PHP 8.3.30 Release Announcement

The PHP development team announces the immediate availability of PHP 8.3.30. This is a bug fix release.

All PHP 8.3 users are encouraged to upgrade to this version.

For source downloads of PHP 8.3.30 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.

Source Code

• PHP 8.3.30 (tar.gz)
  sha256: e587dc95fb7f62730299fa7b36b6e4f91e6708aaefa2fff68a0098d320c16386
• PHP 8.3.30 (tar.bz2)
  sha256: 800b7b6ed50b73c8ee7844ee5f2f7cc612faa7875a0aa7c4529e8ed5866a5030
• PHP 8.3.30 (tar.xz)
  sha256: 67f084d36852daab6809561a7c8023d130ca07fc6af8fb040684dd1414934d48

Change Log

• core
  • Fix OSS-Fuzz #465488618 (Wrong assumptions when dumping function signature with dynamic class const lookup default argument).
  • Fixed bug GH-20695 (Assertion failure in normalize_value() when parsing malformed INI input via parse_ini_string()).
  • Fixed bug GH-20714 (Uncatchable exception thrown in generator).
  • Fixed bug GH-20352 (UAF in php_output_handler_free via re-entrant ob_start() during error deactivation).
• bz2
  • Fixed bug GH-20620 (bzcompress overflow on large source size).
• dom
  • Fixed bug GH-20722 (Null pointer dereference in DOM namespace node cloning via clone on malformed objects).
• gd
  • Fixed bug GH-20622 (imagestring/imagestringup overflow).
• intl
  • Fix leak in umsg_format_helper().
• ldap
  • Fix memory leak in ldap_set_options().
• mbstring
  • Fixed bug GH-20674 (mb_decode_mimeheader does not handle separator).
• phar
  • Fixed bug GH-20732 (Phar::LoadPhar undefined behavior when reading fails).
  • Fix SplFileInfo::openFile() in write mode.
  • Fix build on legacy OpenSSL 1.1.0 systems.
• posix
  • Fixed crash on posix groups to php array creation on macos.
• spl
  • Fixed bug GH-20678 (resource created by GlobIterator crashes with fclose()).
• sqlite3
  • Fixed bug GH-20699 (SQLite3Result fetchArray return array|false, null returned).
• standard
  • Fix error check for proc_open() command.
  • Fixed bug GH-20582 (Heap Buffer Overflow in iptcembed).
• zlib
  • Fix OOB gzseek() causing assertion failure.