PHP SBOM
A software bill of materials for six common PHP 8.5 builds. For each one: who builds it, the code bundled in php-src, the OS packages the binary and its extensions load, and who ships the fix for each.
Built from the php.net source on Debian 13 and installed to /usr/local. It uses the copies bundled in php-src. Debian packages provide the libraries under it, so apt updates those, while PHP itself changes only with a new image. Dockerfile · PHP 8.5.12 changelog
- Built by
- Docker Official Images. The docker-library team maintains the Dockerfiles; Docker builds them.
- Distributed
- Docker Hub, tag php:8.5-cli (also 8.5.12-cli-trixie), one image for each of 8 architectures. Pull a new image to update.
docker pull php:8.5-cliCycloneDX 1.6 (amd64)
amd64 and arm64 are the same apart from libgcc-s1, loaded only on amd64. The graph and SBOM show amd64.
Dependency graph
Every extension in the middle. On the left, code compiled from php-src: a fix arrives only with a new PHP release and a rebuilt image. On the right, OS packages: a fix arrives with a package update. Hover or tap a box for details.
- Internal: maintained in php-src
- Bundled: upstream copy in php-src
- Patched: bundled with local changes
- Extension, compiled in
- Extension, shared .so
- External: OS package
- *can be swapped for a system library at build time
- †upstream archived
Extension, compiled into the php binary.
- Uses
- Time zone database, timelib
Extension, compiled into the php binary.
- Uses
- Lexbor
Extension, compiled into the php binary.
- Uses
- OpenSSL
Extension, compiled into the php binary.
- Uses
- PCRE2
Extension, compiled into the php binary.
- Uses
- SQLite
Extension, compiled into the php binary.
- Uses
- zlib
Extension, compiled into the php binary.
- Uses
- curl
Extension, compiled into the php binary.
- Uses
- Lexbor, uriparser
Extension, compiled into the php binary.
- Uses
- libmagic
Extension, compiled into the php binary.
- Uses
- Keccak (SHA-3), xxHash
Extension, compiled into the php binary.
- Uses
- libmbfl, oniguruma
Extension, compiled into the php binary.
- Uses
- IR JIT framework
Extension, compiled into the php binary.
- Uses
- Argon2, crypt_blowfish
Extension, compiled into the php binary.
- Uses
- SQLite
Extension, compiled into the php binary.
- Uses
- readline
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, compiled into the php binary.
- Uses
- Lexbor, libxml2
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libsodium
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
Can be swapped for a system library at build time.
- Used by
- pcre
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
- Used by
- date
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
- Used by
- date
Upstream code copied into php-src with local changes. Fixed by a new PHP release and a rebuilt image.
- Used by
- dom, lexbor, uri
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
Can be swapped for a system library at build time.
- Used by
- uri
Upstream code copied into php-src with local changes. Fixed by a new PHP release and a rebuilt image.
Carries a local PHP patch
- Used by
- fileinfo
Maintained inside php-src. Fixed by a new PHP release and a rebuilt image.
- Used by
- mbstring
Maintained inside php-src. Fixed by a new PHP release and a rebuilt image.
- Used by
- Zend OPcache
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
- Used by
- hash
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
- Used by
- hash
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
Can be swapped for a system library at build time.
- Used by
- standard
OS package. Fixed by a package update, without a new PHP version.
- Packages
libreadline8t64 8.2-6
- Files
libreadline.so.8
- Used by
- readline
OS package. Fixed by a package update, without a new PHP version.
- Packages
libxml2 2.12.7+dfsg+really2.9.14-2.1+deb13u3
- Files
libxml2.so.2
- Used by
- dom, libxml, SimpleXML, xml, xmlreader, xmlwriter
OS package. Fixed by a package update, without a new PHP version.
- Packages
libssl3t64 3.5.7-1~deb13u3
- Files
libcrypto.so.3libssl.so.3
- Used by
- openssl
OS package. Fixed by a package update, without a new PHP version.
- Packages
libsqlite3-0 3.46.1-7+deb13u2
- Files
libsqlite3.so.0
- Used by
- pdo_sqlite, sqlite3
OS package. Fixed by a package update, without a new PHP version.
- Packages
zlib1g 1:1.3.dfsg+really1.3.1-1+b1
- Files
libz.so.1
- Used by
- zlib
OS package. Fixed by a package update, without a new PHP version.
- Packages
libcurl4t64 8.14.1-2+deb13u7
- Files
libcurl.so.4
- Used by
- curl
OS package. Fixed by a package update, without a new PHP version.
Upstream archived on 24 April 2025
- Packages
libonig5 6.9.9-1+b1
- Files
libonig.so.5
- Used by
- mbstring
OS package. Fixed by a package update, without a new PHP version.
- Packages
libargon2-1 0~20190702+dfsg-4+b2
- Files
libargon2.so.1
- Used by
- standard
OS package. Fixed by a package update, without a new PHP version.
