The PHP development team announces the immediate availability of PHP 8.3.23.
This is a security release that addresses CVE-2025-1735, CVE-2025-6491, and CVE-2025-1220.
All PHP 8.3 users are encouraged to upgrade to this version.
For source downloads of PHP 8.3.23 please visit our downloads page: PHP: Downloads
Windows binaries can be found on the PHP for Windows site.
The list of changes is recorded in the ChangeLog.
Release Announcement: <PHP: Manual Quick Reference;
Downloads: <PHP: Manual Quick Reference;
Windows downloads: <PHP For Windows: Binaries and sources Releases;
Changelog: <PHP: PHP 8 ChangeLog;
Release Manifest: <https://gist.github.com/ericmann/2334a09718e5c031172d394ae38d20af>
Many thanks to all the contributors and supporters!
Eric Mann, Jakub Zelenka, and Pierrick Charron
php-8.3.23.tar.bz2
SHA256 hash: 05488f7b967d90a50932f0674dc356e1b795f522f0298b5ce24b680de233c2d4
PGP signature:
-----BEGIN PGP SIGNATURE-----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=TftM
-----END PGP SIGNATURE-----
php-8.3.23.tar.gz
SHA256 hash: ac9f3d6e9bcf1d5c4d66d2d954f89852c17fd4c5eba5811a3a8db08f38c908c7
PGP signature:
-----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEESx/A2d+SMhztn2FdvsVV4ioUNVMFAmhkEw8ACgkQvsVV4ioU
NVNs6Q/8CfhjP/8Z3sis9lxpt0iV52NTD2gQBw4Bp4TGAMIs1qnsz9NRoaa+qjgs
/dq9PUWNTqk9vVNH8xAgV9tkFv7xvze8o94AKaFYGar2I/ImlHoLDzS5V2hmBHN4
qebJDogoZs8LA7nF6s1yfIqq+kEoAVMKruIp8Jy3xPHbs4Auueu3o8UIuJiI9MGr
lX2z89yMkBF7A3LQ+T3wiffn5cM71GpdGJ5dK03M0+NIGHPQauwrqtmVDtzGQxXt
yQjaX/l8tcD8R8qFSPKsHXV2nFdL9nu4MWwBEMg3Bm6Y8opxRZxejmbTqT+X3SqG
KYtqJIwYQXwV83Ut6Z/ubt9C9Rw7Wxtd1N64bQXWlSdwNUh51xkVXfdPtxmVSZ7O
8Oh3RYQMzxB3XVcq076+ss32uhWOPyIe/cnMyzf3esgpnEJDMtccLWUSE4339rS6
gUwjEeHZpbaA8FovgsjSnoAhjcDuD5djGDPen7hjL/c8I+j74J/PqgiA+O46Urf7
G2lLxd8/GlnWXWiVaqfd205Qhf20JJ4B/ddwddwZpEqVY2RYE+OWjNyQJBv6rAZE
uHw3ziBDiaauHX360cRRXAHT2giqC3ZS1uOujtA1EsEOhMFuOv/lN85qFpFyNixy
dvtD1aV8EXsAhTmsQbbFigsWuvIkbIdZeV939Pw59GLmjNQnFug=
=IhCA
-----END PGP SIGNATURE-----
php-8.3.23.tar.xz
SHA256 hash: 08be64700f703bca6ff1284bf1fdaffa37ae1b9734b6559f8350248e8960a6db
PGP signature:
-----BEGIN PGP SIGNATURE-----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=f0UW
-----END PGP SIGNATURE-----