updatealert.io Logo
PHP Group php php 8.2 logo

PHP Group php php 8.2 Update Version 8.2.28

Views
6

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

PHP 8.2.28 fixes multiple security vulnerabilities in the LibXML and Streams HTTP wrappers, along with an observer segmentation fault and Windows 11 24H2 phpize compatibility.

Update Details

Security

  • Fixed a LibXML streams vulnerability that could send an incorrect content-type header after a redirected request (CVE-2025-1219, GHSA-p3x9-6h7p-cgfc).
  • Fixed a Streams HTTP wrapper issue that could omit a basic authentication header during header checks (CVE-2025-1736, GHSA-hgf5-96fm-v528).
  • Fixed a Streams HTTP wrapper vulnerability that truncated redirect locations to 1024 bytes (CVE-2025-1861, GHSA-52jp-hrpf-2jff).
  • Fixed a Streams HTTP wrapper issue that accepted headers without a colon (CVE-2025-1734, GHSA-pcmh-g36c-qc44).
  • Fixed improper handling of folded headers by the HTTP stream wrapper header parser (CVE-2025-1217, GHSA-v8xr-gpvj-cx9g).
  • Fixed the recurrence of a LibXML security issue (GHSA-wg4p-4hqh-c3g9).

Bug Fixes

  • Fixed an observer segmentation fault when a function was loaded with dl() (GH-17211).
  • Fixed phpize compatibility with Windows 11 version 24H2.

Hints

  • The Windows-specific phpize fix applies to Windows 11 version 24H2.

Product Information

Vendor: PHP Group

Product: php

Product type: Software

Variant: php 8.2

Version: 8.2.28

Vendor information published: Mar 13, 2025

Original release notes: View on vendor site

Published on updatealert.io: Oct 27, 2026

Description: A popular general-purpose scripting language that is especially suited to web development. Fast, flexible and pragmatic, PHP powers everything from your blog to the most popular websites in the world.

View All Updates