PHP Release 8.0.28


    PHP 8.0.28 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.0.28. This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662

    All PHP 8.0 users are advised to upgrade to this version.

    For source downloads of PHP 8.0.28 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.0.28 (tar.gz)
    SHA256: 7432184eae01e4e8e39f03f80e8ec0ca2c8bfebc56e9a7b983541ca8805df22f
    PHP 8.0.28 (tar.bz2)
    SHA256: 9d5e74935c900e3b9c7b6bc740596b71933630eb9f63717c0c4923d8c788c62e
    PHP 8.0.28 (tar.xz)
    SHA256: 5e07278a1f315a67d36a676c01343ca2d4da5ec5bdb15d018e4248b3012bc0cd
    Change Logs
    core
    • Fixed bug #81744 (Password_verify() always return true with some hash). (CVE-2023-0567).
    • Fixed bug #81746 (1-byte array overrun in common path resolve code). (CVE-2023-0568).
    sapi
    • Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top