PHP 8.3.17: Downloads, Changelog, News

Release Information

Release
8.3.17
PHP Version
PHP 8.3
Release Date
Release Type
Bug Fix Release
Release Status
Use PHP 8.3.19 instead
Branch Status
Supported

PHP 8.3.17 is an old release of PHP 8.3 series. Using the latest version PHP 8.3.19 is highly recommended.
PHP 8.3 continues to receive bug fixes and security fixes until 2025-12-31.

Downloads

Source Code

Git Clone
Use Git to clone the 8.3.17 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-8.3.17
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (./buildconf), configuring the build ./configure, and running make.
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.

Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.

Docker/Podman Containers

PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.3.17-cli-alpine

Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:8.3.17-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.3.17-fpm-alpine

Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:8.3.17-apache

Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:8.3.17-fpm

ChangeLog

Core

  • Fixed bug GH-16892 (ini_parse_quantity() fails to parse inputs starting with 0x0b).
  • Fixed bug GH-16886 (ini_parse_quantity() fails to emit warning for 0x+0).
  • Fixed bug GH-17214 (Relax final+private warning for trait methods with inherited final).
  • Fixed NULL arithmetic during system program execution on Windows.
  • Fixed potential OOB when checking for trailing spaces on Windows.
  • Fixed bug GH-17408 (Assertion failure Zend/zend_exceptions.c).
  • Fix may_have_extra_named_args flag for ZEND_AST_UNPACK.
  • Fix NULL arithmetic in System V shared memory emulation for Windows.

DOM

  • Fixed bug GH-17500 (Segfault with requesting nodeName on nameless doctype).

Enchant

  • Fix crashes in enchant when passing null bytes.

FTP

  • Fixed bug GH-16800 (ftp functions can abort with EINTR).

GD

  • Fixed bug GH-17349 (Tiled truecolor filling looses single color transparency).
  • Fixed bug GH-17373 (imagefttext() ignores clipping rect for palette images).
  • Ported fix for libgd 223 (gdImageRotateGeneric() does not properly interpolate).

Intl

  • Fixed bug GH-11874 (intl causing segfault in docker images).
  • Fixed bug GH-17469 (UConverter::transcode always emit E_WARNING on invalid encoding).

Opcache

  • Fixed bug GH-17307 (Internal closure causes JIT failure).
  • Fixed bug GH-17564 (Potential UB when reading from / writing to struct padding).

PDO

  • Fixed a memory leak when the GC is used to free a PDOStatment.
  • Fixed a crash in the PDO Firebird Statement destructor.
  • Fixed UAFs when changing default fetch class ctor args.

Phar

  • Fixed bug GH-17518 (offset overflow phar extractTo()).

PHPDBG

  • Fix crashes in function registration + test.

Session

  • Fix type confusion with session SID constant.
  • Fixed bug GH-17541 (ext/session NULL pointer dereferencement during ID reset).

SimpleXML

  • Fixed bug GH-17409 (Assertion failure Zend/zend_hash.c:1730).

SNMP

  • Fixed bug GH-17330 (SNMP::setSecurity segfault on closed session).

SPL

  • Fixed bug GH-17463 (crash on SplTempFileObject::ftruncate with negative value).

Zip

  • Fixed bug GH-17139 (Fix zip_entry_name() crash on invalid entry).

Commit List

Calvin Buckley

  • Fix crash in PDO_ODBC statement dtor in GH-17586

Christoph M. Becker

  • gh15937.phpt does not need to be an online test in 919f1984d5
  • Fix GH-17349: Tiled truecolor filling looses single color transparency in 2c658f422d
  • Fix GH-17373: imagefttext() ignores clipping rect for palette images in ec90367cd8
  • Fix libgd 223: gdImageRotateGeneric() does not properly interpolate in 47683487f8
  • Fix NULL arithmetic during system program execution in 022a5fca91
  • Fix potential OOB when checking for trailing spaces in ed8b11188b
  • Use preinstalled MySQL for Windows CI in a403b76e88
  • Fix NULL arithmetic in System V shared memory emulation in 2e02cdfb5f

David Carlier

Derick Rethans

Gina Peter Banyard

  • ext/session: Fix GH-17541 (ext/session NULL pointer dereferencement during ID reset) in a85666c17b
  • ext/pdo: Fix memory leak if GC needs to free PDO Statement in 99f8ec33d9
  • Add NEWS entries in e6d917e4c9
  • ext/pdo: Fix a UAF when changing default fetch class ctor args in 3027600ffc

Ilija Tovilo

  • Relax final+private warning for trait methods with inherited final in a6a290d541
  • Backport nightly.yml in f26250c7c7
  • Skip Symfony/Wordpress in 8.1 build in 5b8c960c9f
  • Fix GHA config yml error in 3e6f4702ba
  • Fix mysql mysql_native_password error on CircleCI in c99fb05929
  • Fix inline zend_string using struct padding in 8ea9b04a23
  • Fix cve-2014-3538 test in d17d58a982
  • Fix missing GC_PERSISTENT_LOCAL flag on accel_globals.key in 2ad778bc76

Jakub Zelenka

  • Test stream_context_tcp_nodelay_server on Windows in 9e1b58274e
  • Rewrite http gh16810 test to not be online in 5b72f12c56
  • Fix GH-17499: mysqli flaky test: ghsa-h35g-vwh6-m678-stmt-row-string in 235d1b14a3
  • Update versions for PHP 8.3.17 in b4dbf5f762

Niels Dossche

Remi Collet

Subscribe to PHP.Watch newsletter for monthly updates

You will receive an email on last Wednesday of every month and on major PHP releases with new articles related to PHP, upcoming changes, new features and what's changing in the language. No marketing emails, no selling of your contacts, no click-tracking, and one-click instant unsubscribe from any email you receive.

Support PHP.Watch — If you find the articles, version information, Codex, and other PHP.Watch contributions useful, consider supporting through GitHub Sponsors. Your sponsorship helps dedicate more time to creating valuable content and improving the PHP community. Together, we can keep the momentum going — thank you for your support!

Thanks to the highest tier sponsor: @TomasVotruba for your generous support to keep PHP.Watch moving 💜