![\"Dutch](\"https://www.php.net//images/news/dpc-2027.png\")
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.
\nWho is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs.
\nThe vulnerabilities:
\nHow to update:
\nIf you cannot update immediately: while only an update is a complete solution, the following measures reduce exposure to specific attack paths but do not make an installation safe.
\nRCE via OOM corruption (CVE-2026-109618):
\nmemory_limit=-1, preferably in a way applications can't override, such as php_admin_value in the FPM pool or Apache configuration, and check that no pool, directory or application setting puts a finite limit back. This removes the controllable PHP memory limit failure, but an underlying allocation failure can still reach the vulnerable path.post_max_size. For applications that don't require file uploads, set post_max_size = 8M. If file uploads are necessary, set post_max_size = 32M. Keep upload_max_filesize below post_max_size. Consider enforcing limits at the web server or proxy level for decoded request size, input field count, multipart part count, header count, and nesting depth. These limits must also cover requests without a usable Content-Length.RLIMIT_AS or RLIMIT_DATA, as these can cause the vulnerable allocation failure.RCE via stale global state (CVE-2026-109619):
\nsession.upload_progress.enabled=0 and restart every worker. Use php.ini, an FPM pool or server configuration that applies before request parsing. Do not rely on ini_set() or FPM .user.ini. This blocks the confirmed session paths but not other variants.fatal_error_backtraces=0 and restart every worker. This blocks the confirmed fatal backtrace path only.error_reporting, display_errors or @ does not help.The advisories linked above have the full technical details.
\n21 Oct 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.12. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP 8.5 users are strongly encouraged to update immediately.
\nThere are no complete mitigations, updating is the only safe choice. See the security advisory for details.
\nFor source downloads of PHP 8.5.12 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n21 Oct 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.27. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP 8.4 users are strongly encouraged to update immediately.
\nThere are no complete mitigations, updating is the only safe choice. See the security advisory for details.
\nFor source downloads of PHP 8.4.27 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n21 Oct 2026
\nThe PHP development team announces the immediate availability of PHP 8.3.36. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP 8.3 users are strongly encouraged to update immediately.
\nThere are no complete mitigations, updating is the only safe choice. See the security advisory for details.
\nFor source downloads of PHP 8.3.36 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n21 Oct 2026
\nThe PHP development team announces the immediate availability of PHP 8.2.35. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP 8.2 users are strongly encouraged to update immediately.
\nThere are no complete mitigations, updating is the only safe choice. See the security advisory for details.
\nPHP 8.2 reaches end of life on 31 December 2026 and will receive no further security fixes after that date. Please plan your upgrade to a supported version.
\nFor source downloads of PHP 8.2.35 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n20 Oct 2026
\nThe PHP security team would like to give advance notice of an upcoming security release.
\nIt is scheduled for Wednesday, 21 October 2026 at 14:00 UTC.
\nIt addresses two critical vulnerabilities, both rated CVSS v4.0 9.2.
\nAll PHP users are encouraged to prepare now so they can upgrade as soon as the release is available.
\nWe reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.
\nFull details, affected versions, and the fixed versions will be published with the release.
\nThank you for helping us keep PHP secure.
\n08 Oct 2026
\nThe PHP team is pleased to announce the first release candidate of PHP 8.6.0, RC3. This continues the PHP 8.6 release cycle, whose rough outline is specified in the PHP Wiki.
\nSource downloads of PHP 8.6.0 RC3 are available on the download page.
\nPlease carefully test this version and report any issues found in the GitHub Issues.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be RC4, planned for 22 October 2026.
\nThe signatures for the release can be found in the manifest or on the pre-release builds page.
\nThank you for helping us make PHP better.
\n24 Sep 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.26. This is a security release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.26 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n24 Sep 2026
\nThe PHP development team announces the immediate availability of PHP 8.2.34. This is a security release.
\nAll PHP 8.2 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.2.34 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n24 Sep 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.11. This is a security release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.11 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n24 Sep 2026
\nThe PHP development team announces the immediate availability of PHP 8.3.35. This is a security release.
\nAll PHP 8.3 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.3.35 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n24 Sep 2026
\nThe PHP team is pleased to announce the first release candidate of PHP 8.6.0, RC2. It is not a typo: a mistake was made while packaging RC1, so RC2 was released instead. For a full explanation, please see this blog post. This continues the PHP 8.6 release cycle, whose rough outline is specified in the PHP Wiki.