- Packages
libsodium23 1.0.18-1+deb13u1
- Files
libsodium.so.23
- Used by
- sodium
Self-contained extensions (14) Core, ctype, filter, iconv, json, mysqlnd, PDO, Phar, posix, random, Reflection, session, SPL, tokenizer
The same build recipe as the Debian image, on Alpine 3.24 with musl libc. It uses the copies bundled in php-src. Dockerfile · PHP 8.5.12 changelog
- Built by
- Docker Official Images. The docker-library team maintains the Dockerfiles; Docker builds them.
- Distributed
- Docker Hub, tag php:8.5-cli-alpine (also 8.5.12-cli-alpine3.24), one image for each of 8 architectures. Pull a new image to update.
docker pull php:8.5-cli-alpineCycloneDX 1.6 (amd64)
amd64 and arm64 are the same apart from libgcc, loaded only on amd64. The graph and SBOM show amd64.
Dependency graph
Every extension in the middle. On the left, code compiled from php-src: a fix arrives only with a new PHP release and a rebuilt image. On the right, OS packages: a fix arrives with a package update. Hover or tap a box for details.
- Internal: maintained in php-src
- Bundled: upstream copy in php-src
- Patched: bundled with local changes
- Extension, compiled in
- Extension, shared .so
- External: OS package
- *can be swapped for a system library at build time
- †upstream archived
Extension, compiled into the php binary.
- Uses
- Time zone database, timelib
Extension, compiled into the php binary.
- Uses
- Lexbor
Extension, compiled into the php binary.
- Uses
- OpenSSL
Extension, compiled into the php binary.
- Uses
- PCRE2
Extension, compiled into the php binary.
- Uses
- SQLite
Extension, compiled into the php binary.
- Uses
- zlib
Extension, compiled into the php binary.
- Uses
- curl
Extension, compiled into the php binary.
- Uses
- Lexbor, uriparser
Extension, compiled into the php binary.
- Uses
- libmagic
Extension, compiled into the php binary.
- Uses
- Keccak (SHA-3), xxHash
Extension, compiled into the php binary.
- Uses
- GNU libiconv
Extension, compiled into the php binary.
- Uses
- libmbfl, oniguruma
Extension, compiled into the php binary.
- Uses
- IR JIT framework
Extension, compiled into the php binary.
- Uses
- Argon2, crypt_blowfish
Extension, compiled into the php binary.
- Uses
- SQLite
Extension, compiled into the php binary.
- Uses
- readline
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, compiled into the php binary.
- Uses
- Lexbor, libxml2
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libsodium
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
Can be swapped for a system library at build time.
- Used by
- pcre
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
- Used by
- date
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
- Used by
- date
Upstream code copied into php-src with local changes. Fixed by a new PHP release and a rebuilt image.
- Used by
- dom, lexbor, uri
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
Can be swapped for a system library at build time.
- Used by
- uri
Upstream code copied into php-src with local changes. Fixed by a new PHP release and a rebuilt image.
Carries a local PHP patch
- Used by
- fileinfo
Maintained inside php-src. Fixed by a new PHP release and a rebuilt image.
- Used by
- mbstring
Maintained inside php-src. Fixed by a new PHP release and a rebuilt image.
- Used by
- Zend OPcache
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
- Used by
- hash
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
- Used by
- hash
Upstream code copied into php-src. Fixed by a new PHP release and a rebuilt image.
Can be swapped for a system library at build time.
- Used by
- standard
OS package. Fixed by a package update, without a new PHP version.
- Packages
readline 8.3.3-r1
- Files
libreadline.so.8
- Used by
- readline
OS package. Fixed by a package update, without a new PHP version.
- Packages
gnu-libiconv-libs 1.18-r0
- Files
libiconv.so.2
- Used by
- iconv
OS package. Fixed by a package update, without a new PHP version.
- Packages
libxml2 2.13.9-r2
- Files
libxml2.so.2
- Used by
- dom, libxml, SimpleXML, xml, xmlreader, xmlwriter
OS package. Fixed by a package update, without a new PHP version.
- Packages
libssl3 3.5.9-r0libcrypto3 3.5.9-r0
- Files
libssl.so.3libcrypto.so.3
- Used by
- openssl
OS package. Fixed by a package update, without a new PHP version.
- Packages
sqlite-libs 3.53.4-r0
- Files
libsqlite3.so.0
- Used by
- pdo_sqlite, sqlite3
OS package. Fixed by a package update, without a new PHP version.
- Packages
zlib 1.3.2-r1
- Files
libz.so.1
- Used by
- zlib
OS package. Fixed by a package update, without a new PHP version.
- Packages
libcurl 8.22.0-r0
- Files
libcurl.so.4
- Used by
- curl
OS package. Fixed by a package update, without a new PHP version.
Upstream archived on 24 April 2025
- Packages
oniguruma 6.9.10-r0
- Files
libonig.so.5
- Used by
- mbstring
OS package. Fixed by a package update, without a new PHP version.
