Release Information
- Release Type
- Security Update
- Release Status
- Latest
- Branch Status
- Security-Fixes Only
PHP 8.2 is currently only receiving security fixes, and scheduled to reach EOL on 2026-12-31
Downloads
Source Code
Git Clone
Use Git to clone the 8.2.33 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-8.2.33How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf), configuring the build ./configure, and running make.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-8.2.33-x64NTS.zip
Size: 31.9 MiB SHA256:
d0bd189522fa50255ee94ed4b340ed4330f5ae33a90a74205275b0f0b221d388 php-8.2.33-x86NTS.zip
Size: 28.78 MiB SHA256:
8732dac6084bcad5e8fc363efcd9bdc50afbfc469bc858eeee92da05bd21d8cc Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-8.2.33-x64TS.zip
Size: 32.01 MiB SHA256:
7d2568dfaad6ac1391e57994f52c8aed835baf9e6d89f4328770e2843311291c php-8.2.33-x86TS.zip
Size: 28.76 MiB SHA256:
329eb8d71b6d186e8b01d500a14021eb7d430e0fdd83f69802beefd31150bf18 ChangeLog
Date
- Fixed leak on double
DatePeriod::__construct()call.
GD
- Upgrade libgd. (CVE-2026-9672)
PGSQL
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via E'...' backslash breakout). (CVE-2026-17543)
Phar
- Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260)
Commit List
Arnaud Le Blanc
- CI: Enable JIT testing on Apple Silicon ZTS 8.6+ in fa47ae16a1
Ilia Alshanetsky
- Regenerate the expired ext/ftp/tests/cert.pem in GH-22873
Ilija Tovilo
- Fix leak on double
DatePeriod::__construct()call in 2d86f8cf48 - libgd patch for CVE-2026-9672 in fcd691b377
- Fix SQL injection in ext-pgsql via E'...' backslash breakout in ab048bd83b
- Add NEWS entries in f93c48725d
Jakub Zelenka
- Fix GHSA-vc5h-9ppw-p5f3: phar circular symlink crash in 2e0fa0a444
Sergey Panteleev
- Update versions for PHP 8.2.33 in 651db3ebfa