PHP 8.3.35 released with security fixes
The PHP project has released PHP 8.3.35: 12 fixes across 8 components of the 8.3 branch.
The PHP project has released PHP 8.3.35, a maintenance update for the 8.3 branch. The release delivers 12 bug fixes across 8 components — among them Filter, FPM, MySQLnd, OpenSSL, Phar, SOAP … — and keeps the branch current for production use.
This is a security release: it addresses CVE-2026-91768, CVE-2025-1218, CVE-2026-91769, CVE-2026-91767, CVE-2026-6103, CVE-2026-91765, CVE-2025-14181, CVE-2026-92842, CVE-2026-91766, CVE-2026-93682, CVE-2026-17545. Affected setups should upgrade promptly.
The complete official changelog follows below; every entry links to the corresponding upstream issue. Users on the 8.3 branch are advised to update at their convenience — builds, source archives and checksums are available on php.net.
Readers’ Forum
No contributions yet — open the debate.
Open the discussion
No account or password needed — just enter your e-mail and we’ll send you a one-time sign-in link. First time here? You’re set up automatically.
Your rating will be applied automatically after you sign in.
Check your inbox
We’ve sent a sign-in link to …. Open it on this device — this tab will sign you in automatically.
Nothing arrived? Check your spam folder — and mark the mail as "Not spam" so it lands in your inbox next time.