PHP / update detail

Updated PHP Windows builds for Brotli security fix

Official PHP changelog summary with source attribution, release tags and upgrade verdicts.

Track this PHP release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

PHP·Oct 26, 2026, 11:57 AMChangeSecurity-relevantAI-assisted summary

Summary

Updated Windows PHP builds (8.5.12-1, 8.4.27-1, 8.3.36-1, 8.2.35-1) now include Brotli 1.2.1, fixing CVE-2026-111497.
The fix patches an out-of-bounds write vulnerability in Brotli decompression reachable via cURL automatic HTTP response decompression.
These are rebuilds with unchanged PHP source versions; only the Windows package dependencies were updated.

securityminorsource healthy

Official source Last checked Nov 4, 2026, 12:01 PM

Loading follow options…

keep exploring

Continue with PHP

Compare this release with the product timeline and keep the tools you use in one place.

official source

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked Nov 4, 2026, 12:01 PM

digest settings

Already following PHP? Add related tools without starting a new digest.