PHP Release 8.5.7
    Source Code
    PHP 8.5.7 (tar.gz)
    SHA256: e5eba93fd6dd3241d0e61e932eb99a3783b40568553fb0e511b660ecd863a049
    PHP 8.5.7 (tar.bz2)
    SHA256: 4ef9355f784d4b320151eb3f31c5941c0da297025eedb97f2838b2ce73dd59bf
    PHP 8.5.7 (tar.xz)
    SHA256: 01ba2ed1c2658dacf91bebc8be6a4885f69b811c7993831fc48e26107ab29985
    Change Logs
    cli
    • Fixed bug GH-21901 (Stale getopt() optional value).
    date
    • Fixed bug GH-18422 (int overflow in php_date_llabs).
    dom
    • Fixed bug GH-22077 (UAF in custom XPath function).
    opcache
    • Fixed tracing JIT crash when a VM interrupt is handled during an observed user function call.
    • Fixed bug GH-21746 (Segfault with tracing JIT).
    • Fixed bug GH-22004 (Assertion failure at ext/opcache/jit/zend_jit_trace.c).
    • Fixed tailcall VM crash when a VM interrupt is handled from a VM helper.
    openssl
    • Fix compatibility issues with OpenSSL 4.0.
    standard
    • Fixed bug GH-21689 (version_compare() incorrectly handles versions ending with a dot).
    uri
    • Fixed CVE-2026-44927 (In uriparser before 1.0.2, there is pointer difference truncation to int in various places). (CVE-2026-44927)
    • Fixed CVE-2026-44928 (In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal). (CVE-2026-44928)
    PHP logo

    PHP is developed and maintained by a global community of contributors.

    The PHP Foundation helps fund this work. If PHP is part of your business or projects, consider sponsoring the Foundation.
    PHP

    Learn

    The PHP Foundation

    Legal

    Copyright © 2001 - 2026 the PHP Group. All Rights Reserved.
    To Top