\nSource downloads of PHP 8.6.0 RC2 are available on the download page.
\nPlease carefully test this version and report any issues found in the GitHub Issues.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be RC3, planned for 8 October 2026.
\nThe signatures for the release can be found in the manifest or on the pre-release builds page.
\nThank you for helping us make PHP better.
\n10 Sep 2026
\nThe PHP team is pleased to announce the third beta release of PHP 8.6.0, Beta 3. This continues the PHP 8.6 release cycle, the rough outline of which is specified in the PHP Wiki.
\nFor source downloads of PHP 8.6.0 Beta 3 please visit the download page.
\nPlease carefully test this version and report any issues found on GitHub.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be RC 1, planned for 24 September 2026.
\nThe signatures for the release can be found in the manifest or on the Release Candidates page.
\nThank you for helping us make PHP better.
\n27 Aug 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.10. This is a bug fix release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.10 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n27 Aug 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.25. This is a bug fix release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.25 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n27 Aug 2026
\nThe PHP team is pleased to announce a new beta release of PHP 8.6.0, Beta 2. This continues the PHP 8.6 release cycle, the rough outline of which is specified in the PHP Wiki.
\nFor source downloads of PHP 8.6.0 Beta 2 please visit the download page.
\nPlease carefully test this version and report any issues found on GitHub.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be Beta 3, planned for 10 Sep 2026.
\nThe signatures for the release can be found in the manifest or on the Release Candidates page.
\nThank you for helping us make PHP better.
\n25 Aug 2026
\nThe State of PHP survey is still open, but not for much longer. It asks how PHP is working for you: what you build with, what is painful, and what you think PHP should focus on next. It takes around 15 minutes.
\nThe survey is run by The PHP Foundation in partnership with PhpStorm by JetBrains.
\nThe aggregated results will be published later this year as the State of PHP 2026 report. The anonymized raw dataset will be released along with it, so anyone in the community can check the numbers or run their own analysis.
\nMore responses mean a better picture of what matters to PHP users. If you have not filled it in yet, please do, and share it with your colleagues and user groups.
\n13 Aug 2026
\nThe PHP team is pleased to announce the first beta release of PHP 8.6.0, Beta 1. This continues the PHP 8.6 release cycle, the rough outline of which is specified in the PHP Wiki.
\nFor source downloads of PHP 8.6.0 Beta 1 please visit the download page.
\nPlease carefully test this version and report any issues found on GitHub.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be Beta 2, planned for 27 Aug 2026.
\nThe signatures for the release can be found in the manifest or on the Release Candidates page.
\nThank you for helping us make PHP better.
\n30 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.24. This is a security release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.24 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n30 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.3.33. This is a security release.
\nAll PHP 8.3 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.3.33 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n30 Jul 2026
\nThe PHP team is pleased to announce the second testing release of PHP 8.6.0, Alpha 3. This continues the PHP 8.6 release cycle, the rough outline of which is specified in the PHP Wiki.
\nFor source downloads of PHP 8.6.0 Alpha 3 please visit the download page.
\nPlease carefully test this version and report any issues found in the GitHub Issues.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be Beta 1, planned for 13 August 2026.
\nThe signatures for the release can be found in the manifest or on the pre-release builds page.
\nThank you for helping us make PHP better.
\n30 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.9. This is a security release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.9 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n30 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.2.33. This is a security release.
\nAll PHP 8.2 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.2.33 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n16 Jul 2026
\nThe PHP team is pleased to announce the second testing release of PHP 8.6.0, Alpha 2. This continues the PHP 8.6 release cycle, the rough outline of which is specified in the PHP Wiki.
\nFor source downloads of PHP 8.6.0 Alpha 2 please visit the download page.
\nPlease carefully test this version and report any issues found in the GitHub Issues.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be Alpha 3, planned for 30 July 2026.
\nThe signatures for the release can be found in the manifest or on the pre-release builds page.
\nThank you for helping us make PHP better.
\n02 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.8. This is a security release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.8 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n\n", "date_modified": "2026-10-21T13:50:05+00:00", "date_published": "2026-10-21T13:50:05+00:00", "external_url": "https://www.php.net/index.php", "id": "urn:aggr:item:714ed69185eed949a201e4c253f29df131d22cba", "image": "https://www.php.net/images/meta-image.png", "summary": "Security advisory: Critical remote code execution vulnerabilities, update now PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are stronglyβ¦", "tags": [ "news" ], "title": "PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out", "url": "https://aggr.aymericbeaumet.com/items/hnrss-org/2026-10-21-php-8-5-12-8-4-27-8-3-36-and-8-2-35-out/" }, { "authors": [ { "name": "php.net via pushcx" } ], "content_html": "Here are the most important news items we have published in 2026 on PHP.net.
