Views
6

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

PHP 8.5.3 addresses multiple memory-safety issues, crashes, build failures, and runtime bugs across the core and extensions.

Update Details

Security

  • Fixed a NULL dereference when calling ob_start() from a shutdown function after a bailout in php_output_lock_error().
  • Fixed an infinite loop in a garbage-collection destructor fiber.
  • Fixed a use-after-free in FE_FREE involving garbage-collection interactions.
  • Fixed a use-after-free caused by nested finally blocks with repeated return-type checks.
  • Fixed overflow issues involving hooked object properties.
  • Fixed a stack overflow in mb_convert_variables() with recursive array references.
  • Fixed a segmentation fault in the Tracing JIT involving object references.
  • Fixed OpenSSL memory leaks and crashes in certificate parsing and ASN.1 handling.
  • Fixed a heap use-after-free in SplDoublyLinkedList iterators when modifying the list during iteration.

Bug Fixes

  • Restored compatibility between the preserve_none feature and LTO.
  • Fixed macOS build failures involving musttail and preserve_none.
  • Fixed cloning and comparison of internal enums.
  • Fixed ReflectionProperty not returning PHPDoc when a property has an attribute containing a closure.
  • Fixed Dom\HTMLDocument corrupting closing tags inside scripts.
  • Fixed mb_str_pad() division-by-zero errors with invalid-encoding padding strings.
  • Fixed Phar::buildFromIterator() when the base directory is missing.
  • Fixed construction of PostgreSQL INSERT and UPDATE queries using PQescapeIdentifier() and potential undefined behavior.
  • Fixed a memory leak when overriding certain settings through readline_info().
  • Fixed lchown() failing to change symlink ownership with ZTS.
  • Fixed var_dump() crashes involving nested objects.

Hints

  • Updated timelib to version 2022.16.

Product Information

Vendor: PHP Group

Product: php

Product type: Software

Variant: php 8.5

Version: 8.5.3

Vendor information published: Feb 12, 2026

Original release notes: View on vendor site

Published on updatealert.io: Oct 28, 2026

Description: A popular general-purpose scripting language that is especially suited to web development. Fast, flexible and pragmatic, PHP powers everything from your blog to the most popular websites in the world.