[MANUAL CHERRYPICK] Upgrade PHP to 8.3.33 for CVEs (#18273) - branch 3.0-dev

SPECS/php/php.signatures.json

@@ -14,6 +14,6 @@
     "php.conf": "e2388be032eccf7c0197d597ba72259a095bf8434438a184e6a640edb4b59de2",
     "php.ini": "8fd5a4d891c19320c07010fbbbac982c886b422bc8d062acaeae49d70c136fc8",
     "php.modconf": "dc7303ea584452d2f742d002a648abe74905025aabf240259c7e8bd01746d278",
-    "php-8.3.32.tar.xz": "8698ec1f9402fa5e5e872ae3d0916b62f5f27503c1fbfc9cc3521e113355ea92"
+    "php-8.3.33.tar.xz": "e293ed620cec74651bb4a071317892a478aa6840fab22db45c72d77cd42f9676"
   }
 }

SPECS/php/php.spec

@@ -32,7 +32,7 @@
 %global with_qdbm     0
 Summary:        PHP scripting language for creating dynamic web sites
 Name:           php
-Version:        8.3.32
+Version:        8.3.33
 Release:        1%{?dist}
 # All files licensed under PHP version 3.01, except
 # Zend is licensed under Zend
@@ -1514,6 +1514,9 @@ systemctl try-restart php-fpm.service >/dev/null 2>&1 || :
 %dir %{_datadir}/php/preload
 
 %changelog
+* Fri Jul 31 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 8.3.33-1
+- Auto-upgrade to 8.3.33 - for CVE-2026-9672, CVE-2026-17543, CVE-2026-7260
+
 * Fri Jul 03 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 8.3.32-1
 - Auto-upgrade to 8.3.32 - for CVE-2026-12184, CVE-2026-14355
 

cgmanifest.json

@@ -21353,8 +21353,8 @@
         "type": "other",
         "other": {
           "name": "php",
-          "version": "8.3.32",
-          "downloadUrl": "https://www.php.net/distributions/php-8.3.32.tar.xz"
+          "version": "8.3.33",
+          "downloadUrl": "https://www.php.net/distributions/php-8.3.33.tar.xz"
         }
       }
     },