diff --git a/php-8.3.15.tar.xz b/php-8.3.19.tar.xz
similarity index 60%
rename from php-8.3.15.tar.xz
rename to php-8.3.19.tar.xz
index bd47ff506be7ba0aa56a7d4b2812736907738088..e4abc61dde239ca0b04d229890595764bb6fa795 100644
Binary files a/php-8.3.15.tar.xz and b/php-8.3.19.tar.xz differ
diff --git a/php.spec b/php.spec
index 2e9a1a985eae16022cc9f362ebf863a476fb37a9..342da89f7092fd9ae2daf3b76e9ed9bd704c89df 100644
--- a/php.spec
+++ b/php.spec
@@ -41,7 +41,7 @@
 
 Summary: PHP scripting language for creating dynamic web sites
 Name: php
-Version: 8.3.15
+Version: 8.3.19
 Release: %{anolis_release}%{?dist}
 # All files licensed under PHP version 3.01, except
 # Zend is licensed under Zend
@@ -1500,6 +1500,9 @@ systemctl try-restart php-fpm.service >/dev/null 2>&1 || :
 
 
 %changelog
+* Wed Jun 11 2025 wenxin <wx02272781@alibaba-inc.com> - 8.3.19-1
+- Update to 8.3.19 to fix CVE-2024-11235
+
 * Fri Mar 21 2025 Zhao Hang <wb-zh951434@alibaba-inc.com> - 8.3.15-1
 - Update to 8.3.15-1 from 8.2.27-1
 - Migrated to SPDX license