php-8.5.3

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

12 Feb 2026, PHP 8.5.3

• Core:
  • Fixed bug GH-20806 (preserve_none feature compatiblity with LTO).
  • Fixed bug GH-20767 (build failure with musttail/preserve_none feature on macOs)
  • Fixed bug GH-20837 (NULL dereference when calling ob_start() in shutdown function triggered by bailout in php_output_lock_error())
  • Fix OSS-Fuzz #471533782 (Infinite loop in GC destructor fiber).
  • Fix OSS-Fuzz #472563272 (Borked block_pass JMP[N]Z optimization).
  • Fixed bug GH-20914 (Internal enums can be cloned and compared).
  • Fix OSS-Fuzz #474613951 (Leaked parent property default value).
  • Fixed bug GH-20895 (ReflectionProperty does not return the PHPDoc of a property if it contains an attribute with a Closure)
  • Fixed bug GH-20766 (Use-after-free in FE_FREE with GC interaction).
  • Fix OSS-Fuzz #471486164 (Broken by-ref assignment to uninitialized hooked backing value)
  • Fix OSS-Fuzz #438780145 (Nested finally with repeated return type check may uaf)
  • Fixed bug GH-20905 (Lazy proxy bailing clone assertion).
  • Fixed bug GH-20479 (Hooked object properties overflow).

• Date:
  • Update timelib to 2022.16.

• DOM:
  • Fixed GH-21041 (Dom\HTMLDocument corrupts closing tags within scripts).

• MbString:
  • Fixed bug GH-20833 (mb_str_pad() divide by zero if padding string is invalid in the encoding)
  • Fixed bug GH-20836 (Stack overflow in mb_convert_variables with recursive array references)

• Opcache:
  • Fixed bug GH-20818 (Segfault in Tracing JIT with object reference).

• OpenSSL:
  • Fix memory leaks when sk_X509_new_null() fails.
  • Fix crash when in openssl_x509_parse() when i2s_ASN1_INTEGER() fails.
  • Fix crash in openssl_x509_parse() when X509_NAME_oneline() fails.

• Phar:
  • Fixed bug GH-20882 (buildFromIterator breaks with missing base directory).

• PGSQL:
  • Fixed INSERT/UPDATE queries building with PQescapeIdentifier() and possible UB

• Readline:
  • Fixed bug GH-18139 (Memory leak when overriding some settings via readline_info())

• SPL:
  • Fixed bug GH-20856 (heap-use-after-free in SplDoublyLinkedList iterator when modifying during iteration)

• Standard:
  • Fixed bug #74357 (lchown fails to change ownership of symlink with ZTS)
  • Fixed bug GH-20843 (var_dump() crash with nested objects)

[Bruce Dubbs]

Fixed at commit 90cd0881cd.