Release Information
- Release Type
- Security Update
- Release Status
- Latest
- Branch Status
- Security-Fixes Only
PHP 8.2 is currently only receiving security fixes, and scheduled to reach EOL on 2026-12-31
Downloads
Source Code
Git Clone
Use Git to clone the 8.2.29 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-8.2.29
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf
), configuring the build ./configure
, and running make
.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-8.2.29-x64NTS.zip (30.34 MiB)
php-8.2.29-x86NTS.zip (27.24 MiB)
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-8.2.29-x64TS.zip (30.45 MiB)
php-8.2.29-x86TS.zip (27.21 MiB)
ChangeLog
PGSQL
- Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during escaping). (CVE-2025-1735)
SOAP
- Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)
Standard
- Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames). (CVE-2025-1220)
Commit List
Ahmed Lekssays
- Fix GHSA-453j-q27h-5p8x in 97c51c0e3d
Arnaud Le Blanc
- Add FreeBSD ZTS nightly build in 85522c0d48
David Carlier
- backporting C++17 detection support for recent icu4c releases in 3fdd3ed9f7
Ilija Tovilo
- Fix flaky connection count in mysqli test in 00ebd2d7f2
- Backport intl test changes for ICU 77 in d4c548cf42
- Drop tidyp from FreeBSD build in 35936bfa79
- Use
--ignore-platform-req
=php+ in community build in 0a42e6fbc5 - Track heap->real_size for USE_TRACKED_ALLOC in 9cacc57350
- Remove bug61371 test in 391bd2a48f
Jakub Zelenka
- Fix GHSA-ghsa-v8xr-gpvj-cx9g: http header folding in d20b4c97a9
- Fix GHSA-pcmh-g36c-qc44: http headers without colon in 0548c4c175
- Fix GHSA-52jp-hrpf-2jff: http redirect location truncation in ac1a054bb3
- Fix GHSA-hgf5-96fm-v528: http user header check of crlf in 41d49abbd9
- Update NEWS with entries for security fixes in 74d548bf58
- Fix typo in GHSA-hgf5-96fm-v528 NEWS entry in 70c2ebb698
- Fix GHSA-3cr5-j632-f35r: Null byte in hostnames in 0c1971387d
- Fix GHSA-hrwm-9436-5mv3: pgsql escaping no error checks in 339ff58f57
- Update NEWS with entries for security fixes in 4c77a397d0
Niels Dossche
- Fix GHSA-wg4p-4hqh-c3g9 in 0e715e71d9
Sergey Panteleev
- Update versions for PHP 8.2.29 in a6855fae73
Shivam Mathur
- Switch to windows-2022 in CI in GH-18927
- Fix CI for windows-2022 in ea6a7a9725
- Fix
PHP_BUILD_CRT
input in the nightly workflow in GH-18982
Tim Düsterhus
- Fix GHSA-p3x9-6h7p-cgfc: libxml streams wrong
content-type
on redirect in b6004a043c