updatealert.io Logo
PHP Group php php 8.3 logo

PHP Group php php 8.3 Update Version 8.3.30

Views
5

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

PHP 8.3.30 addresses multiple memory-safety vulnerabilities and crashes across core, DOM, GD, Phar, SPL, Standard, and Zlib, along with other reliability and compatibility fixes.

Update Details

Security

  • Fixed a use-after-free in php_output_handler_free caused by re-entrant ob_start() during error deactivation.
  • Fixed a null pointer dereference when cloning DOM namespace nodes from malformed objects.
  • Fixed an integer overflow in imagestring() and imagestringup().
  • Fixed a heap buffer overflow in iptcembed().
  • Fixed an out-of-bounds gzseek() condition that caused an assertion failure.
  • Fixed an integer overflow in bzcompress() with large source sizes.

Bug Fixes

  • Fixed an assertion failure in normalize_value() when parsing malformed INI input with parse_ini_string() (GH-20695).
  • Fixed an uncatchable exception thrown from a generator (GH-20714).
  • Corrected function-signature dumping with dynamic class-constant lookup default arguments, identified by OSS-Fuzz #465488618.
  • Fixed a memory leak in umsg_format_helper().
  • Fixed a memory leak in ldap_set_options().
  • Fixed mb_decode_mimeheader() handling of separators (GH-20674).
  • Fixed undefined behavior in Phar::loadPhar() when reading fails (GH-20732).
  • Fixed SplFileInfo::openFile() in write mode.
  • Fixed a crash when converting POSIX groups to a PHP array on macOS.
  • Fixed a crash when closing a resource created by GlobIterator with fclose() (GH-20678).
  • Fixed SQLite3Result::fetchArray() returning null instead of array|false (GH-20699).
  • Corrected error checking for proc_open() commands.

Hints

  • Build compatibility was restored for systems using legacy OpenSSL 1.1.0.

Product Information

Vendor: PHP Group

Product: php

Product type: Software

Variant: php 8.3

Version: 8.3.30

Vendor information published: Jan 15, 2026

Original release notes: View on vendor site

Published on updatealert.io: Oct 27, 2026

Description: A popular general-purpose scripting language that is especially suited to web development. Fast, flexible and pragmatic, PHP powers everything from your blog to the most popular websites in the world.

View All Updates