PHP 8.2.14: Downloads, Changelog, News

Release Information

Release
8.2.14
PHP Version
PHP 8.2
Release Date
Release Type
Bug Fix Release
Release Status
Use PHP 8.2.26 instead
Branch Status
Supported

PHP 8.2.14 is an old release of PHP 8.2 series. Using the latest version PHP 8.2.26 is highly recommended.
PHP 8.2 continues to receive bug fixes and security fixes until 2024-12-31.

Downloads

Source Code

Git Clone
Use Git to clone the 8.2.14 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-8.2.14
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (./buildconf), configuring the build ./configure, and running make.
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.

Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.

Docker/Podman Containers

PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.2.14-cli-alpine

Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:8.2.14-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.2.14-fpm-alpine

Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:8.2.14-apache

Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:8.2.14-fpm

ChangeLog

Core

  • Fixed oss-fuzz #54325 (Use-after-free of name in var-var with malicious error handler).
  • Fixed oss-fuzz #64209 (In-place modification of filename in php_message_handler_for_zend).
  • Fixed bug GH-12758 / GH-12768 (Invalid opline in OOM handlers within ZEND_FUNC_GET_ARGS and ZEND_BIND_STATIC).
  • Fix various missing NULL checks.
  • Fixed bug GH-12835 (Leak of call->extra_named_params on internal __call).

Date

  • Fixed improbably integer overflow while parsing really large (or small) Unix timestamps.

DOM

  • Fixed bug GH-12616 (DOM: Removing XMLNS namespace node results in invalid default: prefix).

FPM

  • Fixed bug GH-12705 (Segmentation fault in fpm_status_export_to_zval).

FTP

  • Fixed bug GH-9348 (FTP & SSL session reuse).

Intl

  • Fixed bug GH-12635 (Test bug69398.phpt fails with ICU 74.1).

LibXML

  • Fixed bug GH-12702 (libxml2 2.12.0 issue building from src).
  • Fixed test failures for libxml2 2.12.0.

MySQLnd

  • Avoid using uninitialised struct.
  • Fixed bug GH-12791 (Possible dereference of NULL in MySQLnd debug code).

Opcache

  • Fixed JIT bug (Function JIT emits "Uninitialized string offset" warning at the same time as invalid offset Error).
  • Fixed JIT bug (JIT emits "Attempt to assign property of non-object" warning at the same time as Error is being thrown).

OpenSSL

  • Fixed bug #50713 (openssl_pkcs7_verify() may ignore untrusted CAs).

PCRE

  • Fixed bug GH-12628 (The gh11374 test fails on Alpinelinux).

PDO PGSQL

  • Fixed the default value of $fetchMode in PDO::pgsqlGetNotify()

PGSQL

  • Fixed bug GH-12763 wrong argument type for pg_untrace.

PHPDBG

  • Fixed bug GH-12675 (MEMORY_LEAK in phpdbg_prompt.c).

SOAP

  • Fixed bug GH-12838 ([SOAP] Temporary WSDL cache files not being deleted).

SPL

  • Fixed bug GH-12721 (SplFileInfo::getFilename() segfault in combination with GlobIterator and no directory separator).

SQLite3

  • Fixed bug GH-12633 (sqlite3_defensive.phpt fails with sqlite 3.44.0).

Standard

  • Fix memory leak in syslog device handling.
  • Fixed bug GH-12621 (browscap segmentation fault when configured in the vhost).
  • Fixed bug GH-12655 (proc_open() does not take into account references in the descriptor array).

Streams

  • Fixed bug #79945 (Stream wrappers in imagecreatefrompng causes segfault).

Zip

  • Fixed bug GH-12661 (Inconsistency in ZipArchive::addGlob remove_path Option Behavior).

