[web-php] master: Announce PHP 8.5.8

Author: Daniel Scherzer (DanielEScherzer) Date: 2026-07-02T13:02:58-07:00 Commit: https://github.com/php/web-php/commit/98b0eb6806ba78e4c1e9b3c74ec80357cbc05984 Raw diff: https://github.com/php/web-php/commit/98b0eb6806ba78e4c1e9b3c74ec80357cbc05984.diff Announce PHP 8.5.8 Changed paths: A archive/entries/2026-07-02-5.xml A releases/8_5_8.php M ChangeLog-8.php M archive/archive.xml M include/release-qa.php M include/releases.inc M include/version.inc Diff: diff --git a/ChangeLog-8.php b/ChangeLog-8.php index 54e0783f73..13b9037e47 100644 --- a/ChangeLog-8.php +++ b/ChangeLog-8.php @@ -9,6 +9,85 @@ <a id="PHP_8_5"></a> +<section class="version" id="8.5.8"><!-- {{{ 8.5.8 --> +<h3>Version 8.5.8</h3> +<b><?php release_date('02-Jul-2026'); ?></b> +<ul><li>Core: +<ul> + <li>Fixed bug <?php githubissuel('php/php-src', 22280); ?> (Incorrect compile error for goto to label preceding try/finally block).</li> + <li>Fixed bug <?php githubissuel('php/php-src', 22112); ?> (Assertion when error handler throws during NaN to bool/string coercion).</li> +</ul></li> +<li>BCMath: +<ul> + <li>Fixed issues with oversized allocations and signed overflow in bcround() and BcMath\Number::round().</li> +</ul></li> +<li>Date: +<ul> + <li>Fix incorrect recurrence check of DatePeriod::createFromISO8601String().</li> +</ul></li> +<li>Exif: +<ul> + <li>Read correct value for single and double tags.</li> +</ul></li> +<li>GD: +<ul> + <li>Fixed bug <?php githubissuel('php/php-src', 22121); ?> (Double free in gdImageSetStyle() after overflow-triggered early return).</li> +</ul></li> +<li>Intl: +<ul> + <li>Fix incorrect argument positions for invalid start/end arguments in transliterator_transliterate().</li> + <li>Fixed IntlTimeZone::getDisplayName() to synchronize object error state for invalid display types.</li> +</ul></li> +<li>Lexbor: +<ul> + <li>Merge patch c3a6847.</li> +</ul></li> +<li>Opcache: +<ul> + <li>Fixed bug <?php githubissuel('php/php-src', 22265); ?> (Another tailcall vm_interrupt bug).</li> + <li>Fixed bug <?php githubissuel('php/php-src', 20469); ?> (Unsafe inheritance cache replay with reentrant autoloading).</li> + <li>Fixed bug <?php githubissuel('php/php-src', 21972); ?> (Corrupted variable type when a typed by-value return contains a reference wrapper).</li> +</ul></li> +<li>OpenSSL: +<ul> + <li>Fixed bug <?php githubissuel('php/php-src', 22187); ?> (Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD). (CVE-2026-14355)</li> +</ul></li> +<li>Phar: +<ul> + <li>Fixed a bypass of the magic ".phar" directory protection in Phar::addEmptyDir() for paths starting with "/.phar", while allowing non-magic directory names that merely share the ".phar" prefix.</li> +</ul></li> +<li>Reflection: +<ul> + <li>Preserve class-name case in ReflectionClass::getProperty() error messages and autoloading.</li> +</ul></li> +<li>SOAP: +<ul> + <li>Fixed bug <?php githubissuel('php/php-src', 22218); ?> (SoapServer::handle() crash on $_SERVER not being an array).</li> + <li>Fixed bug <?php githubissuel('php/php-src', 22285); ?> (Soap server requires the raw input to be passed to $server-&gt;handle).</li> +</ul></li> +<li>Sqlite: +<ul> + <li>Fix error checks for column retrieval.</li> +</ul></li> +<li>URI: +<ul> + <li>Add LEXBOR_STATIC to CFLAGS_URI on Windows so ext/uri does not see LXB_API as __declspec(dllimport) when linked statically into PHP.</li> + <li>Clean error logs before each Uri\WhatWg\Url wither call so that errors from previous wither calls are not returned the next time a UrlValidationError is thrown.</li> +</ul></li> +<li>Zip: +<ul> + <li>Fixed error-related memory leaks.</li> +</ul></li> +<li>Zlib: +<ul> + <li>Fixed memory leak if deflate initialization fails and there is a dict.</li> + <li>Fixed memory leak in inflate_add().</li> +</ul></li> +</ul> +<!-- }}} --></section> + + + <section class="version" id="8.5.7"><!-- {{{ 8.5.7 --> <h3>Version 8.5.7</h3> <b><?php release_date('04-Jun-2026'); ?