The PHP development team announces the immediate availability of PHP 8.2.31.
This is a security release that addresses CVE-2026-6735, CVE-2026-7259, CVE-2025-14179,
CVE-2026-6722, CVE-2026-7261, CVE-2026-7262, CVE-2026-7568, and CVE-2026-7258.
All PHP 8.2 users are advised to upgrade to this version.
For source downloads of PHP 8.2.31 please visit our downloads page.
Windows binaries can be found on the PHP for Windows site.
The list of changes is recorded in the ChangeLog.
Release Announcement: https://php.net/releases/8_2_31.php
Downloads: https://php.net/downloads
Windows downloads: https://www.php.net/downloads.php?os=windows&version=8.2
Changelog: https://php.net/ChangeLog-8.php#8.2.31
Release Manifest: https://gist.github.com/saundefined/5aeaa87eeb72ae5c7d1de55f6f5e4804
Many thanks to all the contributors and supporters!
Pierrick Charron, Sergey Panteleev & Ben Ramsey
php-8.2.31.tar.bz2
SHA256 hash: 948183fa04cf261c9b9363c02f428977b9ddf8c0bfdff8e8e1fba816ed570803
PGP signature:
-----BEGIN PGP SIGNATURE-----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=sSSi
-----END PGP SIGNATURE-----
php-8.2.31.tar.gz
SHA256 hash: 083c2f61cc5f527eb293c4c468a91af46a9678785957e023b2796a9db290d870
PGP signature:
-----BEGIN PGP SIGNATURE-----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=s7Yp
-----END PGP SIGNATURE-----
php-8.2.31.tar.xz
SHA256 hash: 95eae411d594fe6f6e5678b76645dc13ae47d3c0a5325c1d969b58dea56ee45a
PGP signature:
-----BEGIN PGP SIGNATURE-----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=PUbu
-----END PGP SIGNATURE