Everything
php
Learn Community Releases The PHP Project
Home » Releases » 8.5 » 8.5.10 »

PHP 8.5.7

The latest release of PHP 8.5 is 8.5.10 which includes important security patches.

Source Code

  • PHP 8.5.7 (tar.gz)

    • sha256: e5eba93fd6dd3241d0e61e932eb99a3783b40568553fb0e511b660ecd863a049

  • PHP 8.5.7 (tar.bz2)

    • sha256: 4ef9355f784d4b320151eb3f31c5941c0da297025eedb97f2838b2ce73dd59bf

  • PHP 8.5.7 (tar.xz)

    • sha256: 01ba2ed1c2658dacf91bebc8be6a4885f69b811c7993831fc48e26107ab29985

Change Log

  • cli

    • Fixed bug GH-21901 (Stale getopt() optional value).
      onthebed

  • core

    • Fixed bug GH-22071 (JIT assertion on abstract static method call).
      David Carlier

  • date

    • Fixed bug GH-18422 (int overflow in php_date_llabs).
      iliaal

  • dom

    • Fixed bug GH-22077 (UAF in custom XPath function).
      afflerbach/David Carlier

  • opcache

    • Fixed tracing JIT crash when a VM interrupt is handled during an observed user function call.
      Levi Morrison
    • Fixed bug GH-21746 (Segfault with tracing JIT).
      Arnaud
    • Fixed bug GH-22004 (Assertion failure at ext/opcache/jit/zend_jit_trace.c).
      Arnaud
    • Fixed tailcall VM crash when a VM interrupt is handled from a VM helper.
      Levi Morrison
      Arnaud

  • openssl

    • Fix compatibility issues with OpenSSL 4.0.
      jordikroon
      Remi

  • standard

    • Fixed bug GH-21689 (version_compare() incorrectly handles versions ending with a dot).
      timwolla

  • uri

    • Fixed CVE-2026-44927 (In uriparser before 1.0.2, there is pointer difference truncation to int in various places). (CVE-2026-44927)
      Sebastian Pipping
    • Fixed CVE-2026-44928 (In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal). (CVE-2026-44928)
      Sebastian Pipping

PHP 8.5


  Represents a security release