Upcoming Critical PHP Security Release

本文为原文前 6,000 字符的节选翻译，完整内容请查看原文。

The PHP security team would like to give advance notice of an upcoming security release. It is scheduled for Wednesday, 21 October 2026 at 14:00 UTC. It addresses two critical vulnerabilities, both rated CVSS v4.0 9.2. All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available. We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild. Full details, affected versions, and the fixed versions will be published with the release. Thank you for helping us keep PHP secure.

PHP 安全团队谨此提前通知即将发布的安全性更新。该版本定于 2026 年 10 月 21 日星期三 14:00 UTC 发布。此次更新旨在解决两个关键漏洞，两者的 CVSS v4.0 评分均为 9.2。我们鼓励所有 PHP 用户立即做好准备，以便在发布后尽快升级。如果任何漏洞的详细信息被公开，或者出现实际利用的证据，我们保留提前发布的权利。完整的详细信息、受影响版本及修复版本将在发布时公布。感谢您帮助我们维护 PHP 的安全。

The PHP team is pleased to announce the first release candidate of PHP 8.6.0, RC3. This continues the PHP 8.6 release cycle, whose rough outline is specified in the PHP Wiki. Source downloads of PHP 8.6.0 RC3 are available on the download page. Please carefully test this version and report any issues found in the GitHub Issues. Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive. The next release will be RC4, planned for 22 October 2026. The signatures for the release can be found in the manifest or on the pre-release builds page. Thank you for helping us make PHP better.

PHP 团队很高兴宣布 PHP 8.6.0 的首个候选版本 RC3。这延续了 PHP 8.6 的发布周期，其大致轮廓已在 PHP Wiki 中说明。PHP 8.6.0 RC3 的源代码下载可在下载页面获取。请仔细测试此版本，并在 GitHub Issues 中报告发现的任何问题。请勿在生产环境中使用此版本，它属于早期测试版本。有关新功能和其他更改的更多信息，您可以阅读 NEWS 文件，或查看 UPGRADING 文件以获取完整的升级说明列表。这些文件也可在发布存档中找到。下一个版本将是 RC4，计划于 2026 年 10 月 22 日发布。该版本的签名可在清单或预发布构建页面上找到。感谢您帮助我们让 PHP 变得更好。

The PHP development team announces the immediate availability of PHP 8.4.26. This is a security release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.26 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.

PHP 开发团队宣布立即发布 PHP 8.4.26。这是一个安全性更新版本。鼓励所有 PHP 8.4 用户升级到此版本。如需下载 PHP 8.4.26 的源代码，请访问我们的下载页面，Windows 源代码和二进制文件也可在那里找到。更改列表记录在 ChangeLog 中。

The PHP development team announces the immediate availability of PHP 8.2.34. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.34 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.

PHP 开发团队宣布立即发布 PHP 8.2.34。这是一个安全性更新版本。鼓励所有 PHP 8.2 用户升级到此版本。如需下载 PHP 8.2.34 的源代码，请访问我们的下载页面，Windows 源代码和二进制文件也可在那里找到。更改列表记录在 ChangeLog 中。

The PHP development team announces the immediate availability of PHP 8.5.11. This is a security release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.11 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.

PHP 开发团队宣布立即发布 PHP 8.5.11。这是一个安全性更新版本。鼓励所有 PHP 8.5 用户升级到此版本。如需下载 PHP 8.5.11 的源代码，请访问我们的下载页面，Windows 源代码和二进制文件也可在那里找到。更改列表记录在 ChangeLog 中。

The PHP development team announces the immediate availability of PHP 8.3.35. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.35 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.

PHP 开发团队宣布立即发布 PHP 8.3.35。这是一个安全性更新版本。鼓励所有 PHP 8.3 用户升级到此版本。如需下载 PHP 8.3.35 的源代码，请访问我们的下载页面，Windows 源代码和二进制文件也可在那里找到。更改列表记录在 ChangeLog 中。

The PHP team is pleased to announce the first release candidate of PHP 8.6.0, RC2. It is not a typo: a mistake was made while packaging RC1, so RC2 was released instead. For a full explanation, please see this blog post. This continues the PHP 8.6 release cycle, whose rough outline is specified in the PHP Wiki. Source downloads of PHP 8.6.0 RC2 are available on the download page. Please carefully test this version and report any issues found in the GitHub Issues. Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive. The next release will be RC3, planned for 8 October 2026. The signatures for the release can be found in the manifest or on the pre-release builds page. Thank you for helping us make PHP better.

