Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:126739
Precedence: bulk
MIME-Version: 1.0
Date: Thu, 13 Mar 2025 13:11:15 -0400
Message-ID: <CAOfKkdTOMZLYzUq=PL1JWjhEfkn-+9fn5b1o0Eh6oDNnsmMT9g@mail.gmail.com>
Subject: [PHP-DEV] PHP 8.2.28 Released!
To: PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="000000000000df95eb06303c69c8"
From: pierrick@php.net (Pierrick Charron)

--000000000000df95eb06303c69c8
Content-Type: text/plain; charset="UTF-8"

The PHP development team announces the immediate availability of PHP
8.2.28. This is a security release that addresses CVE-2025-1219,
CVE-2025-1736, CVE-2025-1861, CVE-2025-1734 and CVE-2025-1217.

All PHP 8.2 users are advised to upgrade to this version.

For source downloads of PHP 8.2.28 please visit our downloads page.
Windows binaries can be found on the PHP for Windows site.
The list of changes is recorded in the ChangeLog.

Release Announcement: <https://php.net/releases/8_2_28.php>
Downloads:            <https://php.net/downloads>
Windows downloads:    <https://windows.php.net/download#php-8.2>
Changelog:            <https://php.net/ChangeLog-8.php#8.2.28>
Release Manifest:     <
https://gist.github.com/adoy/fa7c0cec86d941b9a4470ad8f1a21f67>

Many thanks to all the contributors and supporters!

Sergey Panteleev, Pierrick Charron & Ben Ramsey


php-8.2.28.tar.bz2
SHA256 hash:
2919cc1b92190a58dc17904b92e626600b96ce49a4c72e77513786a4406acce5
PGP signature:
-----BEGIN PGP SIGNATURE-----
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=BBU3
-----END PGP SIGNATURE-----


php-8.2.28.tar.gz
SHA256 hash:
3318300888de5023720cc84efad5e005e53f30b5f0072fae65a750dabcaf6ec3
PGP signature:
-----BEGIN PGP SIGNATURE-----
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=k0/j
-----END PGP SIGNATURE-----


php-8.2.28.tar.xz
SHA256 hash:
af8c9153153a7f489153b7a74f2f29a5ee36f5cb2c6c6929c98411a577e89c91
PGP signature:
-----BEGIN PGP SIGNATURE-----

iQJFBAABCgAvFiEEEZjAEXWTSXpexcGZKGrx+Yl0adwFAmfQfAgRHHBpZXJyaWNr
QHBocC5uZXQACgkQKGrx+Yl0adz1gQ/+IpVReSgRMHmQeU8lJe1iGP/anrsTz8g4
lBEeDxcUFB21p2FGX588VH16ldbLRQES+V6dUk6ZnG6z8tWLq5RmufQnRtOdCo2D
j8eP9txXXYPU05rWXPU4/Ld7+K4ODMKbArqNk8X4vEttv8aBk1tgchI5Zt7aQ/uV
NpqGbDezuOO4bZDGK0MebkSgR18KbRoFY2l3wu5cAUU0WFpG4+h6N/Oo5XbCljHO
S3H9yRrh6O1Z9D2ctPPmq7PFM45N3L2zSSyX8yj6Yc05MhWJiQcqVQhO6vo19kep
oyQy12oexUsXIiKdENLmjTYt13+nrv4VLs188t+c11308aS/9bQqbOcQ1tPkYFv9
M24fULxuwLj4E/RJfAD7UvhAnix0Tmay1paCqzB4TkgioY/0J1Mo+gP0f1UzqNDh
H+/NEml5AV2+MrHyQVB8R7lzVgddnHzb0Bx9fajoOc1DRkZbO3JdHteCK2PXZoqt
AHF7jHD1dxxVFjXMF1yAgHGNlzOIAu4nGk/vhmEAvh6m6358MkvQh85sNoevnK9Y
uHdzz1VEC4tXgEkt41VQ1nUoTdoCsitSmDh7naBQMPqZkA528rvoDH371tCo/1GP
dVzCncACpHjBDmcawqc6hYvO0z3Cfwer6TG0e+hGd7zVIaNSTQUlvWb8/U1edk9Y
fKCBHYALVwI=
=5ip7
-----END PGP SIGNATURE-----