Commit List

Alex Dowad

  • Return value of mb_get_info can be NULL in d8ef868b92

Ben Ramsey

  • Merge changes to CertificateGenerator.inc from PHP-8.2 in 2b4a47ccec

Bob Weinand

Daniil Gentili

  • Fix memory leak in standard syslog device handling in 10b2b4a52c

ddv

  • Fix phpGH-12763: PGSQL pg_untrace(): Argument #1 ($connection) must be of type resource or null, PgSql\Connection given in 3f57bd80f6

Derick Rethans

Dmitry Stogov

  • Fixed empty array inference in 5a77870492
  • Backport fix for GH-12512: JIT Assertion `info & (1 << type)' failed in GH-12660
  • Fixed GH-12748: Function JIT emits "could not convert to int" warning at the same time as invalid offset Error in 2d65d714a3
  • Fixed GH-12748: Function JIT emits "could not convert to int" warning at the same time as invalid offset Error in 87107f8688
  • Fixed GH-12812: Integer string in variable used as offset produces wrong undefined array key warning in GH-12817
  • Fixed GH-8251: Narrowing occurred during type inference of ZEND_FETCH_DIM_W in 423a1e586e
  • Fixed type inference in 1e55c97601

Florian Engelhardt

  • Fix invalid opline in OOM handlers within ZEND_FUNC_GET_ARGS and ZEND_BIND_STATIC in GH-12768

Gina Peter Banyard

  • jit: fixed "Uninitialized string offset" warning being emitted at the same time as invalid offset Error in ed8b901869
  • jit: fixed JIT "Attempt to assign property of non-object" warning emitted at the same time as Error is being thrown in 126a255d66
  • Align error messages between normal VM and JIT for RW when using object as array in GH-12799

Ilija Tovilo

  • Fix undeclared variable in stat tests in 7440a1bd1f
  • Disable -fsanitize=function on Clang 17 in ca22505c8c
  • Fix astat imperciseness excemption in test in d224faa10f
  • Automatically mark tests as flaky in 6d59640980
  • Fix file test race condition in a742010a0a
  • Retry tests on deadlock in 58712e0698
  • Temporarily disable failing zlib tests on travis in GH-10738
  • Fix use-after-free of name in var-var with malicious error handler in ea52706a2a
  • Fix in-place modification of filename in php_message_handler_for_zend in d8e866da04
  • Fix undeclared variable in stat tests in db8c91ae9f
  • Disable -fsanitize=function on Clang 17 in f7f9401cc8
  • Fix astat imperciseness excemption in test in fe34dd1b49
  • Automatically mark tests as flaky in 9bdd0f0de9
  • Fix file test race condition in e1e140f2f2
  • Retry tests on deadlock in 2312637496
  • Temporarily disable failing zlib tests on travis in GH-10738
  • Fix use-after-free of name in var-var with malicious error handler in 1fdcfa4ebe
  • Fix in-place modification of filename in php_message_handler_for_zend in daa38dd63e
  • Reduce parallelism on frequently crashing jobs in ace91ddd73
  • Fix travis_wait in 706e51ad8a
  • Fix leak of call->extra_named_params on internal __call in f203edd3c5
  • Fix compilation of ftp without openssl in 4f934cb7f7

Jakub Zelenka

  • Initialize syslog device in GINIT in b4208c8f96
  • Skip slow tests on Travis in 708e9fadfd
  • Fix bug #79945: Stream wrappers in imagecreatefrompng causes segfault in 6734880ef5
  • Fix stream fclose_stdiocast_flush_in_progress type in 4da89d86ec
  • Fix #50713: openssl_pkcs7_verify() may ignore untrusted CAs in f90b40416f
  • Skip slow tests on Travis in e41cbd2174
  • Fix bug #79945: Stream wrappers in imagecreatefrompng causes segfault in a7a6151c4f
  • Fix stream fclose_stdiocast_flush_in_progress type in e43ffb5023
  • Fix #50713: openssl_pkcs7_verify() may ignore untrusted CAs in 55e0748487

Mikhail Galanin

Muhammad Moinur Rahman

Máté Kocsis

  • Fix the default value of $fetchMode in PDO::pgsqlGetNotify() in 8387f2dfd4

Niels Dossche

Patrick Prasse

Pierrick Charron

Remi Collet

SakiTakamachi

Subscribe to PHP.Watch newsletter for monthly updates

You will receive an email on last Wednesday of every month and on major PHP releases with new articles related to PHP, upcoming changes, new features and what's changing in the language. No marketing emails, no selling of your contacts, no click-tracking, and one-click instant unsubscribe from any email you receive.

Support PHP.Watch — If you find the articles, version information, Codex, and other PHP.Watch contributions useful, consider supporting through GitHub Sponsors. Your sponsorship helps dedicate more time to creating valuable content and improving the PHP community. Together, we can keep the momentum going — thank you for your support!

Thanks to the highest tier sponsor: @TomasVotruba for your generous support to keep PHP.Watch moving 💜