- Packages
argon2-libs 20190702-r5
- Files
libargon2.so.1
- Used by
- standard
OS package. Fixed by a package update, without a new PHP version.
- Packages
libsodium 1.0.22-r0
- Files
libsodium.so.26
- Used by
- sodium
Self-contained extensions (13) Core, ctype, filter, json, mysqlnd, PDO, Phar, posix, random, Reflection, session, SPL, tokenizer
Debian 13 itself ships PHP 8.4; this third-party repository is the common way to get 8.5 on it. It uses the system PCRE2, libgd and time zone database instead of the copies bundled in php-src. Repository · PHP 8.5.12 changelog
- Built by
- Ondřej Surý, who also maintains PHP in Debian itself. The packaging matches Debian's.
- Distributed
- packages.sury.org through apt, signed with his own key. You trust that key, not Debian.
# after adding packages.sury.org, see the repository link above
apt install php8.5-{cli,curl,mbstring,xml,intl,gd,zip,mysql,pgsql,sqlite3,bcmath,readline}CycloneDX 1.6 (amd64)
amd64 and arm64 load the same packages at the same versions.
Dependency graph
Every extension in the middle. On the left, code compiled from php-src: a fix arrives with a new php8.5-cli package, from a new PHP release or a backport. On the right, OS packages: a fix arrives with that package's update. Hover or tap a box for details.
- Internal: maintained in php-src
- Bundled: upstream copy in php-src
- Patched: bundled with local changes
- Extension, compiled in
- Extension, shared .so
- External: OS package
- *can be swapped for a system library at build time
- †upstream archived
Extension, compiled into the php binary.
- Uses
- timelib
Extension, compiled into the php binary.
- Uses
- Lexbor
Extension, compiled into the php binary.
- Uses
- OpenSSL
Extension, compiled into the php binary.
- Uses
- PCRE2
Extension, compiled into the php binary.
- Uses
- zlib
Extension, compiled into the php binary.
- Uses
- Keccak (SHA-3), xxHash
Extension, compiled into the php binary.
- Uses
- Lexbor, uriparser
Extension, compiled into the php binary.
- Uses
- IR JIT framework
Extension, compiled into the php binary.
- Uses
- Argon2, crypt_blowfish
Extension, compiled into the php binary.
- Uses
- libsodium
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- OpenSSL, zlib
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libbcmath
Extension, loaded as a shared .so.
- Uses
- curl
Extension, loaded as a shared .so.
- Uses
- Lexbor, libxml2
Extension, loaded as a shared .so.
- Uses
- libmbfl, oniguruma
Extension, loaded as a shared .so.
- Uses
- libffi
Extension, loaded as a shared .so.
- Uses
- libmagic
Extension, loaded as a shared .so.
- Uses
- OpenSSL
Extension, loaded as a shared .so.
- Uses
- libgd
Extension, loaded as a shared .so.
- Uses
- ICU
Extension, loaded as a shared .so.
- Uses
- libpq (PostgreSQL)
Extension, loaded as a shared .so.
- Uses
- SQLite
Extension, loaded as a shared .so.
- Uses
- libpq (PostgreSQL)
Extension, loaded as a shared .so.
- Uses
- libedit
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- SQLite
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libxml2, libxslt
Extension, loaded as a shared .so.
- Uses
- libzip
Upstream code copied into php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- date
Upstream code copied into php-src with local changes. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- dom, lexbor, uri
Upstream code copied into php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
Can be swapped for a system library at build time.
- Used by
- uri
Upstream code copied into php-src with local changes. Fixed by a new php8.5-cli package: a PHP release or a backport.
Carries a local PHP patch
- Used by
- fileinfo
Maintained inside php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- mbstring
Maintained inside php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- bcmath
Maintained inside php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- Zend OPcache
Upstream code copied into php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- hash
Upstream code copied into php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- hash
Upstream code copied into php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
Can be swapped for a system library at build time.
- Used by
- standard
OS package. Fixed by a package update, without a new PHP version.
- Packages
libxml2 2.12.7+dfsg+really2.9.14-2.1+deb13u3
- Files
libxml2.so.2
- Used by
- dom, libxml, SimpleXML, xml, xmlreader, xmlwriter, xsl
OS package. Fixed by a package update, without a new PHP version.
- Packages
libssl3t64 3.5.7-1~deb13u3
- Files
libcrypto.so.3libssl.so.3
- Used by
- ftp, mysqlnd, openssl
OS package. Fixed by a package update, without a new PHP version.
- Packages
libpcre2-8-0 10.46-1~deb13u3
- Files
libpcre2-8.so.0
- Used by
- pcre
OS package. Fixed by a package update, without a new PHP version.
- Packages
zlib1g 1:1.3.dfsg+really1.3.1-1+b1
- Files
libz.so.1
- Used by
- mysqlnd, zlib
OS package. Fixed by a package update, without a new PHP version.
- Packages
libsodium23 1.0.18-1+deb13u1
- Files
libsodium.so.23
- Used by
- sodium
OS package. Fixed by a package update, without a new PHP version.
