The PHP development team announces the immediate availability of PHP 8.2.29.
This is a security release that addresses CVE-2025-1735, CVE-2025-6491, and CVE-2025-1220.
All PHP 8.2 users are advised to upgrade to this version.
For source downloads of PHP 8.2.29 please visit our downloads page.
Windows binaries can be found on the PHP for Windows site.
The list of changes is recorded in the ChangeLog.
Release Announcement: https://php.net/releases/8_2_29.php
Downloads: https://php.net/downloads
Windows downloads: https://windows.php.net/download#php-8.2
Changelog: https://php.net/ChangeLog-8.php#8.2.29
Release Manifest: https://gist.github.com/saundefined/91568e2ece25a123ae5f41af22f0ac07
Many thanks to all the contributors and supporters!
Pierrick Charron, Sergey Panteleev & Ben Ramsey
php-8.2.29.tar.bz2
SHA256 hash: 51979e8d198cbade2aad4ffe9f53dd3f04f9602d3089e5979985e058ade4267c
PGP signature:
-----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEE5gkT5N8gmQfY4w2WZZqXyc8qeVoFAmhkD4kACgkQZZqXyc8q
eVrsIhAAobQfVmBE7KMbHB8q0tfBgu/gh5eltv54UPVdIUO7UFd6SiDdR8tBkap7
oiNHoODe7SGKkvdCb4Xv/8dzTFHOPOwHAqyzy6lOiXUDVTqzDNBGEuSuwJdrNn8e
Tw6Itaus1GVrdPCBOEnEkmlD94GumGcY01jVkuXsXqvVIo6mHN61TyNStaWSedfq
uuY+SK6muWq0BTvFYmtuqdWX4/XK4+U1phc/s+XkB0lZT19hGjonCTR+Dc78BReH
tWjnXP5zozlCfMq9nhnMG6Q7tsdzYaJYhpmLBURzcdUBVq6rILiIi6DEr0faBpAo
IuJpPhiTRVeiwMuEFKjQQAOCvGum6jEN0Vo/8RumVjdQTSvM/DKjLeQ1d3hmd261
MxVoHHlErAEh2IDQYUXThbgkjJjbuNAO+s/BCSVHcMvEKHfs2ByF1z7jsfTz7MOn
uwUgjAijVMuUcf8FQHV9lkml2BQCYu9ameoL6SJ4/Peot8gwFXg/M/WladRK/wFU
f9oS8VsVOYJdEWltPK7JjHCABCmuuyTfzLlKM9bpapwQTNoFeX+9A/d46EH2vSpI
sY9sRKs3on+nLZ0luKDj6cHmbiFErRROjW4AnicSG3UV4/YGrBmB5N0fHb/LmigZ
nnlrtTwqLxt5Sl6ogllUcdpVy9c3PD1Q3b9CTWFPa5EMVDNQGlo=
=FEd9
-----END PGP SIGNATURE-----
php-8.2.29.tar.gz
SHA256 hash: 0b27d330769d4bc67b1d8864347c38744b289664a946919c3ddb2235d326b3cd
PGP signature:
-----BEGIN PGP SIGNATURE-----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=x2Y2
-----END PGP SIGNATURE-----
php-8.2.29.tar.xz
SHA256 hash: 475f991afd2d5b901fb410be407d929bc00c46285d3f439a02c59e8b6fe3589c
PGP signature:
-----BEGIN PGP SIGNATURE-----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=6JRP
-----END PGP SIGNATURE