Release Information
- Release Type
- Security Update
- Release Status
- Latest
- Branch Status
- Security-Fixes Only
PHP 8.2 is currently only receiving security fixes, and scheduled to reach EOL on 2026-12-31
Downloads
Source Code
Git Clone
Use Git to clone the 8.2.33 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-8.2.33How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf), configuring the build ./configure, and running make.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-8.2.33-x64NTS.zip
Size: 31.9 MiB SHA256:
d0bd189522fa50255ee94ed4b340ed4330f5ae33a90a74205275b0f0b221d388 php-8.2.33-x86NTS.zip
Size: 28.78 MiB SHA256:
8732dac6084bcad5e8fc363efcd9bdc50afbfc469bc858eeee92da05bd21d8cc Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-8.2.33-x64TS.zip
Size: 32.01 MiB SHA256:
7d2568dfaad6ac1391e57994f52c8aed835baf9e6d89f4328770e2843311291c php-8.2.33-x86TS.zip
Size: 28.76 MiB SHA256:
329eb8d71b6d186e8b01d500a14021eb7d430e0fdd83f69802beefd31150bf18 Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.2.33-cli-alpineDebian-based: More compatible with other components, complete, and are widely used.
docker pull php:8.2.33-cliPHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.2.33-fpm-alpineDebian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:8.2.33-apacheDebian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:8.2.33-fpmChangeLog
Date
- Fixed leak on double
DatePeriod::__construct()call.
GD
- Upgrade libgd. (CVE-2026-9672)
PGSQL
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via E'...' backslash breakout). (CVE-2026-17543)
Phar
- Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260)
Commit List
Arnaud Le Blanc
- CI: Enable JIT testing on Apple Silicon ZTS 8.6+ in fa47ae16a1
Ilia Alshanetsky
- Regenerate the expired ext/ftp/tests/cert.pem in GH-22873
Ilija Tovilo
- Fix leak on double
DatePeriod::__construct()call in 2d86f8cf48 - libgd patch for CVE-2026-9672 in fcd691b377
- Fix SQL injection in ext-pgsql via E'...' backslash breakout in ab048bd83b
- Add NEWS entries in f93c48725d
Jakub Zelenka
- Fix GHSA-vc5h-9ppw-p5f3: phar circular symlink crash in 2e0fa0a444
Sergey Panteleev
- Update versions for PHP 8.2.33 in 651db3ebfa