- Packages
libargon2-1 0~20190702+dfsg-4+b2
- Files
libargon2.so.1
- Used by
- standard
OS package. Fixed by a package update, without a new PHP version.
- Packages
libcurl4t64 8.14.1-2+deb13u7
- Files
libcurl.so.4
- Used by
- curl
OS package. Fixed by a package update, without a new PHP version.
Upstream archived on 24 April 2025
- Packages
libonig5 6.9.9-1+b1
- Files
libonig.so.5
- Used by
- mbstring
OS package. Fixed by a package update, without a new PHP version.
- Packages
libffi8 3.4.8-2
- Files
libffi.so.8
- Used by
- FFI
OS package. Fixed by a package update, without a new PHP version.
- Packages
libgd3 2.3.3-14+0~20260731.21+debian13~1.gbp938f32
- Files
libgd.so.3
- Used by
- gd
OS package. Fixed by a package update, without a new PHP version.
- Packages
libicu76 76.1-4
- Files
libicui18n.so.76libicuio.so.76libicuuc.so.76libicudata.so.76
- Used by
- intl
OS package. Fixed by a package update, without a new PHP version.
- Packages
libpq5 17.11-0+deb13u1
- Files
libpq.so.5
- Used by
- pdo_pgsql, pgsql
OS package. Fixed by a package update, without a new PHP version.
- Packages
libsqlite3-0 3.46.1-7+deb13u2
- Files
libsqlite3.so.0
- Used by
- pdo_sqlite, sqlite3
OS package. Fixed by a package update, without a new PHP version.
- Packages
libedit2 3.1-20250104-1
- Files
libedit.so.2
- Used by
- readline
OS package. Fixed by a package update, without a new PHP version.
- Packages
libxslt1.1 1.1.35-1.2+deb13u3
- Files
libexslt.so.0libxslt.so.1
- Used by
- xsl
OS package. Fixed by a package update, without a new PHP version.
- Packages
libzip5 1.11.3-2
- Files
libzip.so.5
- Used by
- zip
Self-contained extensions (24) calendar, Core, ctype, exif, filter, gettext, iconv, json, mysqli, pcntl, PDO, pdo_mysql, Phar, posix, random, Reflection, session, shmop, sockets, SPL, sysvmsg, sysvsem, sysvshm, tokenizer
Ubuntu 26.04 stays on PHP 8.5.4 and backports security fixes into it, so the package revision tells you more than the PHP version. It uses the system PCRE2, libgd and time zone database instead of the copies bundled in php-src. Package history · PHP 8.5.4 changelog
- Built by
- Canonical, from Debian's packaging, compiled on Launchpad.
- Distributed
- The Ubuntu archive through apt, component main, in resolute-security and resolute-updates.
apt install php8.5-{cli,curl,mbstring,xml,intl,gd,zip,mysql,pgsql,sqlite3,bcmath,readline}CycloneDX 1.6 (amd64)
amd64 and arm64 load the same packages at the same versions.
Dependency graph
Every extension in the middle. On the left, code compiled from php-src: a fix arrives with a new php8.5-cli package, from a new PHP release or a backport. On the right, OS packages: a fix arrives with that package's update. Hover or tap a box for details.
- Internal: maintained in php-src
- Bundled: upstream copy in php-src
- Patched: bundled with local changes
- Extension, compiled in
- Extension, shared .so
- External: OS package
- *can be swapped for a system library at build time
- †upstream archived
Extension, compiled into the php binary.
- Uses
- timelib
Extension, compiled into the php binary.
- Uses
- Lexbor
Extension, compiled into the php binary.
- Uses
- OpenSSL
Extension, compiled into the php binary.
- Uses
- PCRE2
Extension, compiled into the php binary.
- Uses
- zlib
Extension, compiled into the php binary.
- Uses
- Keccak (SHA-3), xxHash
Extension, compiled into the php binary.
- Uses
- Lexbor, uriparser
Extension, compiled into the php binary.
- Uses
- IR JIT framework
Extension, compiled into the php binary.
- Uses
- Argon2, crypt_blowfish
Extension, compiled into the php binary.
- Uses
- libsodium
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- OpenSSL, zlib
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libbcmath
Extension, loaded as a shared .so.
- Uses
- curl
Extension, loaded as a shared .so.
- Uses
- Lexbor, libxml2
Extension, loaded as a shared .so.
- Uses
- libmbfl, oniguruma
Extension, loaded as a shared .so.
- Uses
- libffi
Extension, loaded as a shared .so.
- Uses
- libmagic
Extension, loaded as a shared .so.
- Uses
- OpenSSL
Extension, loaded as a shared .so.
- Uses
- libgd
Extension, loaded as a shared .so.
- Uses
- ICU
Extension, loaded as a shared .so.
- Uses
- libpq (PostgreSQL)
Extension, loaded as a shared .so.
- Uses
- SQLite
Extension, loaded as a shared .so.
- Uses
- libpq (PostgreSQL)
Extension, loaded as a shared .so.
