Release Information
- Release Type
- Security Update
- Release Status
- Latest
- Branch Status
- Security-Fixes Only
PHP 8.3 is currently only receiving security fixes, and scheduled to reach EOL on 2027-12-31
Downloads
Source Code
Git Clone
Use Git to clone the 8.3.33 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-8.3.33How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf), configuring the build ./configure, and running make.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-8.3.33-x64NTS.zip
Size: 32.28 MiB SHA256:
534399107056313246f424adbbb7937337e40fbbf6aa7bc26287ba9cfd2e4a2a php-8.3.33-x86NTS.zip
Size: 29.14 MiB SHA256:
590cc24bed2b3ce52d0ca387d7912e9500715848af834d5346b98d3a81892e07 Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-8.3.33-x64TS.zip
Size: 32.43 MiB SHA256:
b089e370ff99eb7038b0d22617dec2f3a1d0e93ca26b11fd218f2f5b60422271 php-8.3.33-x86TS.zip
Size: 29.12 MiB SHA256:
ba37894e00a37012631ffa062556e85a64cecaa44746c6c0b65f1a0915e869bf Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.3.33-cli-alpineDebian-based: More compatible with other components, complete, and are widely used.
docker pull php:8.3.33-cliPHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.3.33-fpm-alpineDebian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:8.3.33-apacheDebian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:8.3.33-fpmChangeLog
Date
- Fixed leak on double
DatePeriod::__construct()call.
GD
- Upgrade libgd. (CVE-2026-9672)
PGSQL
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via E'...' backslash breakout). (CVE-2026-17543)
Phar
- Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260)
Commit List
Arnaud Le Blanc
- CI: Enable JIT testing on Apple Silicon ZTS 8.6+ in fa47ae16a1
Eric Mann
- Update versions for PHP 8.3.33 in 4a55da8cb5
Ilia Alshanetsky
- Regenerate the expired ext/ftp/tests/cert.pem in GH-22873
Ilija Tovilo
- Fix leak on double
DatePeriod::__construct()call in 2d86f8cf48 - libgd patch for CVE-2026-9672 in f7b43bf6a6
- Fix SQL injection in ext-pgsql via E'...' backslash breakout in 99be038cc1
- Add NEWS entries in 9e7ffc2b38
Jakub Zelenka
- Fix GHSA-vc5h-9ppw-p5f3: phar circular symlink crash in 9eb06f37fc
Nora Dossche
- Fix NULL deref when enabling TLS fails and the peer name needs to be reset in fc0f25f286