📣 Announcing the immediate availability of:

- PHP 8.2.35
- PHP 8.3.36
- PHP 8.4.27
- PHP 8.5.12

‼️ These address the following critical security issues:

- Remote Code Execution via Out of Memory corruption (CVE-2026-109618)
- Remote Code Execution via Stale Global State (CVE-2026-109619)

📝 https://www.php.net/ChangeLog-8.php
🎁 https://www.php.net/downloads?source=Y
:windows8: Windows: https://www.php.net/downloads.php?os=windows

Read more: https://www.php.net/archive/2026.php#2026-10-21-5

#PHP #Release #Security #CVE

If you rely on the volunteer maintained rpms.remirepo.net we urge you to move to distro packages or building from source now, so you can immediately apply updates. The repo will not have updates today.

#php

The PHP security team is giving advance notice of an upcoming security release scheduled for Wed, 21 October 2026 at 14:00 UTC, addresses two critical vulnerabilities, both rated CVSSv4 9.2.

All PHP users are encouraged to prepare so they can upgrade immediately tomorrow. Should details of the vulnerabilities become public, or should evidence of active exploitation appear we will release sooner.

Full details, affected versions, and the fixed versions will be published with the release.

#php

🎉 PHP 8.6.0 RC3 is available for testing!

This continues the PHP 8.6 release cycle, featuring:

- New namespaced Openssl\Session
- URI Builders fixes
- Io\Poll polling API fixes
- Compile-time array_map() optimization

… and more!

➕ Do: Test your projects!

➖ Don't: Run it in production. It's not fully ready yet.

🔗 https://www.php.net/archive/2026.php#2026-10-08-1

#PHP #PHP86 #Release

🎉 PHP 8.6.0 Beta 1 is available for testing!

This is the first beta for PHP 8.6, including

- First set of PHP 8.6 deprecations
- Time\Duration class + Time\TimeException
- Readonly properties
- Closure optimizations

… and more!

➕ Do: Test your projects!

➖ Don't: Run it in production. It's not fully ready yet.

This marks PHP 8.6 Soft feature freeze: all RFCs must have their voting concluded

🔗 https://www.php.net/archive/2026.php#2026-08-13-1

#PHP #PHP86 #Release

🎉 PHP 8.6.0 Alpha 3 is available for testing!

This continues the PHP 8.6 release cycle, featuring:

- Partial Function Application
- New IO copy API for faster stream copying
- Re-enable JIT for ZTS builds on Apple Silicon
- Removed the dependency on the ICU IO library
- Several GMP improvements

… and more!

✅ Test your projects
❌ Not for production

🔗 https://www.php.net/archive/2026.php#2026-07-30-3

#PHP #Release #PHP86

🎉 PHP 8.6.0 Alpha 2 is available for testing!

This continues the PHP 8.6 release cycle, featuring:

- #[\Override] on class constants
- CURLOPT_SEEKFUNCTION (et al)
- Improved ZTS performance
- Improved error messages in SOAP
- Improved error messages for truncated JSON

… and more!

✅ Test your projects
❌ Not for production

Congrats @joepferguson, @mbeccati, and Daniel Scherzer

🔗 https://www.php.net/archive/2026.php#2026-07-16-1

#PHP #Release #PHP86

🎉 PHP 8.6.0 Alpha 1 is available for testing!

In this very initial preview for PHP 8.6, we have:

- A new scalable polling API in Io\Poll
- class Uri\Rfc3986\UriBuilder
- Improved JSON error messages including error positions
- ReflectionProperty::isReadable() and ::isWritable()
- clamp()
- enum SortDirection

… and more!

✅ Test your projects
❌ Not for production

Congrats @joepferguson, @mbeccati, and Daniel Scherzer

🔗 https://www.php.net/archive/2026.php#2026-07-02-3

#PHP #Release #PHP86

📣 Announcing the immediate availability of:

- PHP 8.2.32
- PHP 8.3.32
- PHP 8.4.23
- PHP 8.5.8

‼️ These address the following security issues:

- Memory corruption in openssl_encrypt with AES-WRAP-PAD
- Uninitialized memory in the path buffer growth in Lexbor
- Segfault in file_get_contents w/ a https URL and a proxy set

📝 https://www.php.net/ChangeLog-8.php
🎁 https://www.php.net/downloads
:windows8: Windows: https://www.php.net/downloads.php?os=windows

