Release Information
- Release Type
- Security Update
- Release Status
- Latest
- Branch Status
- Supported (Latest)
Latest PHP release in the latest version. This release contains security fixes, and it is recommended to update as soon as possible.
PHP 8.4 continues to receive bug fixes and security fixes until 2026-12-31.
Downloads
Source Code
Git Clone
Use Git to clone the 8.4.10 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-8.4.10
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf
), configuring the build ./configure
, and running make
.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-8.4.10-x64NTS.zip (32.22 MiB)
php-8.4.10-x86NTS.zip (28.89 MiB)
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-8.4.10-x64TS.zip (32.38 MiB)
php-8.4.10-x86TS.zip (28.96 MiB)
Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.4.10-cli-alpine
Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:8.4.10-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.4.10-fpm-alpine
Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:8.4.10-apache
Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:8.4.10-fpm
ChangeLog
BcMath
- Fixed bug GH-18641 (Accessing a BcMath\Number property by ref crashes).
Core
- Fixed bugs GH-17711 and GH-18022 (Infinite recursion on deprecated attribute evaluation) and GH-18464 (Recursion protection for deprecation constants not released on bailout).
- Fixed GH-18695 (
zend_ast_export()
- float number is not preserved). - Fix handling of references in
zval_try_get_long()
. - Do not delete main chunk in zend_gc.
- Fix compile issues with
zend_alloc
and some non-default options.
Curl
- Fix memory leak when setting a list via
curl_setopt
fails.
Date
- Fix leaks with multiple calls to DatePeriod iterator current().
DOM
- Fixed bug GH-18744 (classList works not correctly if copy HTMLElement by clone keyword).
FPM
- Fixed GH-18662 (fpm_get_status segfault).
Hash
- Fixed bug GH-14551 (PGO build fails with xxhash).
Intl
- Fix memory leak in
intl_datetime_decompose()
on failure. - Fix memory leak in locale lookup on failure.
Opcache
- Fixed bug GH-18743 (Incompatibility in Inline TLS Assembly on Alpine 3.22).
ODBC
- Fix memory leak on
php_odbc_fetch_hash()
failure.
OpenSSL
- Fix memory leak of
X509_STORE
inphp_openssl_setup_verify()
on failure. - Fixed bug #74796 (Requests through http proxy set peer name).
PDO ODBC
- Fix memory leak if WideCharToMultiByte() fails.
PDO Sqlite
- Fixed memory leak with Pdo_Sqlite::createCollation when the callback has an incorrect return type.
Phar
- Add missing filter cleanups on phar failure.
- Fixed bug GH-18642 (Signed integer overflow in
ext/phar
fseek).
PHPDBG
- Fix 'phpdbg
--help
' segfault on shutdown withUSE_ZEND_ALLOC
=0.
PGSQL
- Fix warning not being emitted when failure to cancel a query with
pg_cancel_query()
.
Random
- Fix reference type confusion and leak in user random engine.
Readline
- Fix memory leak when
calloc()
fails inphp_readline_completion_cb()
.
SimpleXML
- Fixed bug GH-18597 (Heap-buffer-overflow in
zend_alloc.c
when assigning string with UTF-8 bytes).
Soap
- Fix memory leaks in
php_http.c
whencall_user_function()
fails.
Tidy
- Fix memory leak in tidy output handler on error.
- Fix tidyOptIsReadonly deprecation, using tidyOptGetCategory.
Commit List
Ahmed Lekssays
- Fix GHSA-453j-q27h-5p8x in 158aa14167
Gina Peter Banyard
ext/dom
: Fix new MSVC compiler warning in 758e1e3192
Jakub Zelenka
- Fix GHSA-3cr5-j632-f35r: Null byte in hostnames in 9234b0d62c
- Fix GHSA-hrwm-9436-5mv3: pgsql escaping no error checks in 2e37a4d8aa
- Update NEWS with entries for security fixes in 80637d11b3
Saki Takamachi
- Update versions for PHP 8.4.10 in f600f86ac4
- Update versions for PHP 8.4.10 in 5b61b6dd83