Views
7

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

PHP 8.2.31 adds Windows support for Brotli and Zstandard, improves OpenSSL 4.0 compatibility, and fixes multiple security vulnerabilities across FPM, MBString, PDO_Firebird, SOAP, and Standard.

Update Details

Security

  • FPM: Fixed XSS in the status endpoint (GHSA-7qg2-v9fj-4mwv, CVE-2026-6735).
  • MBString: Fixed a null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() (GHSA-wm6j-2649-pv75, CVE-2026-7259).
  • PDO_Firebird: Fixed SQL injection via NUL bytes in quoted strings (GHSA-w476-322c-wpvm, CVE-2025-14179).
  • SOAP: Fixed a stale SOAP_GLOBAL(ref_map) pointer with Apache Map (GHSA-85c2-q967-79q5, CVE-2026-6722).
  • SOAP: Fixed a use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION (GHSA-m33r-qmcv-p97q, CVE-2026-7261).
  • SOAP: Fixed a broken Apache map value NULL check (GHSA-hmxp-6pc4-f3vv, CVE-2026-7262).
  • Standard: Fixed signed integer overflow of a char array offset (GHSA-96wq-48vp-hh57, CVE-2026-7568).
  • Standard: Ensured unsigned char is consistently passed to ctype.h functions (GHSA-m8rr-4c36-8gq4, CVE-2026-7258).

Bug Fixes

  • OpenSSL: Fixed compatibility issues with OpenSSL 4.0.

New Features

  • Curl on Windows now supports Brotli and Zstandard.

Product Information

Vendor: PHP Group

Product: php

Product type: Software

Variant: php 8.2

Version: 8.2.31

Vendor information published: May 7, 2026

Original release notes: View on vendor site

Published on updatealert.io: Oct 27, 2026

Description: A popular general-purpose scripting language that is especially suited to web development. Fast, flexible and pragmatic, PHP powers everything from your blog to the most popular websites in the world.