#PHP #Release

📣 Available now:

- PHP 8.2.31
- PHP 8.3.31
- PHP 8.4.21
- PHP 8.5.6

‼️ Security fixes:
- DoS in DOMNode::C14N()
- Integer overflow in metaphone()
- SQL injection in pdo_firebird (NUL in query strings)
- Buffer over-read in mb_convert_encoding()
- OOB read in urldecode()
- UAF/RCE in SOAP
- XSS in PHP-FPM status page
- NULL/UAF in Mbstring and SOAP

📝 https://www.php.net/ChangeLog-8.php
🎁 https://www.php.net/downloads
:windows8: Windows: https://www.php.net/downloads.php?os=windows

#PHP #Release

We are looking for Release Managers for PHP 8.6.

If that is interesting to you, check out the internals mailing list announcement:

🔗 https://news-web.php.net/php.internals/130240

#PHP #PHP86

📣 Announcing the immediate availability of:

- PHP 8.5.3
- PHP 8.4.18

📝 Changelog: https://www.php.net/ChangeLog-8.php
🎁 Source: https://www.php.net/downloads
:windows8: Windows: https://www.php.net/downloads.php?os=windows

#PHP #Release

RE: https://hachyderm.io/@itworldcup/115926604229775228

It'd be lovely if you could show your support!

♥️

📣 Announcing the immediate availability of:

- PHP 8.5.2
- PHP 8.4.17
- PHP 8.3.30

📝 Changelog: https://www.php.net/ChangeLog-8.php
🎁 Source: https://www.php.net/downloads
:windows8: Windows: https://www.php.net/downloads.php?os=windows

#PHP #Release

⛔ As of January 1, PHP 8.3 is in security support mode, and PHP 8.1 reached end of life.

🆙 Consider upgrading to PHP 8.4 or higher.

To read more about how to upgrade:

🔗 https://php.net/migration84
🔗 https://php.net/migration85

#PHP #PHP85 #PHP84 #PHP83 #PHP82 #PHP81

📣 Announcing the immediate availability of:

- PHP 8.1.34
- PHP 8.2.30
- PHP 8.3.29
- PHP 8.4.16
- PHP 8.5.1

‼️ These address the following security issues:

- PDO quoting result null deref
- Null byte termination in dns_get_record()
- Heap buffer overflow in array_merge()
- Information Leak of Memory in getimagesize()

📝 https://www.php.net/ChangeLog-8.php
🎁 https://www.php.net/downloads
:windows8: https://windows.php.net/download/

#PHP #Release

🥳 PHP 8.5 Released!

In this new release, we have:

🌐 URI Extension
▶️ Pipe Operator
📑 Clone With
⚠️ A New #[\NoDiscard] Attribute
🆕 Closures and First-Class Callables in Constant Expressions
🌀 Persistent cURL Share Handles

👓 Read all about it on: https://www.php.net/releases/8.5/

🔗 https://php.net/ChangeLog-8#8.5.0
📦 https://php.net/downloads

#PHP #PHP85 #Release

🎉 PHP 8.5.0 RC 2 is available for testing!

This is the second release candidate for PHP 8.5, including

- Revert deprecation of __sleep() and __wakeup(). They're now soft-deprecated (Docs only) instead.
- Lots of bug fixes thanks to your testing

Details: https://github.com/php/php-src/blob/php-8.5.0RC2/NEWS

➕ Do: Test your projects!

➖ Don't: Run it in production. It's not fully ready yet.

Congratulations to @edorian, Daniel, and @adoy

🔗 https://www.php.net/archive/2025.php#2025-10-09-2

#PHP #PHP85 #Release

🎉 PHP 8.5.0 RC 1 is available for testing!

This is the first release candidate for PHP 8.5, including

- Implementation of remaining deprecations and warnings
- Finishing up the new Uri extension
- Bug fixes thanks to your testing and feedback

… and more!

➕ Do: Test your projects!

➖ Don't: Run it in production. It's not fully ready yet.

Congratulations to Daniel, @edorian, and @adoy

🔗 https://www.php.net/archive/2025.php#2025-09-25-3

#PHP #PHP85 #Release

📣 Announcing the immediate availability of:

- PHP 8.4.13
- PHP 8.3.26

📝 Changelog: https://www.php.net/ChangeLog-8.php
🎁 Source: https://www.php.net/downloads
:windows8: Windows: https://windows.php.net/download/

#PHP #Release