- Uses
- libedit
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- SQLite
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libxml2, libxslt
Extension, loaded as a shared .so.
- Uses
- libzip
Upstream code copied into php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- date
Upstream code copied into php-src with local changes. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- dom, lexbor, uri
Upstream code copied into php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
Can be swapped for a system library at build time.
- Used by
- uri
Upstream code copied into php-src with local changes. Fixed by a new php8.5-cli package: a PHP release or a backport.
Carries a local PHP patch
- Used by
- fileinfo
Maintained inside php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- mbstring
Maintained inside php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- bcmath
Maintained inside php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- Zend OPcache
Upstream code copied into php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- hash
Upstream code copied into php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
- Used by
- hash
Upstream code copied into php-src. Fixed by a new php8.5-cli package: a PHP release or a backport.
Can be swapped for a system library at build time.
- Used by
- standard
OS package. Fixed by a package update, without a new PHP version.
- Packages
libxml2-16 2.15.2+dfsg-0.1ubuntu0.3
- Files
libxml2.so.16
- Used by
- dom, libxml, SimpleXML, xml, xmlreader, xmlwriter, xsl
OS package. Fixed by a package update, without a new PHP version.
- Packages
libssl3t64 3.5.5-1ubuntu3.7
- Files
libcrypto.so.3libssl.so.3
- Used by
- ftp, mysqlnd, openssl
OS package. Fixed by a package update, without a new PHP version.
- Packages
libpcre2-8-0 10.46-1build1
- Files
libpcre2-8.so.0
- Used by
- pcre
OS package. Fixed by a package update, without a new PHP version.
- Packages
zlib1g 1:1.3.dfsg+really1.3.1-1ubuntu3.2
- Files
libz.so.1
- Used by
- mysqlnd, zlib
OS package. Fixed by a package update, without a new PHP version.
- Packages
libsodium23 1.0.18-2
- Files
libsodium.so.23
- Used by
- sodium
OS package. Fixed by a package update, without a new PHP version.
- Packages
libargon2-1 0~20190702+dfsg-5
- Files
libargon2.so.1
- Used by
- standard
OS package. Fixed by a package update, without a new PHP version.
- Packages
libcurl4t64 8.18.0-1ubuntu2.8
- Files
libcurl.so.4
- Used by
- curl
OS package. Fixed by a package update, without a new PHP version.
Upstream archived on 24 April 2025
- Packages
libonig5 6.9.10-1build1
- Files
libonig.so.5
- Used by
- mbstring
OS package. Fixed by a package update, without a new PHP version.
- Packages
libffi8 3.5.2-4
- Files
libffi.so.8
- Used by
- FFI
OS package. Fixed by a package update, without a new PHP version.
- Packages
libgd3 2.3.3-13ubuntu2
- Files
libgd.so.3
- Used by
- gd
OS package. Fixed by a package update, without a new PHP version.
- Packages
libicu78 78.2-2ubuntu1
- Files
libicui18n.so.78libicuio.so.78libicuuc.so.78libicudata.so.78
- Used by
- intl
OS package. Fixed by a package update, without a new PHP version.
- Packages
libpq5 18.6-0ubuntu0.26.04.1
- Files
libpq.so.5
- Used by
- pdo_pgsql, pgsql
OS package. Fixed by a package update, without a new PHP version.
- Packages
libsqlite3-0 3.46.1-9ubuntu0.3
- Files
libsqlite3.so.0
- Used by
- pdo_sqlite, sqlite3
OS package. Fixed by a package update, without a new PHP version.
- Packages
libedit2 3.1-20251016-1
- Files
libedit.so.2
- Used by
- readline
OS package. Fixed by a package update, without a new PHP version.
- Packages
libxslt1.1 1.1.45-0.1
- Files
libexslt.so.0libxslt.so.1
- Used by
- xsl
OS package. Fixed by a package update, without a new PHP version.
- Packages
libzip5 1.11.4-2
- Files
libzip.so.5
- Used by
- zip
Self-contained extensions (24) calendar, Core, ctype, exif, filter, gettext, iconv, json, mysqli, pcntl, PDO, pdo_mysql, Phar, posix, random, Reflection, session, shmop, sockets, SPL, sysvmsg, sysvsem, sysvshm, tokenizer
Alpine's php85 packages, built against musl libc. It uses the system PCRE2 instead of the copy bundled in php-src. Package page · PHP 8.5.12 changelog
- Built by
- Alpine Linux, from the php85 recipe in aports, compiled on Alpine's build servers.
- Distributed
- Alpine mirrors through apk, from the community repository.
apk add php85 $(printf 'php85-%s ' curl mbstring xml dom simplexml xmlreader xmlwriter intl gd zip mysqli pdo pdo_mysql pgsql pdo_pgsql pdo_sqlite sqlite3 bcmath ctype fileinfo tokenizer session iconv openssl phar sodium)CycloneDX 1.6 (amd64)
amd64 and arm64 load the same packages at the same versions.