\n20 Oct 2026
\nThe PHP security team would like to give advance notice of an upcoming security release.
\nIt is scheduled for Wednesday, 21 October 2026 at 14:00 UTC.
\nIt addresses two critical vulnerabilities, both rated CVSS v4.0 9.2.
\nAll PHP users are encouraged to prepare now so they can upgrade as soon as the release is available.
\nWe reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.
\nFull details, affected versions, and the fixed versions will be published with the release.
\nThank you for helping us keep PHP secure.
\n08 Oct 2026
\nThe PHP team is pleased to announce the first release candidate of PHP 8.6.0, RC3. This continues the PHP 8.6 release cycle, whose rough outline is specified in the PHP Wiki.
\nSource downloads of PHP 8.6.0 RC3 are available on the download page.
\nPlease carefully test this version and report any issues found in the GitHub Issues.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be RC4, planned for 22 October 2026.
\nThe signatures for the release can be found in the manifest or on the pre-release builds page.
\nThank you for helping us make PHP better.
\n24 Sep 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.26. This is a security release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.26 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n24 Sep 2026
\nThe PHP development team announces the immediate availability of PHP 8.2.34. This is a security release.
\nAll PHP 8.2 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.2.34 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n24 Sep 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.11. This is a security release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.11 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n24 Sep 2026
\nThe PHP development team announces the immediate availability of PHP 8.3.35. This is a security release.
\nAll PHP 8.3 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.3.35 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n24 Sep 2026
\nThe PHP team is pleased to announce the first release candidate of PHP 8.6.0, RC2. It is not a typo: a mistake was made while packaging RC1, so RC2 was released instead. For a full explanation, please see this blog post. This continues the PHP 8.6 release cycle, whose rough outline is specified in the PHP Wiki.
\nSource downloads of PHP 8.6.0 RC2 are available on the download page.
\nPlease carefully test this version and report any issues found in the GitHub Issues.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be RC3, planned for 8 October 2026.
\nThe signatures for the release can be found in the manifest or on the pre-release builds page.
\nThank you for helping us make PHP better.
\n11 Sep 2026
\n
π Dutch PHP Conference 2027 is coming! π
\nWeβre thrilled to announce that the 21st edition of the Dutch PHP Conference will take place from March 16 to March 19, 2027 in Amsterdam! ποΈ
\nπ€ Call for Papers is now OPEN! π€
\nGot insights, skills, or experience to share? Submit your talk ideas before the deadline on December 18th! Weβre looking for both technical and non-technical sessions that will inspire and engage our community.
\nποΈ Early Bird Tickets Available Now! ποΈ
\nThis year, we're excited to split our conference into an action-packed 2-day format! A standard DPC conference day ticket now also gives you full access to Webdevcon (your gateway to the latest in web technology ππ).
\nWant the ultimate experience? Our 4-day Early Bird tickets are available now! This all-access pass grants you entry to our intensive workshop days PLUS all co-located conferences, including Appdevcon (where app development meets creativity π±β¨) and the Dutch AI Conference. Secure your spot for a fantastic lineup of workshops, sessions, and social activities.
\nGet ready for an incredible edition of #DPC27! π
\nSee you there! ππ
\n10 Sep 2026
\nThe PHP team is pleased to announce the third beta release of PHP 8.6.0, Beta 3. This continues the PHP 8.6 release cycle, the rough outline of which is specified in the PHP Wiki.
\nFor source downloads of PHP 8.6.0 Beta 3 please visit the download page.
\nPlease carefully test this version and report any issues found on GitHub.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be RC 1, planned for 24 September 2026.
\nThe signatures for the release can be found in the manifest or on the Release Candidates page.
\nThank you for helping us make PHP better.
\n![\"PHPBenelux](\"https://www.php.net//images/news/phpbenelux_conference_logo_2027.png\"){kind=logo}
PHPBenelux is back! After 11 successful editions, the leading PHP conference in Belgium, the Netherlands and Luxembourg is back for a one-day event on Saturday January 23 2027. Join us in Antwerp for a new chapter of technical excellence, community, and connection. Buy your tickets here, and visit https://conference.phpbenelux.eu for more information about the conference.
