Release Information
- Release Type
- Security Update
- Release Status
- Latest
- Branch Status
- Security-Fixes Only
PHP 8.3 is currently only receiving security fixes, and scheduled to reach EOL on 2027-12-31
Downloads
Source Code
Git Clone
Use Git to clone the 8.3.36 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-8.3.36How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf), configuring the build ./configure, and running make.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-8.3.36-x64NTS.zip
Size: 32.52 MiB SHA256:
3c9242622c7402b47c38d2ec2ed779cef3a290fd6f2bde6c35f9c482699e7900 php-8.3.36-x86NTS.zip
Size: 29.38 MiB SHA256:
82f96158e0dee165ceb86e1f0b6bfe8ec57b4ca2e25a49b2b6c4220e82b2ea88 Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-8.3.36-x64TS.zip
Size: 32.67 MiB SHA256:
0606810ff8fc232406aaab677b760e06af93a63a366d33ff738d4ce90501dfa5 php-8.3.36-x86TS.zip
Size: 29.34 MiB SHA256:
8b25d48eed1717012d327246558802145861aad538c0e52663fcab907dc6854b Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.3.36-cli-alpineDebian-based: More compatible with other components, complete, and are widely used.
docker pull php:8.3.36-cliPHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.3.36-fpm-alpineDebian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:8.3.36-apacheDebian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:8.3.36-fpmChangeLog
Core
- Fixed GHSA-w8hw-w9fx-j79w, GHSA-6wmf-4rv5-p3rp (Avoid state corruption via bailout). (CVE-2026-109618, CVE-2026-109619)
Commit List
Alexandre Daubois
- Backport PCRE2 security fixes to bundled 10.40 in 1e8a51d545
Arnaud Le Blanc
- Avoid state corruption via bailout in 3c832b523e
Eric Mann
- Update versions for PHP 8.3.36 in 5ba6ad5192
Ilija Tovilo
- Add NEWS entry in d59a20c8f9
Marc
- fix windows ci: w11 no longer treats names like NUL.txt as reserved in GH-23844
Shivam Mathur
- Update PHP SDK to 2.8.4 in GH-23858
- Upgrade macos in CI. in GH-24032
- Preserve bare NUL access with
open_basediron Windows in GH-24158 ext/gd: Drop useless and doubtful MSVC specific code (libgd/libgd@f1480ab) in GH-24316- Use the default archive names for Windows ARM64 builds in GH-24313
- Fix v142 ARM64 hash and floating point results in GH-24317
- Pin macOS CI to OpenSSL 3 in GH-24332
- Fix macOS CI in GH-24409
Sjoerd Langkemper
- Use FreeBSD 14.4 in GitHub actions in 810f0c6a81