PHP 8.2.32: Downloads, Changelog, News

Release Information

Release: 8.2.32
PHP Version: PHP 8.2
Release Date: 2026 Jul 02
Release Type: Security Update
Release Status: Latest
Branch Status: Security-Fixes Only

PHP 8.2 is currently only receiving security fixes, and scheduled to reach EOL on 2026-12-31

PHP can be compiled by setting up the dependencies, building the configure script (./buildconf), configuring the build ./configure, and running make.
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.

Windows binaries

Non-Thread Safe Builds

Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.

php-8.2.32-x64NTS.zip

Size: 31.7 MiB SHA256: 44e561948d6e336ac91cba3e59f074b687e22d9ceb824056f28ed8dfbbfdbe35

php-8.2.32-x86NTS.zip

Size: 28.58 MiB SHA256: 9eca7dbb3de5ab43acdf810fade0cfd52bc8ad6603bd84d69616d7020f57f218

Thread-Safe Builds

Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.

php-8.2.32-x64TS.zip

Size: 31.8 MiB SHA256: b3985f246bc925fe5722769bb7402a68979a0b6487456691e24aa948ad2f38c5

php-8.2.32-x86TS.zip

Size: 28.55 MiB SHA256: 72c4689fca0eaed1bfc4a17e1d50afddd381e21fb2a136e6f89d6aa2a159d3f7

Docker/Podman Containers

PHP CLI

PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.

docker pull php:8.2.32-cli-alpine

Debian-based: More compatible with other components, complete, and are widely used.

docker pull php:8.2.32-cli

PHP CLI + Web Server Integration

These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.

docker pull php:8.2.32-fpm-alpine

Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.

docker pull php:8.2.32-apache

Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.

docker pull php:8.2.32-fpm

ChangeLog

OpenSSL

Fixed bug GH-22187 (Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD).

Commit List

David Carlier

ext/openssl: openssl_encrypt() zend mm heap overflow on AES-WRAP-PAD mode in cbc0489126

Ilija Tovilo

GHSA-85c2-q967-79q5: [soap] Fix stale SOAP_GLOBAL(ref_map) pointer with Apache Map in aee3b3ac9b
GHSA-m33r-qmcv-p97q: [soap] Fix use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION in db2a7f9348
GHSA-hmxp-6pc4-f3vv: [soap] Fix broken Apache map value NULL check in 79551ab8b1
GHSA-m8rr-4c36-8gq4: Consistently pass unsigned char to ctype.h functions in a38418777f

Jakub Zelenka

GHSA-7qg2-v9fj-4mwv: [fpm] XSS within status endpoint in 99a5ad7441

Jorg Sowa

ci: add 180-minute timeout to test-suite jobs in 98b86328b6

Saki Takamachi

GHSA-w476-322c-wpvm: [pdo_firebird] Fix SQL injection via NUL bytes in quoted strings in 3f40b65323

Sergey Panteleev

Update versions for PHP 8.2.32 in e68d36b614

Shivam Mathur

Make curl brotli and zstd optional on Windows in GH-21925
Switch to VS18 for the master branch in GH-22094

Tim Düsterhus

GHSA-96wq-48vp-hh57: [metaphone] Fix signed integer overflow of char array offset in 47def8ce1d

vi3tL0u1s

GHSA-wm6j-2649-pv75: [mbstring] Fix null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() in 79a054eae0