PHP 8.2 is currently only receiving security fixes. PHP 8.2.3 is not the latest version in the series, and using this release is not recommended. PHP 8.2.28 is the latest in the series.
Downloads
Source Code
Git Clone
Use Git to clone the 8.2.3 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-8.2.3How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf), configuring the build ./configure, and running make.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-8.2.3-x64NTS.zip (30.22 MiB)
php-8.2.3-x86NTS.zip (27.12 MiB)
Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-8.2.3-x64TS.zip (30.32 MiB)
php-8.2.3-x86TS.zip (27.10 MiB)
Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.2.3-cli-alpineDebian-based: More compatible with other components, complete, and are widely used.
docker pull php:8.2.3-cliPHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.2.3-fpm-alpineDebian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:8.2.3-apacheDebian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:8.2.3-fpmChangeLog
Core
- Fixed bug #81744 (Password_verify() always return true with some hash). (CVE-2023-0567).
- Fixed bug #81746 (1-byte array overrun in common path resolve code). (CVE-2023-0568).
SAPI
- Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
Commit List
Jakub Zelenka
- Fix repeated warning for file uploads limit exceeding in 89a20c2ccb
- Introduce max_multipart_body_parts INI in 95b33b624c
Niels Dossche
- Fix array overrun when appending slash to paths in 0f2957f3ec
Pierrick Charron
- Prepare 8.2.3 branch in 1793f8dada
- Update NEWS in 38bd305473
- Prepare PHP 8.2.3 in cde956a2b0
Tim Düsterhus
- crypt: Fix validation of malformed BCrypt hashes in e2e6c577a7
- crypt: Fix possible buffer overread in
php_crypt()in 86d0d1b0d9