PHP Group php php 8.5 Update Version 8.5.7
Your rating
Rate update installation process
Risk factor
No ratings yet. Be the first to rate this update.
AI enhanced content
Update Summary
PHP 8.5.7 fixes CVE-2026-44927 and CVE-2026-44928 in uriparser, addresses a DOM use-after-free, and resolves multiple JIT crashes and compatibility issues.
Update Details
Security
- Fixed a use-after-free vulnerability in custom XPath functions.
- Fixed CVE-2026-44927, an integer truncation issue in uriparser before 1.0.2.
- Fixed CVE-2026-44928, where uriparser's EqualsUri function could misclassify unequal URIs as equal.
Bug Fixes
- Fixed stale optional-value handling in getopt().
- Fixed integer overflow in php_date_llabs.
- Fixed multiple tracing JIT crashes, including crashes involving VM interrupts, user function calls, VM helpers, and assertion failures.
- Fixed version_compare() handling of versions ending with a dot.
Hints
- Includes compatibility fixes for OpenSSL 4.0.
Product Information
Vendor: PHP Group
Product: php
Product type: Software
Variant: php 8.5
Version: 8.5.7
Vendor information published: Jun 4, 2026
Original release notes: View on vendor site
Published on updatealert.io: Oct 28, 2026
Description: A popular general-purpose scripting language that is especially suited to web development. Fast, flexible and pragmatic, PHP powers everything from your blog to the most popular websites in the world.