Browse aymeric's, an independent, searchable archive of readable snapshots from followed feeds, preserved in Git with aggr. https://aggr.aymericbeaumet.com/sources/github.com/php/ 2026-10-21T13:45:33+00:00 aymeric's aggr urn:aggr:item:18e92d715c1126acb99ad1624537cf0ff60f65b8 2026-10-21T13:45:33+00:00 2026-10-21T13:45:33+00:00 tuyuri

The PHP development team announces the immediate availability of PHP 8.2.35. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP…

<p>The PHP development team announces the immediate availability of PHP 8.2.35. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP 8.2 users are strongly encouraged to update immediately.</p> <p>There are no complete mitigations, updating is the only safe choice. See the <a target="_blank" rel="noopener noreferrer" href="https://www.php.net/archive/2026.php#2026-10-21-5">security advisory</a> for details.</p> <p>PHP 8.2 reaches end of life on 31 December 2026 and will receive no further security fixes after that date. Please plan your upgrade to a supported version.</p> <p>For source downloads of PHP 8.2.35 please visit our <a target="_blank" rel="noopener noreferrer" href="https://www.php.net/downloads.php">downloads page</a>, Windows source and binaries can also be found <a target="_blank" rel="noopener noreferrer" href="https://www.php.net/downloads.php?os=windows&amp;version=8.2">there</a>. The list of changes is recorded in the <a target="_blank" rel="noopener noreferrer" href="https://www.php.net/ChangeLog-8.php#8.2.35">ChangeLog</a>.</p>