php-8.5.2

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

15 Jan 2026, PHP 8.5.2

• Core:
  • Fix OSS-Fuzz #465488618 (Wrong assumptions when dumping function signature with dynamic class const lookup default argument)-
  • Fixed bug GH-20695 (Assertion failure in normalize_value() when parsing malformed INI input via parse_ini_string())-
  • Fixed bug GH-20714 (Uncatchable exception thrown in generator).
  • Fixed bug GH-20352 (UAF in php_output_handler_free via re-entrant ob_start() during error deactivation)-
  • Fixed bug GH-20745 ("Casting out of range floats to int" applies to strings)-

• DOM:
  • Fixed bug GH-20722 (Null pointer dereference in DOM namespace node cloning via clone on malformed objects)-
  • Fixed bug GH-20444 (Dom\XMLDocument::C14N() seems broken compared to DOMDocument::C14N())-

• EXIF:
  • Fixed bug GH-20631 (Integer underflow in exif HEIF parsing when pos-size < 2).

• Intl:
  • Fix leak in umsg_format_helper().

• LDAP:
  • Fix memory leak in ldap_set_options().

• Lexbor:
  • Fixed bug GH-20668 (\Uri\WhatWg\Url::withHost() crashes (SEGV) for URLs using the file: scheme)-

• Mbstring:
  • Fixed bug GH-20674 (mb_decode_mimeheader does not handle separator).

• PCNTL:
  • Fixed bug with pcntl_getcpuaffinity() on solaris regarding invalid process ids handling-

• Phar:
  • Fixed bug GH-20732 (Phar::LoadPhar undefined behavior when reading fails).
  • Fix SplFileInfo::openFile() in write mode.
  • Fix build on legacy OpenSSL 1.1.0 systems.
  • Fixed bug #74154 (Phar extractTo creates empty files).

• Session:
  • Fix support for MM module.

• Sqlite3:
  • Fixed bug GH-20699 (SQLite3Result fetchArray return array|false, null returned)-

• Standard:
  • Fix error check for proc_open() command.
  • Fix memory leak in mail() when header key is numeric.
  • Fixed bug GH-20582 (Heap Buffer Overflow in iptcembed).

• URI:
  • Fixed bug GH-20771 (Assertion failure when getUnicodeHost() returns empty string)-

• Zlib:
  • Fix OOB gzseek() causing assertion failure.

[Bruce Dubbs]

Fixed at commits

8909a4b7b5 and 01d25a73ee Update to sphinx_rtd_theme-3.1.0 (Python module).
bd86bf8e88                Update to LibRaw-0.22.0.
04332ba0fa                Update to php-8.5.2.

[Bruce Dubbs]

Milestone renamed