Release Information
- Release Type
- Security Update
- Release Status
- Latest
- Branch Status
- Security-Fixes Only
PHP 8.2 is currently only receiving security fixes, and scheduled to reach EOL on 2026-12-31
Downloads
Source Code
Git Clone
Use Git to clone the 8.2.35 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-8.2.35How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
./buildconf), configuring the build ./configure, and running make.Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.
Windows binaries
Non-Thread Safe Builds
Non-Thread Safe (NTS) builds are single-threaded PHP builds. They can be used on web servers that integrate PHP over FastCGI protocol, such as Nginx, Caddy, and IIS.
php-8.2.35-x64NTS.zip
Size: 32.14 MiB SHA256:
798ffa4b9ce22a820d57048e9695df7245bf917ed067917f256942a10918a8cc php-8.2.35-x86NTS.zip
Size: 29.02 MiB SHA256:
e2a7ade3ad1efee8c673efae95a5c4ad056077a6febd8a4b695eb02b0673a88f Thread-Safe Builds
Thread-Safe (TS) builds are multi-thread PHP builds, often used to integrate PHP as a Server API for multithreaded servers. The most common use case is using PHP as an Apache module.
php-8.2.35-x64TS.zip
Size: 32.25 MiB SHA256:
cfa6000be835931961e40740bd3b51111700061d6655ddbfe5a2125807947457 php-8.2.35-x86TS.zip
Size: 28.98 MiB SHA256:
fdb6676a301e4ee1096d5c0ef969c8345e59e37d0ec5a68ed709d54c42054c80 Docker/Podman Containers
PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.2.35-cli-alpineDebian-based: More compatible with other components, complete, and are widely used.
docker pull php:8.2.35-cliPHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.
Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.2.35-fpm-alpineDebian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:8.2.35-apacheDebian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:8.2.35-fpmChangeLog
Core
- Fixed GHSA-w8hw-w9fx-j79w, GHSA-6wmf-4rv5-p3rp (Avoid state corruption via bailout). (CVE-2026-109618, CVE-2026-109619)
Commit List
Alexandre Daubois
- Backport PCRE2 security fixes to bundled 10.40 in 1e8a51d545
Arnaud Le Blanc
- Avoid state corruption via bailout in 01a40e89fb
Ilija Tovilo
- Add NEWS entry in afd617c801
Marc
- fix windows ci: w11 no longer treats names like NUL.txt as reserved in GH-23844
Sergey Panteleev
- Update versions for PHP 8.2.35 in 09a9f29a04
Shivam Mathur
- Update PHP SDK to 2.8.4 in GH-23858
- Upgrade macos in CI. in GH-24032
- Preserve bare NUL access with
open_basediron Windows in GH-24158 ext/gd: Drop useless and doubtful MSVC specific code (libgd/libgd@f1480ab) in GH-24316- Use the default archive names for Windows ARM64 builds in GH-24313
- Fix v142 ARM64 hash and floating point results in GH-24317
- Fix macOS CI in GH-24409
Sjoerd Langkemper
- Use FreeBSD 14.4 in GitHub actions in 810f0c6a81