Views
5

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

PHP 8.2.30 fixes multiple security vulnerabilities, including CVE-2025-14180, CVE-2025-14178, and CVE-2025-14177, along with Curl build and test failures.

Update Details

Security

  • Fixed GHSA-8xr5-qppj-gvwj (CVE-2025-14180), preventing a null dereference when quoting PDO results.
  • Fixed a null-byte termination issue in dns_get_record() (GHSA-www2-q4fc-65wf).
  • Fixed GHSA-h96m-rvf9-jgm2 (CVE-2025-14178), preventing a heap buffer overflow in array_merge().
  • Fixed GHSA-3237-qqm7-mfv7 (CVE-2025-14177), preventing memory information leaks in getimagesize().
  • Reset global pointers in zend_jit_status() to prevent use-after-free.

Bug Fixes

  • Fixed Curl build and test failures with version 8.16.

Product Information

Vendor: PHP Group

Product: php

Product type: Software

Variant: php 8.2

Version: 8.2.30

Vendor information published: Dec 18, 2025

Original release notes: View on vendor site

Published on updatealert.io: Oct 27, 2026

Description: A popular general-purpose scripting language that is especially suited to web development. Fast, flexible and pragmatic, PHP powers everything from your blog to the most popular websites in the world.