PHP Release 8.2.25

    PHP 8.2.25 Release Announcement

    The PHP development team announces the immediate availability of PHP 8.2.25. This is a bug fix release.

    All PHP 8.2 users are encouraged to upgrade to this version.

    For source downloads of PHP 8.2.25 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

    Source Code
    PHP 8.2.25 (tar.gz)
    SHA256: 7fe7ba6e3e66cd0e61cfa95341e6aefc8790030a7867333f54aef5fb78aad18b
    PHP 8.2.25 (tar.bz2)
    SHA256: 07b41c5e96c60c096510e45f02f818414d11bdd0d5da1b6840ddba2ba7289401
    PHP 8.2.25 (tar.xz)
    SHA256: 330b54876ea1d05ade12ee9726167332058bccd58dffa1d4e12117f6b4f616b9
    Change Logs
    calendar
    • Fixed GH-16240: jdtounix overflow on argument value.
    • Fixed GH-16241: easter_days/easter_date overflow on year argument.
    • Fixed GH-16263: jddayofweek overflow.
    • Fixed GH-16234: jewishtojd overflow.
    cli
    • Fixed bug GH-16137: duplicate http headers when set several times by the client.
    core
    • Fixed bug GH-15712: zend_strtod overflow with precision INI set on large value.
    • Fixed bug GH-15905 (Assertion failure for TRACK_VARS_SERVER).
    • Fixed bug GH-15907 (Failed assertion when promoting Serialize deprecation to exception).
    • Fixed bug GH-15851 (Segfault when printing backtrace during cleanup of nested generator frame).
    • Fixed bug GH-15866 (Core dumped in Zend/zend_generators.c).
    • Fixed bug GH-16188 (Assertion failure in Zend/zend_exceptions.c).
    • Fixed bug GH-16233 (Observer segfault when calling user function in internal function via trampoline).
    date
    • Fixed bug GH-15582: Crash when not calling parent constructor of DateTimeZone.
    • Fixed regression where signs after the first one were ignored while parsing a signed integer, with the DateTimeInterface::modify() function.
    dom
    • Fixed bug GH-16039 (Segmentation fault (access null pointer) in ext/dom/parentnode/tree.c).
    • Fixed bug GH-16151 (Assertion failure in ext/dom/parentnode/tree.c).
    gd
    • Fixed bug GH-16232 (bitshift overflow on wbmp file content reading / fix backport from upstream).
    • Fixed bug GH-12264 (overflow/underflow on imagerotate degrees value)
    • Fixed bug GH-16274 (imagescale underflow on RBG channels / fix backport from upstream).
    ldap
    • Fixed bug GH-16032 (Various NULL pointer dereferencements in ldap_modify_batch()).
    • Fixed bug GH-16101 (Segfault in ldap_list(), ldap_read(), and ldap_search() when LDAPs array is not a list).
    • Fix GH-16132 (php_ldap_do_modify() attempts to free pointer not allocated by ZMM.).
    • Fix GH-16136 (Memory leak in php_ldap_do_modify() when entry is not a proper dictionary).
    mbstring
    • Fixed bug GH-16261 (Reference invariant broken in mb_convert_variables()).
    openssl
    • Fixed stub for openssl_csr_new.
    pcre
    • Fixed bug GH-16189 (underflow on offset argument).
    • Fixed bug GH-16184 (UBSan address overflowed in ext/pcre/php_pcre.c).
    phpdbg
    • Fixed bug GH-15901 (phpdbg: Assertion failure on i funcs).
    • Fixed bug GH-16181 (phpdbg: exit in exception handler reports fatal error).
    reflection
    • Fixed bug GH-16187 (Assertion failure in ext/reflection/php_reflection.c).
    sapi
    • Fixed bug GH-15395 (php-fpm: zend_mm_heap corrupted with cgi-fcgi request).
    simplexml
    • Fixed bug GH-15837 (Segmentation fault in ext/simplexml/simplexml.c).
    sockets
    • Fixed bug GH-16267 (socket_strerror overflow on errno argument).
    soap
    • Fixed bug #62900 (Wrong namespace on xsd import error message).
    • Fixed bug GH-16237 (Segmentation fault when cloning SoapServer).
    • Fix Soap leaking http_msg on error.
    • Fixed bug GH-16256 (Assertion failure in ext/soap/php_encoding.c:460).
    • Fixed bug GH-16259 (Soap segfault when classmap instantiation fails).
    standard
    • Fixed bug GH-15613 (overflow on unpack call hex string repeater).
    • Fixed bug GH-15937 (overflow on stream timeout option value).
    • Fixed bug GH-16053 (Assertion failure in Zend/zend_hash.c).
    streams
    • Fixed bugs GH-15908 and GH-15026 (leak / assertion failure in streams.c).
    • Fixed bug GH-15980 (Signed integer overflow in main/streams/streams.c).
    tsrm
    • Prevent closing of unrelated handles.
    xml
    • Fixed bug GH-15868 (Assertion failure in xml_parse_into_struct after exception).
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top