Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.2 » 8.2.33 »

PHP 8.2.5

The latest release of PHP 8.2 is 8.2.33 which includes important security patches.

Source Code

  • PHP 8.2.5 (tar.gz)

    • sha256: 8974dea2507155471660b13a0bcbdc165ac778eeb845a7dbd65d5ffb92738c0a

  • PHP 8.2.5 (tar.bz2)

    • sha256: e5a80663cca4f6044ad86a489798147c7af037eca96f6cd357ab36d28cb63757

  • PHP 8.2.5 (tar.xz)

    • sha256: 800738c359b7f1e67e40c22713d2d90276bc85ba1c21b43d99edd43c254c5f76

Change Log

  • core

    • Added optional support for max_execution_time in ZTS/Linux builds (Kévin Dunglas)
    • Fixed use-after-free in recursive AST evaluation.
      ilutov
    • Fixed bug GH-8646 (Memory leak PHP FPM 8.1).
      nielsdos
    • Re-add some CTE functions that were removed from being CTE by a mistake.
      mvorisek
    • Remove CTE flag from array_diff_ukey(), which was added by mistake.
      mvorisek
    • Fixed bug GH-10801 (Named arguments in CTE functions cause a segfault).
      nielsdos
    • Fixed bug GH-8789 (PHP 8.0.20 (ZTS) zend_signal_handler_defer crashes on apache).
      nielsdos
    • Fixed bug GH-10015 (zend_signal_handler_defer crashes on apache shutdown).
      nielsdos
    • Fixed bug GH-10810 (Fix NUL byte terminating Exception::__toString()).
      ilutov
    • Fix potential memory corruption when mixing __callStatic() and FFI.
      ilutov

  • date

    • Fixed bug GH-10747 (Private and protected properties in serialized Date* objects throw).
      Derick

  • fpm

    • Fixed bug GH-10611 (fpm_env_init_main leaks environ).
      nielsdos
    • Destroy file_handle in fpm_main.
      Jakub Zelenka
      nielsdos
    • Fixed bug #74129 (Incorrect SCRIPT_NAME with apache ProxyPassMatch when spaces are in path).
      Jakub Zelenka

  • ftp

    • Propagate success status of ftp_close().
      nielsdos
    • Fixed bug GH-10521 (ftp_get/ftp_nb_get resumepos offset is maximum 10GB).
      nielsdos

  • imap

    • Fix build failure with Clang 16.
      orlitzky

  • mysqlnd

    • Fixed bug GH-8979 (Possible Memory Leak with SSL-enabled MySQL connections).
      nielsdos

  • opcache

    • Fixed build for macOS to cater with pkg-config settings.
      David Carlier
    • Fixed bug GH-8065 (opcache.consistency_checks > 0 causes segfaults in PHP >= 8.1.5 in fpm context).
      nielsdos

  • openssl

    • Add missing error checks on file writing functions.
      nielsdos

  • pdo firebird

    • Fixed bug GH-10908 (Bus error with PDO Firebird on RPI with 64 bit kernel and 32 bit userland).
      nielsdos

  • phar

    • Fixed bug GH-10766 (PharData archive created with Phar::Zip format does not keep files metadata (datetime)).
      nielsdos
    • Add missing error checks on EVP_MD_CTX_create() and EVP_VerifyInit().
      nielsdos

  • pdo odbc

    • Fixed missing and inconsistent error checks on SQLAllocHandle.
      nielsdos

  • pgsql

    • Fixed typo in the array returned from pg_meta_data (extended mode).
      David Carlier

  • spl

    • Fixed bug GH-10519 (Array Data Address Reference Issue).
      Nathan Freeman
    • Fixed bug GH-10907 (Unable to serialize processed SplFixedArrays in PHP 8.2.4).
      nielsdos
    • Fixed bug GH-10844 (ArrayIterator allows modification of readonly props).
      ilutov

  • standard

    • Fixed bug GH-10885 (stream_socket_server context leaks).
      ilutov
    • Fixed bug GH-10052 (Browscap crashes PHP 8.1.12 on request shutdown (apache2)).
      nielsdos
    • Fixed oss-fuzz #57392 (Buffer-overflow in php_fgetcsv() with \0 delimiter and enclosure).
      ilutov
    • Fixed undefined behaviour in unpack().
      nielsdos

PHP 8.2


  Represents a security release