diff --git a/php-legacy/.SRCINFO b/php-legacy/.SRCINFO
index f20d82d09b..ab336cea7d 100644
--- a/php-legacy/.SRCINFO
+++ b/php-legacy/.SRCINFO
@@ -1,5 +1,5 @@
 pkgbase = php-legacy
-	pkgver = 8.2.23
+	pkgver = 8.2.25
 	pkgrel = 1
 	url = https://www.php.net/
 	arch = x86_64
@@ -33,8 +33,9 @@ pkgbase = php-legacy
 	makedepends = libnsl
 	makedepends = oniguruma
 	makedepends = patchelf
-	source = https://php.net/distributions/php-8.2.23.tar.xz
-	source = https://php.net/distributions/php-8.2.23.tar.xz.asc
+	options = !lto
+	source = https://php.net/distributions/php-8.2.25.tar.xz
+	source = https://php.net/distributions/php-8.2.25.tar.xz.asc
 	source = apache.conf
 	source = php-fpm.tmpfiles
 	source = apache.patch
@@ -44,7 +45,7 @@ pkgbase = php-legacy
 	validpgpkeys = 1198C0117593497A5EC5C199286AF1F9897469DC
 	validpgpkeys = 39B641343D8C104B2B146DC3F9C39DC0B9698544
 	validpgpkeys = E60913E4DF209907D8E30D96659A97C9CF2A795A
-	sha256sums = 81c5ae6ba44e262a076349ee54a2e468638a4571085d80bff37f6fd308e1d8d5
+	sha256sums = 330b54876ea1d05ade12ee9726167332058bccd58dffa1d4e12117f6b4f616b9
 	sha256sums = SKIP
 	sha256sums = 2173046ac22ac50c7a6721306d3f79b2086f66a7a6ff5d8af249a474763197a1
 	sha256sums = f3236ca866095d5e42e51e3fa600082ccd0afcfb7f1aecbeb286ef9d4f0dd564
@@ -63,7 +64,7 @@ pkgname = php-legacy
 	depends = oniguruma
 	depends = gdbm
 	provides = php-interpreter=8.2
-	provides = php-legacy-intl=8.2.23
+	provides = php-legacy-intl=8.2.25
 	conflicts = php-legacy-intl
 	replaces = php-legacy-intl
 	backup = etc/php-legacy/php.ini
diff --git a/php-legacy/PKGBUILD b/php-legacy/PKGBUILD
index cadffc0f2d..bc1fa5aaee 100644
--- a/php-legacy/PKGBUILD
+++ b/php-legacy/PKGBUILD
@@ -19,8 +19,8 @@ pkgname=('php-legacy'
          'php-legacy-sqlite'
          'php-legacy-tidy'
          'php-legacy-xsl')
-pkgver=8.2.23
-pkgrel=1.1
+pkgver=8.2.25
+pkgrel=1
 arch=(x86_64 powerpc64le powerpc64 powerpc riscv64)
 license=('PHP-3.01')
 url='https://www.php.net/'
@@ -31,7 +31,7 @@ checkdepends=('procps-ng')
 source=("https://php.net/distributions/php-${pkgver}.tar.xz"{,.asc}
         'apache.conf' 'php-fpm.tmpfiles' 'apache.patch' 'php-fpm.patch' 'php.ini.patch' 'php-legacy.patch')
 
-sha256sums=('81c5ae6ba44e262a076349ee54a2e468638a4571085d80bff37f6fd308e1d8d5'
+sha256sums=('330b54876ea1d05ade12ee9726167332058bccd58dffa1d4e12117f6b4f616b9'
             'SKIP'
             '2173046ac22ac50c7a6721306d3f79b2086f66a7a6ff5d8af249a474763197a1'
             'f3236ca866095d5e42e51e3fa600082ccd0afcfb7f1aecbeb286ef9d4f0dd564'
@@ -43,6 +43,9 @@ validpgpkeys=('1198C0117593497A5EC5C199286AF1F9897469DC'
               '39B641343D8C104B2B146DC3F9C39DC0B9698544'
               'E60913E4DF209907D8E30D96659A97C9CF2A795A')
 _interpreter=${pkgver%.*}
+# LTO is incompatible with global registers and results in reduced performance:
+# https://gitlab.archlinux.org/archlinux/packaging/packages/php/-/merge_requests/3
+options=('!lto')
 
 prepare() {
 	cd "${srcdir}/php-${pkgver}"
@@ -75,7 +78,6 @@ build() {
 		--datadir=/usr/share/php-legacy \
 		--program-suffix=-legacy \
 		--includedir=/usr/include/php-legacy \
-		--disable-gcc-global-regs \
 		"
 
 	local _phpextensions="\