*/*php82*: Welcome php 8.2.0 Alpha 1 Please DO NOT use this version in production, it is an early test version. port-committers@ please DO NOT mark your ports IGNORE_WITH_PHP=82. A build is running to check all php ports with php82 and will be committed in batch tomorrow. Sponsored by: Bounce Experts665b149d26
Port details
archivers/php82-bz28.2.35_1
The bz2 shared extension for php
- Maintainer
- bofh@FreeBSD.org
- Packages
- php82-bz2 8.2.35_1
- Upstream
- up to date
- CPE
php:phpfrom the port- WWW
- https://www.php.net/
- Links
- cgit · VuXML
Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE
None. There is no CVE without a VuXML entry for this version.
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (11)
Show 11 fixed
VuXML entries whose affected range this version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
| CVE-2026-109618 | 9.2 | 2026-10-21 | PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario… |
| CVE-2026-109619 | 9.2 | 2026-10-21 | PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being r… |
| CVE-2026-17543 | 8.1 | 2026-07-30 | Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33… |
| CVE-2026-91765 | 7.5 | 2026-09-25 | cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of… |
| CVE-2025-14181 | 6.5 | 2026-09-25 | The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger… |
| CVE-2026-91766 | 5.9 | 2026-09-25 | When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect … |
| CVE-2026-93682 | 5.8 | 2026-09-25 | When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap… |
| CVE-2026-7260 | 5.4 | 2026-07-30 | Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33… |
| CVE-2026-91769 | 4.3 | 2026-09-25 | PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requ… |
| CVE-2026-6103 | 4.3 | 2026-09-25 | phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFF… |
| CVE-2025-1218 | 3.4 | 2026-09-25 | The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL s… |