Dependency graph
Every extension in the middle. On the left, code compiled from php-src: a fix arrives with a new php85 package, from a new PHP release or a backport. On the right, OS packages: a fix arrives with that package's update. Hover or tap a box for details.
- Internal: maintained in php-src
- Bundled: upstream copy in php-src
- Patched: bundled with local changes
- Extension, compiled in
- Extension, shared .so
- External: OS package
- *can be swapped for a system library at build time
- †upstream archived
Extension, compiled into the php binary.
- Uses
- Time zone database, timelib
Extension, compiled into the php binary.
- Uses
- Lexbor
Extension, compiled into the php binary.
- Uses
- PCRE2
Extension, compiled into the php binary.
- Uses
- zlib
Extension, compiled into the php binary.
- Uses
- Keccak (SHA-3), xxHash
Extension, compiled into the php binary.
- Uses
- Lexbor, uriparser
Extension, compiled into the php binary.
- Uses
- IR JIT framework
Extension, compiled into the php binary.
- Uses
- libedit
Extension, compiled into the php binary.
- Uses
- Argon2, crypt_blowfish
Extension, loaded as a shared .so.
- Uses
- libbcmath
Extension, loaded as a shared .so.
- Uses
- curl
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libmagic
Extension, loaded as a shared .so.
- Uses
- FreeType, libavif, libgd (fork), libjpeg-turbo, libpng, libwebp, libXpm, zlib
Extension, loaded as a shared .so.
- Uses
- ICU
Extension, loaded as a shared .so.
- Uses
- libmbfl, oniguruma
Extension, loaded as a shared .so.
- Uses
- OpenSSL
Extension, loaded as a shared .so.
- Uses
- libpq (PostgreSQL)
Extension, loaded as a shared .so.
- Uses
- Lexbor, libxml2
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libsodium
Extension, loaded as a shared .so.
- Uses
- SQLite
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libzip
Extension, loaded as a shared .so.
- Uses
- OpenSSL, zlib
Extension, loaded as a shared .so.
- Uses
- libpq (PostgreSQL)
Extension, loaded as a shared .so.
- Uses
- SQLite
Extension, loaded as a shared .so.
- Uses
- libxml2
Upstream code copied into php-src. Fixed by a new php85 package: a PHP release or a backport.
- Used by
- date
Upstream code copied into php-src. Fixed by a new php85 package: a PHP release or a backport.
- Used by
- date
Upstream code copied into php-src with local changes. Fixed by a new php85 package: a PHP release or a backport.
- Used by
- dom, lexbor, uri
Upstream code copied into php-src. Fixed by a new php85 package: a PHP release or a backport.
Can be swapped for a system library at build time.
- Used by
- uri
Upstream code copied into php-src with local changes. Fixed by a new php85 package: a PHP release or a backport.
Carries a local PHP patch
- Used by
- fileinfo
Maintained inside php-src. Fixed by a new php85 package: a PHP release or a backport.
- Used by
- mbstring
Upstream code copied into php-src with local changes. Fixed by a new php85 package: a PHP release or a backport.
Can be swapped for a system library at build time.
Diverged from upstream
- Used by
- gd
Maintained inside php-src. Fixed by a new php85 package: a PHP release or a backport.
- Used by
- bcmath
Maintained inside php-src. Fixed by a new php85 package: a PHP release or a backport.
- Used by
- Zend OPcache
Upstream code copied into php-src. Fixed by a new php85 package: a PHP release or a backport.
- Used by
- hash
Upstream code copied into php-src. Fixed by a new php85 package: a PHP release or a backport.
- Used by
- hash
Upstream code copied into php-src. Fixed by a new php85 package: a PHP release or a backport.
Can be swapped for a system library at build time.
- Used by
- standard
OS package. Fixed by a package update, without a new PHP version.
- Packages
libxml2 2.13.9-r2
- Files
libxml2.so.2
- Used by
- dom, libxml, SimpleXML, xml, xmlreader, xmlwriter
OS package. Fixed by a package update, without a new PHP version.
- Packages
pcre2 10.49-r0
- Files
libpcre2-8.so.0
- Used by
- pcre
OS package. Fixed by a package update, without a new PHP version.
- Packages
zlib 1.3.2-r1
- Files
libz.so.1
- Used by
- gd, mysqlnd, zlib
OS package. Fixed by a package update, without a new PHP version.
- Packages
libedit 20260508.3.1-r1
- Files
libedit.so.0
- Used by
- readline
OS package. Fixed by a package update, without a new PHP version.
- Packages
argon2-libs 20190702-r5
- Files
libargon2.so.1
- Used by
- standard
OS package. Fixed by a package update, without a new PHP version.
- Packages
libcurl 8.23.0-r0
- Files
libcurl.so.4
- Used by
- curl
OS package. Fixed by a package update, without a new PHP version.
- Packages
libpng 1.6.59-r0
- Files
libpng16.so.16
- Used by
- gd
OS package. Fixed by a package update, without a new PHP version.