--000000000000df95eb06303c69c8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">The PHP development team announces the immediate availabil=
ity of PHP<br>8.2.28. This is a security release that addresses CVE-2025-12=
19,<br>CVE-2025-1736, CVE-2025-1861, CVE-2025-1734 and CVE-2025-1217.<br><b=
r>All PHP 8.2 users are advised to upgrade to this version.<br><br>For sour=
ce downloads of PHP 8.2.28 please visit our downloads page.<br>Windows bina=
ries can be found on the PHP for Windows site.<br>The list of changes is re=
corded in the ChangeLog.<br><br>Release Announcement: &lt;<a href=3D"https:=
//php.net/releases/8_2_28.php">https://php.net/releases/8_2_28.php</a>&gt;<=
br>Downloads: =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0&lt;<a href=3D"https=
://php.net/downloads">https://php.net/downloads</a>&gt;<br>Windows download=
s: =C2=A0 =C2=A0&lt;<a href=3D"https://windows.php.net/download#php-8.2">ht=
tps://windows.php.net/download#php-8.2</a>&gt;<br>Changelog: =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0&lt;<a href=3D"https://php.net/ChangeLog-8.php#8=
.2.28">https://php.net/ChangeLog-8.php#8.2.28</a>&gt;<br>Release Manifest: =
=C2=A0 =C2=A0 &lt;<a href=3D"https://gist.github.com/adoy/fa7c0cec86d941b9a=
4470ad8f1a21f67">https://gist.github.com/adoy/fa7c0cec86d941b9a4470ad8f1a21=
f67</a>&gt;<br><br>Many thanks to all the contributors and supporters!<br><=
br>Sergey Panteleev, Pierrick Charron &amp; Ben Ramsey<br><br><br>php-8.2.2=
8.tar.bz2<br>SHA256 hash: 2919cc1b92190a58dc17904b92e626600b96ce49a4c72e775=
13786a4406acce5<br>PGP signature:<br>-----BEGIN PGP SIGNATURE-----<br><br>i=
QJFBAABCgAvFiEEEZjAEXWTSXpexcGZKGrx+Yl0adwFAmfQfAcRHHBpZXJyaWNr<br>QHBocC5u=
ZXQACgkQKGrx+Yl0adxl0A//Un7pw8tX0SYC1gacIuO/kWhMXt0TJ5Rc<br>5Bq4AvjyS9U1uEZ=
jmYh3QzkANccQKwLDJ/micraPRJ7RaMnKTezwf1l6RtmO9Qnk<br>YFbYYYtQlajEwhx1/EYpiJ=
eXIy/COaWyHkITyPh7nboheADB+uQnJtUScw/PsQdN<br>zQsWwPihRJYWYhqtI19+2QBGSNn3h=
FcSYyo86p7DLT76JY4nmkyX1fzVHN8ZG3mn<br>SaSQWxbj+C8iCUgvB92G43ZBmjONSGPq3l5/=
kq2nWivKqimCy6ENhgPZlf/UimSc<br>jEWH1TUhu02bkP7p+2xr26Ba+OYxIebZTg+7Nc+3WM5=
tRJfXkdB8RYe58DvaQ6tu<br>7Ul4eWU7XogKvTZHReeZqx7kJcTBFs5YG0geE+/oB0GmXgZb74=
2G64wGxjhv+YXN<br>rj1TPCe/DG+IzqIQhfF6ZV8P+jgUwTnH0Tb3aS+JDYtHkN8QsGN69DC6N=
WsMYtWg<br>llThSsgE5Bm5Cg1vawXhnXj3ZVfzBEdJsT1mP5khur836wS5MslnKeqDIriNBRpa=
