# Release: Elastic Beanstalk Amazon Linux 2023 PHP platform updates on October 21, 2026
<a name="release-2026-10-21-al2023-php"></a>

This release provides new versions for AWS Elastic Beanstalk PHP platforms based on Amazon Linux 2023. It turns off two PHP configuration settings by default.

**Release date:** October 21, 2026

To update your environments to the new platform versions, see [Updating your Elastic Beanstalk environment's platform version](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.platform.upgrade.html) in the *AWS Elastic Beanstalk Developer Guide*. If you've turned on [managed platform updates](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/environment-platform-update-managed.html), Elastic Beanstalk applies the new platform versions to your environments during their weekly maintenance window.

## Changes
<a name="release-2026-10-21-al2023-php.changes"></a>

The following table lists the changes included in this release.

**Note**  
Be aware that at the time these release notes are published, the new platform versions might not yet be available in all the AWS Regions that Elastic Beanstalk supports. It might take a few hours for the release to complete.


<table>
<thead>
  <tr><th><b>Category</b></th><th><b>Description</b></th></tr>
</thead>
<tbody>
  <tr><td><b>Platform-specific updates</b></td><td>Made these platform-specific updates:
<table>
<thead>
  <tr><th><b>Platform</b></th><th><b>Update</b></th></tr>
</thead>
<tbody>
  <tr><td><b>PHP</b></td><td>Turned off the <code>session.upload_progress.enabled</code> setting by default on all PHP platform branches, and <code>fatal_error_backtraces</code> on PHP 8.5. If your application requires either setting, you can turn it back on by adding a <code>.ini</code> file whose name sorts after <code>aws.ini</code> (for example, <code>zz-custom.ini</code>). For details, see <a href="https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/create_deploy_PHP.container.html#php-configuration-phpini">Extending php.ini</a>.<br />Turning off these settings partially mitigates CVE-2026-109618 and CVE-2026-109619. For details, see the <a href="https://www.php.net/archive/2026.php#2026-10-21-5">PHP security announcement</a>. The <a href="release-2026-10-21-al2023-php84-php85.md">PHP 8.5 and PHP 8.4 platform update</a> and the <a href="release-2026-10-22-al2023-php82-php83.md">PHP 8.3 and PHP 8.2 platform update</a> include the PHP versions that address these issues.</td></tr>
</tbody>
</table>
</td></tr>
</tbody>
</table>


## New platform versions
<a name="release-2026-10-21-al2023-php.platforms"></a>

**Topics**
+ [PHP](#release-2026-10-21-al2023-php.platforms.PHP)

### PHP
<a name="release-2026-10-21-al2023-php.platforms.PHP"></a>



|  Platform Version and *Solution Stack Name*   |  AMI  |  Language  |  Package Manager  |  Proxy Server  | 
| --- | --- | --- | --- | --- | 
|  ** PHP 8.5 AL2023 version 4.13.12** <br /> * 64bit Amazon Linux 2023 v4.13.12 running PHP 8.5 *  | 2023.12.20261016 | PHP 8.5.11 | Composer 2.10.3, PIE 1.5.2 | nginx 1.30.5 (default), Apache 2.4.69 | 
|  ** PHP 8.4 AL2023 version 4.13.12** <br /> * 64bit Amazon Linux 2023 v4.13.12 running PHP 8.4 *  | 2023.12.20261016 | PHP 8.4.26 | Composer 2.10.3, PIE 1.5.2 | nginx 1.30.5 (default), Apache 2.4.69 | 
|  ** PHP 8.3 AL2023 version 4.13.12** <br /> * 64bit Amazon Linux 2023 v4.13.12 running PHP 8.3 *  | 2023.12.20261016 | PHP 8.3.35 | Composer 2.10.3, PIE 1.5.2 | nginx 1.30.5 (default), Apache 2.4.69 | 
|  ** PHP 8.2 AL2023 version 4.13.12** <br /> * 64bit Amazon Linux 2023 v4.13.12 running PHP 8.2 *  | 2023.12.20261016 | PHP 8.2.34 | Composer 2.10.3, PIE 1.5.2 | nginx 1.30.5 (default), Apache 2.4.69 |