PHP 团队很高兴宣布 PHP 8.6.0 的首个候选版本 RC2。这不是笔误：在打包 RC1 时出现了一个错误，因此改为了发布 RC2。有关完整解释，请参阅此博客文章。这延续了 PHP 8.6 的发布周期，其大致轮廓已在 PHP Wiki 中说明。PHP 8.6.0 RC2 的源代码下载可在下载页面获取。请仔细测试此版本，并在 GitHub Issues 中报告发现的任何问题。请勿在生产环境中使用此版本，它属于早期测试版本。有关新功能和其他更改的更多信息，您可以阅读 NEWS 文件，或查看 UPGRADING 文件以获取完整的升级说明列表。这些文件也可在发布存档中找到。下一个版本将是 RC3，计划于 2026 年 10 月 8 日发布。该版本的签名可在清单或预发布构建页面上找到。感谢您帮助我们让 PHP 变得更好。

🚀 Dutch PHP Conference 2027 is coming! 🚀 We’re thrilled to announce that the 21st edition of the Dutch PHP Conference will take place from March 16 to March 19, 2027 in Amsterdam! 🗓️ 🎤 Call for Papers is now OPEN! 🎤 Got insights, skills, or experience to share? Submit your talk ideas before the deadline on December 18th! We’re looking for both technical and non-technical sessions that will inspire and engage our community. 🎟️ Early Bird Tickets Available Now! 🎟️ This year, we’re excited to split our conference into an action-packed 2-day format! A standard DPC conference day ticket now also gives you full access to Webdevcon (your gateway to the latest in web technology 🌐🚀). Want the ultimate experience? Our 4-day Early Bird tickets are available now! This all-access pass grants you entry to our intensive workshop days PLUS all co-located conferences, including Appdevcon (where app development meets creativity 📱✨) and the Dutch AI Conference. Secure your spot for a fantastic lineup of workshops, sessions, and social activities. Get ready for an incredible edition of #DPC27! 🌟 👉 Submit your CFP => https://phpconference.nl/speakers/cfp/ 👉 Grab your early bird tickets => https://dawntechnology.paydro.com/dawnconferences-2027 See you there! 🚀🎉

🚀 2027 年荷兰 PHP 大会即将到来！🚀 我们非常激动地宣布，第 21 届荷兰 PHP 大会将于 2027 年 3 月 16 日至 3 月 19 日在阿姆斯特丹举行！🗓️ 🎤 论文征集现已开放！🎤 有见解、技能或经验想要分享吗？请在 12 月 18 日截止日期前提交您的演讲构思！我们正在寻找能够激励和吸引我们社区的技术和非技术类议题。🎟️ 早鸟票现已发售！🎟️ 今年，我们很高兴将会议拆分为为期 2 天的紧凑形式！标准的 DPC 会议单日票现在还可以让您完全访问 Webdevcon（您通往最新 Web 技术的门户 🌐🚀）。想要极致体验吗？我们的 4 天早鸟票现已发售！这张全通票让您可以参加我们的强化研讨会日，外加所有同期举行的会议，包括 Appdevcon（应用程序开发与创意碰撞的地方 📱✨）和荷兰 AI 大会。锁定您的席位，参与精彩的研讨会、会议和社交活动。准备好迎接令人难以置信的 #DPC27 吧！🌟 👉 提交您的 CFP => https://phpconference.nl/speakers/cfp/ 👉 抢购您的早鸟票 => https://dawntechnology.paydro.com/dawnconferences-2027 到时见！🚀🎉

The PHP team is pleased to announce the third beta release of PHP 8.6.0, Beta 3. This continues the PHP 8.6 release cycle, the rough outline of which is specified in the PHP Wiki. For source downloads of PHP 8.6.0 Beta 3 please visit the download page. Please carefully test this version and report any issues found on GitHub. Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the NEWS file, or the UPGRADING file for a complete list of upgrading notes. These files can also be found in the release archive. The next release will be RC 1, planned for 24 September 2026. The signatures for the release can be found in the manifest or on the Release Candidates page. Thank you for helping us make PHP better.

PHP 团队很高兴宣布 PHP 8.6.0 的第三个测试版 Beta 3。这延续了 PHP 8.6 的发布周期，其大致轮廓已在 PHP Wiki 中说明。如需下载 PHP 8.6.0 Beta 3 的源代码，请访问下载页面。请仔细测试此版本，并在 GitHub 上报告发现的任何问题。请勿在生产环境中使用此版本，它属于早期测试版本。有关新功能和其他更改的更多信息，您可以阅读 NEWS 文件，或查看 UPGRADING 文件以获取完整的升级说明列表。这些文件也可在发布存档中找到。下一个版本将是 RC 1，计划于 2026 年 9 月 24 日发布。该版本的签名可在清单或候选版本页面上找到。感谢您帮助我们让 PHP 变得更好。

PHPBenelux is back! After 11 successful editions, the leading PHP conference in Belgium, the Netherlands and Luxembourg is back for a one-day event on Saturday January 23 2027. Join us in Antwerp for a new chapter o

PHPBenelux 回归了！在成功举办 11 届之后，这场比利时、荷兰和卢森堡领先的 PHP 会议将于 2027 年 1 月 23 日星期六回归，举办为期一天的活动。加入我们在安特卫普开启新篇章。