\n
The PHPBenelux Conference is back and now it's your turn to take the stage! Whether you're a developer, architect, engineering lead, DevOps engineer, or open-source contributor, we'd love to hear your story. Join a long tradition of knowledge sharing, inspire fellow developers, and help shape the next chapter of the PHP ecosystem. Share your unique perspective, submit your proposal today!
\n02 Sep 2026
\n![\"PHP](\"https://www.php.net//images/news/phpcon_ehime2026.png\")
PHP Conference Ehime will be held for the first time on October 3, 2026 (JST), at Ehime University Johoku Campus in Matsuyama City, Ehime Prefecture, Japan.π
\nThe theme of the conference is "ζθ‘ζγ¨γ³γγ₯γγγ£ζγ¨ζεͺζγ¨": love for technology, love for the community, and love for Ehime.
\nJoin us in this castle and hot-spring town of Shikoku, and connect with PHP developers from all over Japan.
\nTickets are on sale now, and further information is available on the event page and on X(Twitter).
\n02 Sep 2026
\n![\"API](\"https://www.php.net//images/news/api-platform-con-2026.png\")
API Platform Conference will return on September 17th and 18th, 2026, both in Lille (France) and online.
\nThe API Platform Conference is a two-day event that highlights the latest trends, best practices, and case studies related to API Platform and its ecosystem, including PHP, Symfony, JavaScript, AI, FrankenPHP, performance, and tools.
\nWith nearly 30 talks delivered in both English and French, the conference is a must-attend for innovative companies, project leaders, and skilled developers. If you're a developer, CTO, or decision-maker specializing in these technologies, this event is tailored for you!
\nMore info at api-platform.com/con/2026
\n![\"Forum](\"https://www.php.net//images/news/forumphp-2026.png\")
Join the biggest PHP event organized by the French PHP user group, organized for the third time in Disneyland Paris, at the Hotel New York - The Art of Marvel! During two days, on October 8th and 9th, enjoy the company of our friendly audience, share your knowledge with +700 attendees, meet the companies who use PHP every day, in a environment that will bring even more magic to the language.
\nDate: October 8 & 9
\nCheck out more details at Afup.org
\n27 Aug 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.10. This is a bug fix release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.10 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n27 Aug 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.25. This is a bug fix release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.25 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n27 Aug 2026
\nThe PHP team is pleased to announce a new beta release of PHP 8.6.0, Beta 2. This continues the PHP 8.6 release cycle, the rough outline of which is specified in the PHP Wiki.
\nFor source downloads of PHP 8.6.0 Beta 2 please visit the download page.
\nPlease carefully test this version and report any issues found on GitHub.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be Beta 3, planned for 10 Sep 2026.
\nThe signatures for the release can be found in the manifest or on the Release Candidates page.
\nThank you for helping us make PHP better.
\n25 Aug 2026
\nThe State of PHP survey is still open, but not for much longer. It asks how PHP is working for you: what you build with, what is painful, and what you think PHP should focus on next. It takes around 15 minutes.
\nThe survey is run by The PHP Foundation in partnership with PhpStorm by JetBrains.
\nThe aggregated results will be published later this year as the State of PHP 2026 report. The anonymized raw dataset will be released along with it, so anyone in the community can check the numbers or run their own analysis.
\nMore responses mean a better picture of what matters to PHP users. If you have not filled it in yet, please do, and share it with your colleagues and user groups.
\n18 Aug 2026
\n![\"LonghornPHP\"](\"https://www.php.net//images/news/longhornphp.png\")
Longhorn PHP is back for 2026! The schedule is now live, and tickets are on sale! The conference will be held in Austin, Texas, and will start with an optional tutorial day on Thursday, October 15, followed by a full day of talks, keynotes, open spaces and more, on Friday, October 16. Our full schedule is available now, with Early Bird pricing available through end of day September 16th.
\n13 Aug 2026
\nThe PHP team is pleased to announce the first beta release of PHP 8.6.0, Beta 1. This continues the PHP 8.6 release cycle, the rough outline of which is specified in the PHP Wiki.
\nFor source downloads of PHP 8.6.0 Beta 1 please visit the download page.
\nPlease carefully test this version and report any issues found on GitHub.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be Beta 2, planned for 27 Aug 2026.
