Which PHP Versions Get Critical Security Updates?

Although there are many reasons—including performance—to update to newer PHP releases, the number one reason is to avoid losing security updates.

Each version of PHP (7.4, 8.0, 8.1, 8.2, 8.3, etc.) has three years of support before it is considered end of life. For two years, it gets bug fixes and all security fixes. In the third year, it gets only critical security fixes. After that, nothing!

To find out which versions are still being supported, refer to php.net’s PHP Supported Versions. A screen shot is reproduced below. As of March 14, 2024, only versions from PHP 8.1–8.3 receive critical security fixes. On December 8, 2024, PHP 8.1 will age out, limiting the secure versions to 8.2–8.4, and so on.

We are recommending PHP 8.3 today, when possible, for the maximum length of support. Next year it will be PHP 8.4, then whatever comes next.

If you run PHP on IBM i, Seiden PHP+ keeps pace with the wider PHP community. For our specific releases, see our Seiden PHP Changelog.

Supported PHP versions as of March 14, 2024 (source: php.net)

Free PHP Upgrade Assessment

To help companies keep up with PHP releases and maintain a secure environment, Seiden Group offers a free PHP upgrade assessment. We will review your applications with you and plan the most effective upgrade path.