PHP 8.4.23

The PHP development team announces the immediate availability of PHP 8.4.23. This is a security release.

All PHP 8.4 users are encouraged to upgrade to this version as soon as possible.

Security Fixes

PHP 8.4.23 addresses several security vulnerabilities. The full list of changes is recorded in the official ChangeLog.

Important Notes

• Severity: This is classified as a security release — all production systems should upgrade promptly
• Backward compatibility: No breaking changes; this is a drop-in replacement for PHP 8.4.x
• Previous update: PHP 8.4.22 was released on June 4, 2026 as a bug fix release

Upgrade Instructions

Source downloads of PHP 8.4.23 are available on the official downloads page. Windows source and binaries can also be found there.

For users on Linux, packages should be available through your distribution's package manager or the official ondrej/php PPA within 24–48 hours. macOS users can upgrade via Homebrew with brew upgrade php once the formula is updated.

What Comes Next

PHP 8.5.8 was also released on July 3, 2026 as a security release for the 8.5 branch. Users running PHP 8.5 should upgrade to 8.5.8 simultaneously. PHP 8.3.32 and 8.2.32 were also released on the same date as security updates for their respective branches, continuing the project's commitment to keeping all supported branches secure.