\nThe signatures for the release can be found in the manifest or on the Release Candidates page.
\nThank you for helping us make PHP better.
\n30 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.24. This is a security release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.24 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n30 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.3.33. This is a security release.
\nAll PHP 8.3 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.3.33 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n30 Jul 2026
\nThe PHP team is pleased to announce the second testing release of PHP 8.6.0, Alpha 3. This continues the PHP 8.6 release cycle, the rough outline of which is specified in the PHP Wiki.
\nFor source downloads of PHP 8.6.0 Alpha 3 please visit the download page.
\nPlease carefully test this version and report any issues found in the GitHub Issues.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be Beta 1, planned for 13 August 2026.
\nThe signatures for the release can be found in the manifest or on the pre-release builds page.
\nThank you for helping us make PHP better.
\n30 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.9. This is a security release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.9 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n30 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.2.33. This is a security release.
\nAll PHP 8.2 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.2.33 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n16 Jul 2026
\nThe PHP team is pleased to announce the second testing release of PHP 8.6.0, Alpha 2. This continues the PHP 8.6 release cycle, the rough outline of which is specified in the PHP Wiki.
\nFor source downloads of PHP 8.6.0 Alpha 2 please visit the download page.
\nPlease carefully test this version and report any issues found in the GitHub Issues.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be Alpha 3, planned for 30 July 2026.
\nThe signatures for the release can be found in the manifest or on the pre-release builds page.
\nThank you for helping us make PHP better.
\n13 Jul 2026
\n![\"International](\"https://www.php.net//images/news/IPC.png\")
The International PHP Conference is the world's first PHP conference and has stood for more than two decades for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born β the IPC signifies knowledge transfer at the highest level.
\nBasic facts:
\nDate: October 26 β 30, 2026
\nLocation: Holiday Inn Munich City Centre, Munich or Online
\nHighlights:
\nFor further information on the International PHP Conference Munich visit: https://phpconference.com/munich/
\n![\"PHP](\"https://www.php.net//images/news/php-tek-2027.png\")
Join us for the 19th Annual Web Developer Conference, PHP Tek 2027, April 27-29 2026.
\nPHP Tek combines leadership, expertise, and networking in one event. A relaxing atmosphere for tech leaders and developers to share, learn and grow professionally while also providing you with the knowledge to solve your everyday problems.
\nWe are the longest-running web developer conference in the United States, focusing on the PHP programming language. The event is broken up into multiple days. The main conference happens over the course of 3 days (April 27-29) and includes keynotes, talks, and networking options. It will be broken into three tracks and will cover a range of topics. There will be two dedicated PHP Tracks, and then each day will have a different 3rd track (JS/Laravel/DevOps)
\nHead over to https://phptek.io and get yours today!
\n02 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.8. This is a security release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.8 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n02 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.23. This is a security release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.23 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n02 Jul 2026
\nThe PHP team is pleased to announce the first testing release of PHP 8.6.0, Alpha 1. This starts the PHP 8.6 release cycle, the rough outline of which is specified in the PHP Wiki.
\nFor source downloads of PHP 8.6.0 Alpha 1 please visit the download page.
\nPlease carefully test this version and report any issues found in the GitHub Issues.
\nPlease DO NOT use this version in production, it is an early test version.
\nFor more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive.
\nThe next release will be Alpha 2, planned for 16 July 2026.
\nThe signatures for the release can be found in the manifest or on the pre-release builds page.
\nThank you for helping us make PHP better.
\n02 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.3.32. This is a security release.
\nAll PHP 8.3 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.3.32 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n02 Jul 2026
\nThe PHP development team announces the immediate availability of PHP 8.2.32. This is a security release.
\nAll PHP 8.2 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.2.32 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n04 Jun 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.22. This is a bug fix release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.22 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n04 Jun 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.7. This is a bug fix release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.7 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n![\"Laracon](\"https://www.php.net//images/news/laraconus2026.jpg\")
Laracon US 2026 is the flagship Laravel conference, returning to the East Coast on July 28-29, 2026 at the SoWa Power Station in Boston, Massachusetts.
\nJoin Laravel and PHP developers from around the world for two days of world-class talks, hands-on learning, and community connection. Come ready to level up, leave ready to ship.
\nInformation:
\nAdditional events like:
\nPlus an after party, VIP dinner, and The Vibes with NativePHP are happening throughout the week.
