Source Code

• PHP 8.5.7 (tar.gz)
  sha256: e5eba93fd6dd3241d0e61e932eb99a3783b40568553fb0e511b660ecd863a049
• PHP 8.5.7 (tar.bz2)
  sha256: 4ef9355f784d4b320151eb3f31c5941c0da297025eedb97f2838b2ce73dd59bf
• PHP 8.5.7 (tar.xz)
  sha256: 01ba2ed1c2658dacf91bebc8be6a4885f69b811c7993831fc48e26107ab29985

Change Log

• cli
  • Fixed bug GH-21901 (Stale getopt() optional value).
• date
  • Fixed bug GH-18422 (int overflow in php_date_llabs).
• dom
  • Fixed bug GH-22077 (UAF in custom XPath function).
• opcache
  • Fixed tracing JIT crash when a VM interrupt is handled during an observed user function call.
  • Fixed bug GH-21746 (Segfault with tracing JIT).
  • Fixed bug GH-22004 (Assertion failure at ext/opcache/jit/zend_jit_trace.c).
  • Fixed tailcall VM crash when a VM interrupt is handled from a VM helper.
• openssl
  • Fix compatibility issues with OpenSSL 4.0.
• standard
  • Fixed bug GH-21689 (version_compare() incorrectly handles versions ending with a dot).
• uri
  • Fixed CVE-2026-44927 (In uriparser before 1.0.2, there is pointer difference truncation to int in various places). (CVE-2026-44927)
  • Fixed CVE-2026-44928 (In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal). (CVE-2026-44928)