- Packages
libavif 1.4.1-r0
- Files
libavif.so.16
- Used by
- gd
OS package. Fixed by a package update, without a new PHP version.
- Packages
libwebp 1.6.0-r0
- Files
libwebp.so.7
- Used by
- gd
OS package. Fixed by a package update, without a new PHP version.
- Packages
libjpeg-turbo 3.1.3-r0
- Files
libjpeg.so.8
- Used by
- gd
OS package. Fixed by a package update, without a new PHP version.
- Packages
libxpm 3.5.20-r0
- Files
libXpm.so.4
- Used by
- gd
OS package. Fixed by a package update, without a new PHP version.
- Packages
freetype 2.14.3-r0
- Files
libfreetype.so.6
- Used by
- gd
OS package. Fixed by a package update, without a new PHP version.
- Packages
icu-libs 78.1-r0
- Files
libicui18n.so.78libicuio.so.78libicuuc.so.78libicudata.so.78
- Used by
- intl
OS package. Fixed by a package update, without a new PHP version.
Upstream archived on 24 April 2025
- Packages
oniguruma 6.9.10-r0
- Files
libonig.so.5
- Used by
- mbstring
OS package. Fixed by a package update, without a new PHP version.
- Packages
libssl3 3.5.9-r0libcrypto3 3.5.9-r0
- Files
libssl.so.3libcrypto.so.3
- Used by
- mysqlnd, openssl
OS package. Fixed by a package update, without a new PHP version.
- Packages
libpq 18.6-r0
- Files
libpq.so.5
- Used by
- pdo_pgsql, pgsql
OS package. Fixed by a package update, without a new PHP version.
- Packages
libsodium 1.0.22-r0
- Files
libsodium.so.26
- Used by
- sodium
OS package. Fixed by a package update, without a new PHP version.
- Packages
sqlite-libs 3.53.4-r0
- Files
libsqlite3.so.0
- Used by
- pdo_sqlite, sqlite3
OS package. Fixed by a package update, without a new PHP version.
- Packages
libzip 1.11.4-r2
- Files
libzip.so.5
- Used by
- zip
Self-contained extensions (14) Core, ctype, filter, iconv, json, mysqli, PDO, pdo_mysql, Phar, random, Reflection, session, SPL, tokenizer
Fedora's own php packages, updated to each PHP patch release. It uses the system PCRE2, libgd, uriparser and time zone database instead of the copies bundled in php-src. Package page · PHP 8.5.12 changelog
- Built by
- The Fedora php package maintainers, compiled on Koji, the Fedora build system.
- Distributed
- Fedora mirrors through dnf, from the updates repository.
dnf install php-{cli,common,mbstring,xml,intl,gd,pdo,mysqlnd,pgsql,bcmath,sodium,process}CycloneDX 1.6 (amd64)
amd64 and arm64 are the same apart from libvmaf, loaded only on amd64. The graph and SBOM show amd64.
Dependency graph
Every extension in the middle. On the left, code compiled from php-src: a fix arrives with a new php-cli package, from a new PHP release or a backport. On the right, OS packages: a fix arrives with that package's update. Hover or tap a box for details.
- Internal: maintained in php-src
- Bundled: upstream copy in php-src
- Patched: bundled with local changes
- Extension, compiled in
- Extension, shared .so
- External: OS package
- *can be swapped for a system library at build time
- †upstream archived
Extension, compiled into the php binary.
- Uses
- timelib
Extension, compiled into the php binary.
- Uses
- Lexbor
Extension, compiled into the php binary.
- Uses
- Lexbor, uriparser
Extension, compiled into the php binary.
- Uses
- PCRE2
Extension, compiled into the php binary.
- Uses
- zlib-ng
Extension, compiled into the php binary.
- Uses
- Keccak (SHA-3), xxHash
Extension, compiled into the php binary.
- Uses
- Capstone, IR JIT framework
Extension, compiled into the php binary.
- Uses
- libedit
Extension, compiled into the php binary.
- Uses
- crypt_blowfish, libxcrypt
Extension, compiled into the php binary.
- Uses
- libxml2
Extension, compiled into the php binary.
- Uses
- OpenSSL
Extension, loaded as a shared .so.
- Uses
- libbcmath
Extension, loaded as a shared .so.
- Uses
- bzip2
Extension, loaded as a shared .so.
- Uses
- curl
Extension, loaded as a shared .so.
- Uses
- Lexbor, libxml2
Extension, loaded as a shared .so.
- Uses
- libmbfl, oniguruma
Extension, loaded as a shared .so.
- Uses
- libmagic
Extension, loaded as a shared .so.
- Uses
- OpenSSL
Extension, loaded as a shared .so.
- Uses
- libgd
Extension, loaded as a shared .so.
- Uses
- ICU
Extension, loaded as a shared .so.
- Uses
- OpenSSL, zlib-ng
Extension, loaded as a shared .so.
- Uses
- libpq (PostgreSQL)
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libsodium
Extension, loaded as a shared .so.
