php-8.5.4

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

12 Mar 2026, PHP 8.5.4

• Core:
  • Fixed bug GH-21029 (zend_mm_heap corrupted on Aarch64, LTO builds).
  • Fixed bug GH-21059 (Segfault when preloading constant AST closure).
  • Fixed bug GH-21072 (Crash on (unset) cast in constant expression).
  • Fix deprecation now showing when accessing null key of an array with JIT.
  • Fixed bug GH-20657 (Assertion failure in zend_lazy_object_get_info triggered by setRawValueWithoutLazyInitialization() and newLazyGhost()).
  • Fixed bug GH-20504 (Assertion failure in zend_get_property_guard when accessing properties on Reflection LazyProxy via isset()).
  • Fixed OSS-Fuzz #478009707 (Borked assign-op/inc/dec on untyped hooked property backing value).
  • Fixed bug GH-21215 (Build fails with -std=).
  • Fixed bug GH-13674 (Build system installs libtool wrappers when using slibtool).

• Curl:
  • Don't truncate length.

• Date:
  • Fixed bug GH-20936 (DatePeriod::set_state() cannot handle null start).
  • Fix timezone offset with seconds losing precision.

• DOM:
  • Fixed bug GH-21077 (Accessing Dom\Node::baseURI can throw TypeError).
  • Fixed bug GH-21097 (Accessing Dom\Node properties can can throw TypeError).

• LDAP:
  • Fixed bug GH-21262 (ldap_modify() too strict controls argument validation makes it impossible to unset attribute).

• MBString:
  • Fixed bug GH-21223; mb_guess_encoding no longer crashes when passed huge list of candidate encodings (with 200,000+ entries).

• Opcache:
  • Fixed bug GH-20718 ("Insufficient shared memory" when using JIT on Solaris).
  • Fixed bug GH-21227 (Borked SCCP of array containing partial object).

• OpenSSL:
  • Fix a bunch of leaks and error propagation.

[Bruce Dubbs]

Fixed at commits

67d3e8f143 Update to php-8.5.4.
f2e88ebc3c Update to gtkmm4-4.22.0.
adfbe10b13 Update to kdsoap-2.3.0.
6bde3efcd4 Update to libpciaccess-0.19 (Xorg library).
e4808178fa Update to at-spi2-core-2.60.0.
36e67d9690 Update to libplacebo-7.360.1.