The PHP development team announces the immediate availability of PHP 8.2.28. This is a security release that addresses CVE-2025-1219, CVE-2025-1736, CVE-2025-1861, CVE-2025-1734 and CVE-2025-1217.
All PHP 8.2 users are advised to upgrade to this version. For source downloads of PHP 8.2.28 please visit our downloads page. Windows binaries can be found on the PHP for Windows site. The list of changes is recorded in the ChangeLog. Release Announcement: <https://php.net/releases/8_2_28.php> Downloads: <https://php.net/downloads> Windows downloads: <https://windows.php.net/download#php-8.2> Changelog: <https://php.net/ChangeLog-8.php#8.2.28> Release Manifest: < https://gist.github.com/adoy/fa7c0cec86d941b9a4470ad8f1a21f67> Many thanks to all the contributors and supporters! Sergey Panteleev, Pierrick Charron & Ben Ramsey php-8.2.28.tar.bz2 SHA256 hash: 2919cc1b92190a58dc17904b92e626600b96ce49a4c72e77513786a4406acce5 PGP signature: -----BEGIN PGP SIGNATURE----- iQJFBAABCgAvFiEEEZjAEXWTSXpexcGZKGrx+Yl0adwFAmfQfAcRHHBpZXJyaWNr QHBocC5uZXQACgkQKGrx+Yl0adxl0A//Un7pw8tX0SYC1gacIuO/kWhMXt0TJ5Rc 5Bq4AvjyS9U1uEZjmYh3QzkANccQKwLDJ/micraPRJ7RaMnKTezwf1l6RtmO9Qnk YFbYYYtQlajEwhx1/EYpiJeXIy/COaWyHkITyPh7nboheADB+uQnJtUScw/PsQdN zQsWwPihRJYWYhqtI19+2QBGSNn3hFcSYyo86p7DLT76JY4nmkyX1fzVHN8ZG3mn SaSQWxbj+C8iCUgvB92G43ZBmjONSGPq3l5/kq2nWivKqimCy6ENhgPZlf/UimSc jEWH1TUhu02bkP7p+2xr26Ba+OYxIebZTg+7Nc+3WM5tRJfXkdB8RYe58DvaQ6tu 7Ul4eWU7XogKvTZHReeZqx7kJcTBFs5YG0geE+/oB0GmXgZb742G64wGxjhv+YXN rj1TPCe/DG+IzqIQhfF6ZV8P+jgUwTnH0Tb3aS+JDYtHkN8QsGN69DC6NWsMYtWg llThSsgE5Bm5Cg1vawXhnXj3ZVfzBEdJsT1mP5khur836wS5MslnKeqDIriNBRpa NtWpLdtFKqgXLJTL7V+5UInDFezL+ZUEmr+ZBFIvxz1w/QX7N8I8/AVcSssqWLO3 M3TfX7JKk6EjdIkSI+mfeVWyiBKXqmF64G2tnBP2N0gOQ1ZkUI5xxwhidud3E0IE YwKIkRirR44= =BBU3 -----END PGP SIGNATURE----- php-8.2.28.tar.gz SHA256 hash: 3318300888de5023720cc84efad5e005e53f30b5f0072fae65a750dabcaf6ec3 PGP signature: -----BEGIN PGP SIGNATURE----- iQJFBAABCgAvFiEEEZjAEXWTSXpexcGZKGrx+Yl0adwFAmfQfAcRHHBpZXJyaWNr QHBocC5uZXQACgkQKGrx+Yl0adwtAw/+J3nH22kd9A6hMEkpeJ7+dVdkqHc5TkfH 7M4fXdUvHLO7Dn/0VY/PzkRXFF84HZeeHiahxxOrLPYad+e2v7V2aItx83A58O1e 7uScKP6DGKhvlYLHOVRUploDRELac3abya6TtUgF7aUVdzniVC2fWWOdJnO1j4K+ cRWQU4LvjHNrZ7TiR3NQnNYHvnqxBbNjyMeiqMG4kfQmh+iRaqcM42vYe4dyLnvm Zlu8JhrDdAsMhGDndZ+evZFJ+qS5YL5q/CO3EQToU82w+70MFXm75u43cXTj9dMx 1sgplbxzH9VPYo2yXKvNOIEawmF7/94B2UYZgsAu1ZKaPm77a1HwJNro3pV8AEke IuoFsuoy+kPYrAlWQYCorQCZx3glqVMd8c2LzboxOAIXSjzkfgjNz+2st3S+KsKK ate4aIFKhNvyp/R0nhU2BvwMAOxhaZJKy6qm+roRpslMYl4BLcBl1P0TN93RI77I G5dscxlAHqy4G9sqPQqT/Gt0e3T/84guC/PHMwl+IZwaTXo7Qac0WM0tm1HdYZGG xjQ5xMEKhLpHTu6oe4xsg1oM884lXcRxQ3rrl9sxjmdIXrYyT1GUtsa19L+eB5qT lVaO2Ji90Q9zf9G5AXqCjLhTJYKlMlKpyjpT/MwPq694lB7CLh8m9B3bq6afUCpD mGn3WK2eLNA= =k0/j -----END PGP SIGNATURE----- php-8.2.28.tar.xz SHA256 hash: af8c9153153a7f489153b7a74f2f29a5ee36f5cb2c6c6929c98411a577e89c91 PGP signature: -----BEGIN PGP SIGNATURE----- iQJFBAABCgAvFiEEEZjAEXWTSXpexcGZKGrx+Yl0adwFAmfQfAgRHHBpZXJyaWNr QHBocC5uZXQACgkQKGrx+Yl0adz1gQ/+IpVReSgRMHmQeU8lJe1iGP/anrsTz8g4 lBEeDxcUFB21p2FGX588VH16ldbLRQES+V6dUk6ZnG6z8tWLq5RmufQnRtOdCo2D j8eP9txXXYPU05rWXPU4/Ld7+K4ODMKbArqNk8X4vEttv8aBk1tgchI5Zt7aQ/uV NpqGbDezuOO4bZDGK0MebkSgR18KbRoFY2l3wu5cAUU0WFpG4+h6N/Oo5XbCljHO S3H9yRrh6O1Z9D2ctPPmq7PFM45N3L2zSSyX8yj6Yc05MhWJiQcqVQhO6vo19kep oyQy12oexUsXIiKdENLmjTYt13+nrv4VLs188t+c11308aS/9bQqbOcQ1tPkYFv9 M24fULxuwLj4E/RJfAD7UvhAnix0Tmay1paCqzB4TkgioY/0J1Mo+gP0f1UzqNDh H+/NEml5AV2+MrHyQVB8R7lzVgddnHzb0Bx9fajoOc1DRkZbO3JdHteCK2PXZoqt AHF7jHD1dxxVFjXMF1yAgHGNlzOIAu4nGk/vhmEAvh6m6358MkvQh85sNoevnK9Y uHdzz1VEC4tXgEkt41VQ1nUoTdoCsitSmDh7naBQMPqZkA528rvoDH371tCo/1GP dVzCncACpHjBDmcawqc6hYvO0z3Cfwer6TG0e+hGd7zVIaNSTQUlvWb8/U1edk9Y fKCBHYALVwI= =5ip7 -----END PGP SIGNATURE-----