- Uses
- SQLite
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libxml2
Extension, loaded as a shared .so.
- Uses
- libxml2, libxslt
Extension, loaded as a shared .so.
- Uses
- libpq (PostgreSQL)
Extension, loaded as a shared .so.
- Uses
- SQLite
Extension, loaded as a shared .so.
- Uses
- libxml2
Upstream code copied into php-src. Fixed by a new php-cli package: a PHP release or a backport.
- Used by
- date
Upstream code copied into php-src with local changes. Fixed by a new php-cli package: a PHP release or a backport.
- Used by
- dom, lexbor, uri
Upstream code copied into php-src with local changes. Fixed by a new php-cli package: a PHP release or a backport.
Carries a local PHP patch
- Used by
- fileinfo
Maintained inside php-src. Fixed by a new php-cli package: a PHP release or a backport.
- Used by
- mbstring
Maintained inside php-src. Fixed by a new php-cli package: a PHP release or a backport.
- Used by
- bcmath
Maintained inside php-src. Fixed by a new php-cli package: a PHP release or a backport.
- Used by
- Zend OPcache
Upstream code copied into php-src. Fixed by a new php-cli package: a PHP release or a backport.
- Used by
- hash
Upstream code copied into php-src. Fixed by a new php-cli package: a PHP release or a backport.
- Used by
- hash
Upstream code copied into php-src. Fixed by a new php-cli package: a PHP release or a backport.
Can be swapped for a system library at build time.
- Used by
- standard
OS package. Fixed by a package update, without a new PHP version.
- Packages
libxcrypt 4.5.2-3.fc44
- Files
libcrypt.so.2
- Used by
- standard
OS package. Fixed by a package update, without a new PHP version.
- Packages
libxml2 2.12.10-6.fc44
- Files
libxml2.so.2
- Used by
- dom, libxml, SimpleXML, xml, xmlreader, xmlwriter, xsl
OS package. Fixed by a package update, without a new PHP version.
- Packages
openssl-libs 3.5.7-2.fc44
- Files
libcrypto.so.3libssl.so.3
- Used by
- ftp, mysqlnd, openssl
OS package. Fixed by a package update, without a new PHP version.
- Packages
pcre2 10.47-1.fc44.1
- Files
libpcre2-8.so.0
- Used by
- pcre
OS package. Fixed by a package update, without a new PHP version.
- Packages
zlib-ng-compat 2.3.3-3.fc44
- Files
libz.so.1
- Used by
- mysqlnd, zlib
OS package. Fixed by a package update, without a new PHP version.
- Packages
capstone 5.0.6-4.fc44
- Files
libcapstone.so.5
- Used by
- Zend OPcache
OS package. Fixed by a package update, without a new PHP version.
- Packages
libedit 3.1-59.20260512cvs.fc44
- Files
libedit.so.0
- Used by
- readline
OS package. Fixed by a package update, without a new PHP version.
- Packages
uriparser 1.0.2-1.fc44
- Files
liburiparser.so.1
- Used by
- uri
OS package. Fixed by a package update, without a new PHP version.
- Packages
bzip2-libs 1.0.8-23.fc44
- Files
libbz2.so.1
- Used by
- bz2
OS package. Fixed by a package update, without a new PHP version.
- Packages
libcurl 8.18.0-8.fc44
- Files
libcurl.so.4
- Used by
- curl
OS package. Fixed by a package update, without a new PHP version.
Upstream archived on 24 April 2025
- Packages
oniguruma 6.9.10-4.fc44
- Files
libonig.so.5
- Used by
- mbstring
OS package. Fixed by a package update, without a new PHP version.
- Packages
gd 2.3.3-21.fc44
- Files
libgd.so.3
- Used by
- gd
OS package. Fixed by a package update, without a new PHP version.
- Packages
libicu 77.1-3.fc44
- Files
libicui18n.so.77libicuio.so.77libicuuc.so.77libicudata.so.77
- Used by
- intl
OS package. Fixed by a package update, without a new PHP version.
- Packages
libpq 18.0-4.fc44
- Files
libpq.so.5
- Used by
- pdo_pgsql, pgsql
OS package. Fixed by a package update, without a new PHP version.
- Packages
libsodium 1.0.22-1.fc44
- Files
libsodium.so.26
- Used by
- sodium
OS package. Fixed by a package update, without a new PHP version.
- Packages
sqlite-libs 3.51.2-2.fc44
- Files
libsqlite3.so.0
- Used by
- pdo_sqlite, sqlite3
OS package. Fixed by a package update, without a new PHP version.
- Packages
libxslt 1.1.43-6.fc44
- Files
libexslt.so.0libxslt.so.1
- Used by
- xsl
Self-contained extensions (24) calendar, Core, ctype, exif, filter, gettext, iconv, json, mysqli, pcntl, PDO, pdo_mysql, Phar, posix, random, Reflection, session, shmop, sockets, SPL, sysvmsg, sysvsem, sysvshm, tokenizer