Everything

php

PHP 8.2.28

The latest release of PHP 8.2 is 8.2.33 which includes important security patches.

Source Code

PHP 8.2.28 (tar.gz)
- sha256: 3318300888de5023720cc84efad5e005e53f30b5f0072fae65a750dabcaf6ec3
PHP 8.2.28 (tar.bz2)
- sha256: 2919cc1b92190a58dc17904b92e626600b96ce49a4c72e77513786a4406acce5
PHP 8.2.28 (tar.xz)
- sha256: af8c9153153a7f489153b7a74f2f29a5ee36f5cb2c6c6929c98411a577e89c91

core
- Fixed bug GH-17211 (observer segfault on function loaded with dl()).
  
  Arnaud
libxml
- Fixed GHSA-wg4p-4hqh-c3g9 (Reocurrence of #72714).
  
  nielsdos
- Fixed GHSA-p3x9-6h7p-cgfc (libxml streams use wrong `content-type` header when requesting a redirected resource). (CVE-2025-1219)
  
  timwolla
streams
- Fixed GHSA-hgf5-96fm-v528 (Stream HTTP wrapper header check might omit basic auth header). (CVE-2025-1736)
  
  Jakub Zelenka
- Fixed GHSA-52jp-hrpf-2jff (Stream HTTP wrapper truncate redirect location to 1024 bytes). (CVE-2025-1861)
  
  Jakub Zelenka
- Fixed GHSA-pcmh-g36c-qc44 (Streams HTTP wrapper does not fail for headers without colon). (CVE-2025-1734)
  
  Jakub Zelenka
- Fixed GHSA-v8xr-gpvj-cx9g (Header parser of `http` stream wrapper does not handle folded headers). (CVE-2025-1217)
  
  Jakub Zelenka
windows
- Fixed phpize for Windows 11 (24H2).
  
  bwoebi

Represents a security release