This Release is Outdated

The latest release of PHP 8.2 is PHP 8.2.31 . It is recommended to upgrade to the latest release.

PHP 8.2.3 Release Announcement

The PHP development team announces the immediate availability of PHP 8.2.3. This is a security release that addresses CVE-2023-0567, CVE-2023-0568, and CVE-2023-0662.

All PHP 8.2 users are advised to upgrade to this version.

For source downloads of PHP 8.2.3 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code

PHP 8.2.3 (tar.gz)

sha256: 7c475bcbe61d28b6878604b1b6f387f39d1a63b5f21fa8156fd7aa615d43e259
PHP 8.2.3 (tar.bz2)

sha256: 87bb58865f38f5e2941813029152cea2102fe2961bb4d68b88f831ddd0548d0f
PHP 8.2.3 (tar.xz)

sha256: b9b566686e351125d67568a33291650eb8dfa26614d205d70d82e6e92613d457

Change Log

core
- Fixed bug #81744 (Password_verify() always return true with some hash). (CVE-2023-0567).
- Fixed bug #81746 (1-byte array overrun in common path resolve code). (CVE-2023-0568).
sapi
- Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)