<br>NtWpLdtFKqgXLJTL7V+5UInDFezL+ZUEmr+ZBFIvxz1w/QX7N8I8/AVcSssqWLO3<br>M3T=
fX7JKk6EjdIkSI+mfeVWyiBKXqmF64G2tnBP2N0gOQ1ZkUI5xxwhidud3E0IE<br>YwKIkRirR4=
4=3D<br>=3DBBU3<br>-----END PGP SIGNATURE-----<br><br><br>php-8.2.28.tar.gz=
<br>SHA256 hash: 3318300888de5023720cc84efad5e005e53f30b5f0072fae65a750dabc=
af6ec3<br>PGP signature:<br>-----BEGIN PGP SIGNATURE-----<br><br>iQJFBAABCg=
AvFiEEEZjAEXWTSXpexcGZKGrx+Yl0adwFAmfQfAcRHHBpZXJyaWNr<br>QHBocC5uZXQACgkQK=
Grx+Yl0adwtAw/+J3nH22kd9A6hMEkpeJ7+dVdkqHc5TkfH<br>7M4fXdUvHLO7Dn/0VY/PzkRX=
FF84HZeeHiahxxOrLPYad+e2v7V2aItx83A58O1e<br>7uScKP6DGKhvlYLHOVRUploDRELac3a=
bya6TtUgF7aUVdzniVC2fWWOdJnO1j4K+<br>cRWQU4LvjHNrZ7TiR3NQnNYHvnqxBbNjyMeiqM=
G4kfQmh+iRaqcM42vYe4dyLnvm<br>Zlu8JhrDdAsMhGDndZ+evZFJ+qS5YL5q/CO3EQToU82w+=
70MFXm75u43cXTj9dMx<br>1sgplbxzH9VPYo2yXKvNOIEawmF7/94B2UYZgsAu1ZKaPm77a1Hw=
JNro3pV8AEke<br>IuoFsuoy+kPYrAlWQYCorQCZx3glqVMd8c2LzboxOAIXSjzkfgjNz+2st3S=
+KsKK<br>ate4aIFKhNvyp/R0nhU2BvwMAOxhaZJKy6qm+roRpslMYl4BLcBl1P0TN93RI77I<b=
r>G5dscxlAHqy4G9sqPQqT/Gt0e3T/84guC/PHMwl+IZwaTXo7Qac0WM0tm1HdYZGG<br>xjQ5x=
MEKhLpHTu6oe4xsg1oM884lXcRxQ3rrl9sxjmdIXrYyT1GUtsa19L+eB5qT<br>lVaO2Ji90Q9z=
f9G5AXqCjLhTJYKlMlKpyjpT/MwPq694lB7CLh8m9B3bq6afUCpD<br>mGn3WK2eLNA=3D<br>=
=3Dk0/j<br>-----END PGP SIGNATURE-----<br><br><br>php-8.2.28.tar.xz<br>SHA2=
56 hash: af8c9153153a7f489153b7a74f2f29a5ee36f5cb2c6c6929c98411a577e89c91<b=
r>PGP signature:<br>-----BEGIN PGP SIGNATURE-----<br><br>iQJFBAABCgAvFiEEEZ=
jAEXWTSXpexcGZKGrx+Yl0adwFAmfQfAgRHHBpZXJyaWNr<br>QHBocC5uZXQACgkQKGrx+Yl0a=
dz1gQ/+IpVReSgRMHmQeU8lJe1iGP/anrsTz8g4<br>lBEeDxcUFB21p2FGX588VH16ldbLRQES=
+V6dUk6ZnG6z8tWLq5RmufQnRtOdCo2D<br>j8eP9txXXYPU05rWXPU4/Ld7+K4ODMKbArqNk8X=
4vEttv8aBk1tgchI5Zt7aQ/uV<br>NpqGbDezuOO4bZDGK0MebkSgR18KbRoFY2l3wu5cAUU0WF=
pG4+h6N/Oo5XbCljHO<br>S3H9yRrh6O1Z9D2ctPPmq7PFM45N3L2zSSyX8yj6Yc05MhWJiQcqV=
QhO6vo19kep<br>oyQy12oexUsXIiKdENLmjTYt13+nrv4VLs188t+c11308aS/9bQqbOcQ1tPk=
YFv9<br>M24fULxuwLj4E/RJfAD7UvhAnix0Tmay1paCqzB4TkgioY/0J1Mo+gP0f1UzqNDh<br=
>H+/NEml5AV2+MrHyQVB8R7lzVgddnHzb0Bx9fajoOc1DRkZbO3JdHteCK2PXZoqt<br>AHF7jH=
D1dxxVFjXMF1yAgHGNlzOIAu4nGk/vhmEAvh6m6358MkvQh85sNoevnK9Y<br>uHdzz1VEC4tXg=
Ekt41VQ1nUoTdoCsitSmDh7naBQMPqZkA528rvoDH371tCo/1GP<br>dVzCncACpHjBDmcawqc6=
hYvO0z3Cfwer6TG0e+hGd7zVIaNSTQUlvWb8/U1edk9Y<br>fKCBHYALVwI=3D<br>=3D5ip7<b=
r>-----END PGP SIGNATURE-----<br></div>

--000000000000df95eb06303c69c8--