-18979 (Dom\XMLDocument::createComment() triggers undefined behavior with null byte).
    ldap
    • Fixed GH-18902 ldap_exop/ldap_exop_sync assert triggered on empty request OID.
    mbstring
    • Fixed bug GH-18901 (integer overflow mb_split).
    opcache
    • Fixed bug GH-18639 (Internal class aliases can break preloading + JIT).
    • Fixed bug GH-18899 (JIT function crash when emitting undefined variable warning and opline is not set yet).
    • Fixed bug GH-14082 (Segmentation fault on unknown address 0x600000000018 in ext/opcache/jit/zend_jit.c).
    • Fixed bug GH-18898 (SEGV zend_jit_op_array_hot with property hooks and preloading).
    openssl
    • Fixed bug #80770 (It is not possible to get client peer certificate with stream_socket_server).
    pcntl
    • Fixed bug GH-18958 (Fatal error during shutdown after pcntl_rfork() or pcntl_forkx() with zend-max-execution-timers).
    phar
    • Fix stream double free in phar.
    • Fix phar crash and file corruption with SplFileObject.
    soap
    • Fixed bug GH-18990, bug #81029, bug #47314 (SOAP HTTP socket not closing on object destruction).
    • Fix memory leak when URL parsing fails in redirect.
    spl
    • Fixed bug GH-19094 (Attaching class with no Iterator implementation to MultipleIterator causes crash).
    standard
    • Fix misleading errors in printf().
    • Fix RCN violations in array functions.
    • Fixed GH-18976 pack() overflow with h/H format and INT_MAX repeater value.
    streams
    • Fixed GH-13264 (fgets() and stream_get_line() do not return false on filter fatal error).
    zip
    • Fix leak when path is too long in ZipArchive::extractTo().
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top