PHP 8.2.5 Release Announcement

The PHP development team announces the immediate availability of PHP 8.2.5. This is a bug fix release.

All PHP 8.2 users are encouraged to upgrade to this version.

For source downloads of PHP 8.2.5 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

Source Code

• PHP 8.2.5 (tar.gz)
  sha256: 8974dea2507155471660b13a0bcbdc165ac778eeb845a7dbd65d5ffb92738c0a
• PHP 8.2.5 (tar.bz2)
  sha256: e5a80663cca4f6044ad86a489798147c7af037eca96f6cd357ab36d28cb63757
• PHP 8.2.5 (tar.xz)
  sha256: 800738c359b7f1e67e40c22713d2d90276bc85ba1c21b43d99edd43c254c5f76

Change Log

• core
  • Added optional support for max_execution_time in ZTS/Linux builds
  • Fixed use-after-free in recursive AST evaluation.
  • Fixed bug GH-8646 (Memory leak PHP FPM 8.1).
  • Re-add some CTE functions that were removed from being CTE by a mistake.
  • Remove CTE flag from array_diff_ukey(), which was added by mistake.
  • Fixed bug GH-10801 (Named arguments in CTE functions cause a segfault).
  • Fixed bug GH-8789 (PHP 8.0.20 (ZTS) zend_signal_handler_defer crashes on apache).
  • Fixed bug GH-10015 (zend_signal_handler_defer crashes on apache shutdown).
  • Fixed bug GH-10810 (Fix NUL byte terminating Exception::__toString()).
  • Fix potential memory corruption when mixing __callStatic() and FFI.
• date
  • Fixed bug GH-10747 (Private and protected properties in serialized Date* objects throw).
• fpm
  • Fixed bug GH-10611 (fpm_env_init_main leaks environ).
  • Destroy file_handle in fpm_main.
  • Fixed bug #74129 (Incorrect SCRIPT_NAME with apache ProxyPassMatch when spaces are in path).
• ftp
  • Propagate success status of ftp_close().
  • Fixed bug GH-10521 (ftp_get/ftp_nb_get resumepos offset is maximum 10GB).
• imap
  • Fix build failure with Clang 16.
• mysqlnd
  • Fixed bug GH-8979 (Possible Memory Leak with SSL-enabled MySQL connections).
• opcache
  • Fixed build for macOS to cater with pkg-config settings.
  • Fixed bug GH-8065 (opcache.consistency_checks > 0 causes segfaults in PHP >= 8.1.5 in fpm context).
• openssl
  • Add missing error checks on file writing functions.
• pdo firebird
  • Fixed bug GH-10908 (Bus error with PDO Firebird on RPI with 64 bit kernel and 32 bit userland).
• phar
  • Fixed bug GH-10766 (PharData archive created with Phar::Zip format does not keep files metadata (datetime)).
  • Add missing error checks on EVP_MD_CTX_create() and EVP_VerifyInit().
• pdo odbc
  • Fixed missing and inconsistent error checks on SQLAllocHandle.
• pgsql
  • Fixed typo in the array returned from pg_meta_data (extended mode).
• spl
  • Fixed bug GH-10519 (Array Data Address Reference Issue).
  • Fixed bug GH-10907 (Unable to serialize processed SplFixedArrays in PHP 8.2.4).
  • Fixed bug GH-10844 (ArrayIterator allows modification of readonly props).
• standard
  • Fixed bug GH-10885 (stream_socket_server context leaks).
  • Fixed bug GH-10052 (Browscap crashes PHP 8.1.12 on request shutdown (apache2)).
  • Fixed oss-fuzz #57392 (Buffer-overflow in php_fgetcsv() with \0 delimiter and enclosure).
  • Fixed undefined behaviour in unpack().