PHP Group php php 8.5 Update Version 8.5.3
Your rating
Rate update installation process
Risk factor
No ratings yet. Be the first to rate this update.
AI enhanced content
Update Summary
PHP 8.5.3 addresses multiple memory-safety issues, crashes, build failures, and runtime bugs across the core and extensions.
Update Details
Security
- Fixed a NULL dereference when calling
ob_start()from a shutdown function after a bailout inphp_output_lock_error(). - Fixed an infinite loop in a garbage-collection destructor fiber.
- Fixed a use-after-free in
FE_FREEinvolving garbage-collection interactions. - Fixed a use-after-free caused by nested
finallyblocks with repeated return-type checks. - Fixed overflow issues involving hooked object properties.
- Fixed a stack overflow in
mb_convert_variables()with recursive array references. - Fixed a segmentation fault in the Tracing JIT involving object references.
- Fixed OpenSSL memory leaks and crashes in certificate parsing and ASN.1 handling.
- Fixed a heap use-after-free in
SplDoublyLinkedListiterators when modifying the list during iteration.
Bug Fixes
- Restored compatibility between the
preserve_nonefeature and LTO. - Fixed macOS build failures involving
musttailandpreserve_none. - Fixed cloning and comparison of internal enums.
- Fixed
ReflectionPropertynot returning PHPDoc when a property has an attribute containing a closure. - Fixed
Dom\HTMLDocumentcorrupting closing tags inside scripts. - Fixed
mb_str_pad()division-by-zero errors with invalid-encoding padding strings. - Fixed
Phar::buildFromIterator()when the base directory is missing. - Fixed construction of PostgreSQL INSERT and UPDATE queries using
PQescapeIdentifier()and potential undefined behavior. - Fixed a memory leak when overriding certain settings through
readline_info(). - Fixed
lchown()failing to change symlink ownership with ZTS. - Fixed
var_dump()crashes involving nested objects.
Hints
- Updated timelib to version 2022.16.
Product Information
Vendor: PHP Group
Product: php
Product type: Software
Variant: php 8.5
Version: 8.5.3
Vendor information published: Feb 12, 2026
Original release notes: View on vendor site
Published on updatealert.io: Oct 28, 2026
Description: A popular general-purpose scripting language that is especially suited to web development. Fast, flexible and pragmatic, PHP powers everything from your blog to the most popular websites in the world.