\nFor full information and schedule, visit Laracon US 2026.
\nYou can also find us on X / Twitter.
\n
Longhorn PHP is back, with a slightly updated format - this year our conference in Austin, TX, will feature a tutorial day (Thursday, October 15), followed by a main conference day (Friday, October 16). We are currently accepting talk and tutorial submissions. While the CFP is open, we also have our Blind Bird tickets available for sale.
\n\nFollow us on Mastodon signup for emails at longhornphp.com to get notified with important conference updates.
\n07 May 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.6. This is a security release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.6 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n07 May 2026
\nThe PHP development team announces the immediate availability of PHP 8.2.31. This is a security release.
\nAll PHP 8.2 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.2.31 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n07 May 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.21. This is a security release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.21 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n07 May 2026
\nThe PHP development team announces the immediate availability of PHP 8.3.31. This is a security release.
\nAll PHP 8.3 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.3.31 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n04 May 2026
\n![\"JetBrains](\"https://www.php.net//images/news/phpverse_2026.png\")
Join us for JetBrains PHPverse 2026 on June 9 β a global live streaming event dedicated to modern PHP practices and the future of the language.
\nThis year's lineup features talks by renowned voices in the PHP community, including Larry Garfield, Fabien Potencier, Nils Adermann, Elizabeth Barron, and more. You can tune in for the whole day or drop in for the talks that interest you most. See the full program here.
\nπ
June 9, 2026
\nπ Online β free and open to everyone
In 2025, PHPverse reached over 55,000 developers worldwide β be part of it this year! Register now.
\n09 Apr 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.20. This is a bug fix release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.20 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n09 Apr 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.5. This is a bug fix release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.5 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n12 Mar 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.4. This is a bug fix release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.4 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n12 Mar 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.19. This is a bug fix release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.19 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n12 Feb 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.3. This is a bug fix release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.3 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n12 Feb 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.18. This is a bug fix release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.18 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n![\"Laravel](\"https://www.php.net//images/news/laravellivedk2026.png\")
Laravel Live Denmark is back! The conference is a two-day Laravel conference held in Copenhagen, Denmark on the 20 - 21. August 2026.
\nJoin us and 300 other Laravel and PHP enthusiasts from around the world got for two days of learning, 16 speakers and more within the Laravel community.
\nInformation:
\nFor more information, see Laravel Live Denmark 2026.
\nYou can also find us at Twitter.
\n15 Jan 2026
\nThe PHP development team announces the immediate availability of PHP 8.5.2. This is a bug fix release.
\nAll PHP 8.5 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.5.2 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n15 Jan 2026
\nThe PHP development team announces the immediate availability of PHP 8.3.30. This is a bug fix release.
\nAll PHP 8.3 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.3.30 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n15 Jan 2026
\nThe PHP development team announces the immediate availability of PHP 8.4.17. This is a bug fix release.
\nAll PHP 8.4 users are encouraged to upgrade to this version.
\nFor source downloads of PHP 8.4.17 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.
\n![\"PHP](\"https://www.php.net//images/news/php_velho_oeste_350x300px.png\")
The PHP Velho Oeste is a national-level conference that takes place annually in the West of Santa Catarina, Brazil, known as Velho Oeste(Old West).
\nKnowledge + Networking
\nIn this event, several relevant topics will be covered, from the latest language updates to best development practices. You will have the opportunity to expand your PHP knowledge and stay up to date with the latest market trends.
\nDate: May 29-30, 2025
\nLocation: UnochapecΓ³ Noble Hall in ChapecΓ³, Santa Catarina, Brazil.
\nSee how it was last year: PHP Velho Oeste 2025.
\nFollow us on social media: LinkedIn / Instagram / YouTube / X.
\n", "date_modified": "2026-10-20T22:23:54+00:00", "date_published": "2026-10-20T22:23:54+00:00", "external_url": "https://www.php.net/archive/2026.php#2026-10-20-1", "id": "urn:aggr:item:cdc886b03aab6ee87eca37522bdedbe70319b7fa", "image": "https://www.php.net/images/meta-image.png", "summary": "Comments", "tags": [ "news", "php", "security" ], "title": "Upcoming Critical PHP Security Release", "url": "https://aggr.aymericbeaumet.com/items/lobste-rs/2026-10-20-upcoming-critical-php-security-release/" } ], "language": "en", "title": "php.net", "version": "https://jsonfeed.org/version/1.1" }