PHP Release 8.4.17

    PHP 8.4.17 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.4.17. This is a bug fix release.

    All PHP 8.4 users are encouraged to upgrade to this version.

    For source downloads of PHP 8.4.17 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.4.17 (tar.gz)
    SHA256: aa0efeb7b47adff31e10bed1fc4ffcd4c0b5a4d41ab0bacfbb549c584939ee90
    PHP 8.4.17 (tar.bz2)
    SHA256: ea67d83d72dd6f3abaaeae7f532f78fd12192861d96aba8e9eca3b2ddade42d2
    PHP 8.4.17 (tar.xz)
    SHA256: 28b234e347286158cae921d61283eb1169d89bc9d2e5f5976567260ff38b0bfa
    Change Logs
    core
    • Fix OSS-Fuzz #465488618 (Wrong assumptions when dumping function signature with dynamic class const lookup default argument).
    • Fixed bug GH-20695 (Assertion failure in normalize_value() when parsing malformed INI input via parse_ini_string()).
    • Fixed bug GH-20714 (Uncatchable exception thrown in generator).
    • Fixed bug GH-20352 (UAF in php_output_handler_free via re-entrant ob_start() during error deactivation).
    bz2
    • Fixed bug GH-20620 (bzcompress overflow on large source size).
    dom
    • Fixed bug GH-20722 (Null pointer dereference in DOM namespace node cloning via clone on malformed objects).
    • Fixed bug GH-20444 (Dom\XMLDocument::C14N() seems broken compared to DOMDocument::C14N()).
    gd
    • Fixed bug GH-20622 (imagestring/imagestringup overflow).
    intl
    • Fix leak in umsg_format_helper().
    ldap
    • Fix memory leak in ldap_set_options().
    mbstring
    • Fixed bug GH-20674 (mb_decode_mimeheader does not handle separator).
    openssl
    • Fixed bug GH-20802 (undefined behavior with invalid SNI_server_certs options).
    pcntl
    • Fixed bug with pcntl_getcpuaffinity() on solaris regarding invalid process ids handling.
    phar
    • Fixed bug GH-20732 (Phar::LoadPhar undefined behavior when reading fails).
    • Fix SplFileInfo::openFile() in write mode.
    • Fix build on legacy OpenSSL 1.1.0 systems.
    • Fixed bug #74154 (Phar extractTo creates empty files).
    posix
    • Fixed crash on posix groups to php array creation on macos.
    spl
    • Fixed bug GH-20678 (resource created by GlobIterator crashes with fclose()).
    sqlite3
    • Fixed bug GH-20699 (SQLite3Result fetchArray return array|false, null returned).
    standard
    • Fix error check for proc_open() command.
    • Fix memory leak in mail() when header key is numeric.
    • Fixed bug GH-20582 (Heap Buffer Overflow in iptcembed).
    zlib
    • Fix OOB gzseek() causing assertion failure.
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top