PHP 8.2.14 Release Announcement

The PHP development team announces the immediate availability of PHP 8.2.14. This is a bug fix release.

All PHP 8.2 users are encouraged to upgrade to this version.

For source downloads of PHP 8.2.14 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code

• PHP 8.2.14 (tar.gz)
  sha256: 4c1fbb55a10ece7f4532feba9f3f88b9b211c11320742977588738374c03255f
• PHP 8.2.14 (tar.bz2)
  sha256: f871e131333d60ae6c537b1adddbc2aea54c436c562af986fb8309c060040b9e
• PHP 8.2.14 (tar.xz)
  sha256: 763ecd39fcf51c3815af6ef6e43fa9aa0d0bd8e5a615009e5f4780c92705f583

Change Log

• core
  • Fixed oss-fuzz #54325 (Use-after-free of name in var-var with malicious error handler).
  • Fixed oss-fuzz #64209 (In-place modification of filename in php_message_handler_for_zend).
  • Fixed bug GH-12758 / GH-12768 (Invalid opline in OOM handlers within ZEND_FUNC_GET_ARGS and ZEND_BIND_STATIC).
  • Fix various missing NULL checks.
  • Fixed bug GH-12835 (Leak of call->extra_named_params on internal __call).
• date
  • Fixed improbably integer overflow while parsing really large (or small) Unix timestamps.
• dom
  • Fixed bug GH-12616 (DOM: Removing XMLNS namespace node results in invalid default: prefix).
• fpm
  • Fixed bug GH-12705 (Segmentation fault in fpm_status_export_to_zval).
• ftp
  • Fixed bug GH-9348 (FTP & SSL session reuse).
• intl
  • Fixed bug GH-12635 (Test bug69398.phpt fails with ICU 74.1).
• libxml
  • Fixed bug GH-12702 (libxml2 2.12.0 issue building from src).
  • Fixed test failures for libxml2 2.12.0.
• mysqlnd
  • Avoid using uninitialised struct.
  • Fixed bug GH-12791 (Possible dereference of NULL in MySQLnd debug code).
• opcache
  • Fixed JIT bug (Function JIT emits "Uninitialized string offset" warning at the same time as invalid offset Error).
  • Fixed JIT bug (JIT emits "Attempt to assign property of non-object" warning at the same time as Error is being thrown).
• openssl
  • Fixed bug #50713 (openssl_pkcs7_verify() may ignore untrusted CAs).
• pcre
  • Fixed bug GH-12628 (The gh11374 test fails on Alpinelinux).
• pdo pgsql
  • Fixed the default value of $fetchMode in PDO::pgsqlGetNotify()
• pgsql
  • Fixed bug GH-12763 wrong argument type for pg_untrace.
• phpdbg
  • Fixed bug GH-12675 (MEMORY_LEAK in phpdbg_prompt.c).
• soap
  • Fixed bug GH-12838 ([SOAP] Temporary WSDL cache files not being deleted).
• spl
  • Fixed bug GH-12721 (SplFileInfo::getFilename() segfault in combination with GlobIterator and no directory separator).
• sqlite3
  • Fixed bug GH-12633 (sqlite3_defensive.phpt fails with sqlite 3.44.0).
• standard
  • Fix memory leak in syslog device handling.
  • Fixed bug GH-12621 (browscap segmentation fault when configured in the vhost).
  • Fixed bug GH-12655 (proc_open() does not take into account references in the descriptor array).
• streams
  • Fixed bug #79945 (Stream wrappers in imagecreatefrompng causes segfault).
• zip
  • Fixed bug GH-12661 (Inconsistency in ZipArchive::addGlob remove_path Option Behavior).