PHP Group php php 8.2 Update Version 8.2.30
Your rating
Rate update installation process
Risk factor
No ratings yet. Be the first to rate this update.
AI enhanced content
Update Summary
PHP 8.2.30 fixes multiple security vulnerabilities, including CVE-2025-14180, CVE-2025-14178, and CVE-2025-14177, along with Curl build and test failures.
Update Details
Security
- Fixed GHSA-8xr5-qppj-gvwj (CVE-2025-14180), preventing a null dereference when quoting PDO results.
- Fixed a null-byte termination issue in dns_get_record() (GHSA-www2-q4fc-65wf).
- Fixed GHSA-h96m-rvf9-jgm2 (CVE-2025-14178), preventing a heap buffer overflow in array_merge().
- Fixed GHSA-3237-qqm7-mfv7 (CVE-2025-14177), preventing memory information leaks in getimagesize().
- Reset global pointers in zend_jit_status() to prevent use-after-free.
Bug Fixes
- Fixed Curl build and test failures with version 8.16.
Product Information
Vendor: PHP Group
Product: php
Product type: Software
Variant: php 8.2
Version: 8.2.30
Vendor information published: Dec 18, 2025
Original release notes: View on vendor site
Published on updatealert.io: Oct 27, 2026
Description: A popular general-purpose scripting language that is especially suited to web development. Fast, flexible and pragmatic, PHP powers everything from your blog to the most popular websites in the world.