Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.5 » 8.5.10 »

PHP 8.5.4

The latest release of PHP 8.5 is 8.5.10 which includes important security patches.

Source Code

  • PHP 8.5.4 (tar.gz)

    • sha256: 4fef7f44eff3c18e329504cb0d3eb30b41cf54e2db05cb4ebe8b78fc37d38ce1

  • PHP 8.5.4 (tar.bz2)

    • sha256: 2ac929a29a6b7ef4b8acec981a417b91bdf7f548f597df665cc56ab9ea95fc75

  • PHP 8.5.4 (tar.xz)

    • sha256: c1569f1f543f6b025c583cdc0e730e5c5833c603618613f1aa8e75d1524b8c91

Change Log

  • core

    • Fixed bug GH-21029 (zend_mm_heap corrupted on Aarch64, LTO builds).
      Arnaud
    • Fixed bug GH-21059 (Segfault when preloading constant AST closure).
      ilutov
    • Fixed bug GH-21072 (Crash on (unset) cast in constant expression).
      arshidkv12
    • Fix deprecation now showing when accessing null key of an array with JIT.
      alexandre-daubois
    • Fixed bug GH-20657 (Assertion failure in zend_lazy_object_get_info triggered by setRawValueWithoutLazyInitialization() and newLazyGhost()).
      Arnaud
    • Fixed bug GH-20504 (Assertion failure in zend_get_property_guard when accessing properties on Reflection LazyProxy via isset()).
      Arnaud
    • Fixed OSS-Fuzz #478009707 (Borked assign-op/inc/dec on untyped hooked property backing value).
      ilutov
    • Fixed bug GH-21215 (Build fails with -std=).
      Arnaud
    • Fixed bug GH-13674 (Build system installs libtool wrappers when using slibtool).
      Michael Orlitzky

  • curl

    • Don't truncate length.
      ndossche

  • date

    • Fixed bug GH-20936 (DatePeriod::__set_state() cannot handle null start).
      ndossche
    • Fix timezone offset with seconds losing precision.
      ndossche

  • dom

    • Fixed bug GH-21077 (Accessing Dom\Node::baseURI can throw TypeError).
      ndossche
    • Fixed bug GH-21097 (Accessing Dom\Node properties can can throw TypeError).
      ndossche

  • ldap

    • Fixed bug GH-21262 (ldap_modify() too strict controls argument validation makes it impossible to unset attribute).
      David Carlier

  • mbstring

    • Fixed bug GH-21223; mb_guess_encoding no longer crashes when passed huge list of candidate encodings (with 200,000+ entries).
      Jordi Kroon

  • opcache

    • Fixed bug GH-20718 ("Insufficient shared memory" when using JIT on Solaris).
      Petr Sumbera
    • Fixed bug GH-21227 (Borked SCCP of array containing partial object).
      ilutov

  • openssl

    • Fix a bunch of leaks and error propagation.
      ndossche

  • windows

    • Fixed compilation with clang (missing intrin.h include).
      Kévin Dunglas

PHP 8.5


  Represents a security release