PHP Release 8.2.31

    PHP 8.2.31 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.2.31. This is a security release.

    All PHP 8.2 users are encouraged to upgrade to this version.

    For source downloads of PHP 8.2.31 please visit our downloads page, Windows source and binaries can also be found there. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.2.31 (tar.gz)
    SHA256: 083c2f61cc5f527eb293c4c468a91af46a9678785957e023b2796a9db290d870
    PHP 8.2.31 (tar.bz2)
    SHA256: 948183fa04cf261c9b9363c02f428977b9ddf8c0bfdff8e8e1fba816ed570803
    PHP 8.2.31 (tar.xz)
    SHA256: 95eae411d594fe6f6e5678b76645dc13ae47d3c0a5325c1d969b58dea56ee45a
    Change Logs
    curl
    • Add support for brotli and zstd on Windows.
    fpm
    mbstring
    • Fixed GHSA-wm6j-2649-pv75 (Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()). (CVE-2026-7259)
    openssl
    • Fix compatibility issues with OpenSSL 4.0.
    pdo_firebird
    soap
    • Fixed GHSA-85c2-q967-79q5 (Stale SOAP_GLOBAL(ref_map) pointer with Apache Map). (CVE-2026-6722)
    • Fixed GHSA-m33r-qmcv-p97q (Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION). (CVE-2026-7261)
    • Fixed GHSA-hmxp-6pc4-f3vv (Broken Apache map value NULL check). (CVE-2026-7262)
    standard
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top