></b> diff --git a/archive/archive.xml b/archive/archive.xml index 10c1df8e5f..f9a9d1af80 100644 --- a/archive/archive.xml +++ b/archive/archive.xml @@ -9,6 +9,7 @@ <uri>http://php.net/contact</uri> <email>php-webmaster@lists.php.net</email> </author> + <xi:include href="entries/2026-07-02-5.xml"/> <xi:include href="entries/2026-07-02-4.xml"/> <xi:include href="entries/2026-07-02-3.xml"/> <xi:include href="entries/2026-07-02-2.xml"/> diff --git a/archive/entries/2026-07-02-5.xml b/archive/entries/2026-07-02-5.xml new file mode 100644 index 0000000000..625041a438 --- /dev/null +++ b/archive/entries/2026-07-02-5.xml @@ -0,0 +1,21 @@ +<?xml version="1.0" encoding="utf-8"?> +<entry xmlns="http://www.w3.org/2005/Atom"> + <title>PHP 8.5.8 Released!</title> + <id>https://www.php.net/archive/2026.php#2026-07-02-5</id> + <published>2026-07-02T19:55:50+00:00</published> + <updated>2026-07-02T19:55:50+00:00</updated> + <link href="https://www.php.net/index.php#2026-07-02-5" rel="alternate" type="text/html"/> + <link href="https://www.php.net/archive/2026.php#2026-07-02-5" rel="via" type="text/html"/> + <category term="releases" label="New PHP release"/> + <category term="frontpage" label="PHP.net frontpage news"/> + <content type="xhtml"> + <div xmlns="http://www.w3.org/1999/xhtml"><p>The PHP development team announces the immediate availability of PHP 8.5.8. This is a security release.</p> + +<p>All PHP 8.5 users are encouraged to upgrade to this version.</p> + +<p>For source downloads of PHP 8.5.8 please visit our <a href="https://www.php.net/downloads.php">downloads page</a>, +Windows source and binaries can also be found <a href="https://www.php.net/downloads.php?os=windows&amp;version=8.5">there</a>. +The list of changes is recorded in the <a href="https://www.php.net/ChangeLog-8.php#8.5.8">ChangeLog</a>. +</p> </div> + </content> +</entry> diff --git a/include/release-qa.php b/include/release-qa.php index 001f34944b..cb3ac41bd3 100644 --- a/include/release-qa.php +++ b/include/release-qa.php @@ -88,10 +88,10 @@ 'active' => true, 'release' => [ 'type' => 'RC', - 'number' => 1, - 'sha256_bz2' => '353379137daafd2164011e36349d3ba9625b98f41d82a0451ec53f20462b68a0', - 'sha256_gz' => '57f93d2e0d76a26ac955e30cfab81dd910fc48e8bf78b3a15ff67df63a92ac72', - 'sha256_xz' => 'b4c8d96c481f3aa9b6cf2b5b01e190a70e657b5decda658b7c0cd11616deb9d4', + 'number' => 0, + 'sha256_bz2' => '', + 'sha256_gz' => '', + 'sha256_xz' => '', 'date' => '18 June 2026', 'baseurl' => 'https://downloads.php.net/~daniels/', ], diff --git a/include/releases.inc b/include/releases.inc index 3e95d3bca0..1bab620f27 100644 --- a/include/releases.inc +++ b/include/releases.inc @@ -2,6 +2,42 @@ $OLDRELEASES = array ( 8 => array ( + '8.5.7' => + array ( + 'announcement' => + array ( + 'English' => '/releases/8_5_7.php', + ), + 'tags' => + array ( + ), + 'date' => '04 Jun 2026', + 'source' => + array ( + 0 => + array ( + 'filename' => 'php-8.5.7.tar.gz', + 'name' => 'PHP 8.5.7 (tar.gz)', + 'sha256' => 'e5eba93fd6dd3241d0e61e932eb99a3783b40568553fb0e511b660ecd863a049', + 'date' => '04 Jun 2026', + ), + 1 => + array ( + 'filename' => 'php-8.5.7.tar.bz2', + 'name' => 'PHP 8.5.7 (tar.bz2)', + 'sha256' => '4ef9355f784d4b320151eb3f31c5941c0da297025eedb97f2838b2ce73dd59bf', + 'date' => '04 Jun 2026', + ), + 2 => + array ( + 'filename' => 'php-8.5.7.tar.xz', + 'name' => 'PHP 8.5.7 (tar.xz)', + 'sha256' => '01ba2ed1c2658dacf91bebc8be6a4885f69b811c7993831fc48e26107ab29985', + 'date' => '04 Jun 2026', + ), + ), + 'museum' => false, + ), '8.4.22' => array ( 'announcement' => diff --git a/include/version.inc b/include/version.inc index e3d567e995..31e4ff7a8a 100644 --- a/include/version.inc +++ b/include/version.inc @@ -20,15 +20,15 @@ $RELEASES = (function () { /* PHP 8.5 Release */ $data['8.5'] = [ - 'version' => '8.5.7', - 'date' => '04 Jun 2026', - 'tags' => [], // Set to ['security'] for security releases. + 'version' => '8.5.8', + 'date' => '02 Jul 2026', + 'tags' => ['security'], // Set to ['security'] for security releases. 'sha256' => [ // WARNING: Order of SHA256 entries here is DIFFERENT from the // order in the manifest - 'tar.gz' => 'e5eba93fd6dd3241d0e61e932eb99a3783b40568553fb0e511b660ecd863a049', - 'tar.bz2' => '4ef9355f784d4b320151eb3f31c5941c0da297025eedb97f2838b2ce73dd59bf', - 'tar.xz' => '01ba2ed1c2658dacf91bebc8be6a4885f69b811c7993831fc48e26107ab29985', + 'tar.gz' => '6ebc55e52af4396385e689f7af0f28944fbbf966843433b573e9dc1dc03df539', + 'tar.bz2' => '22f938efc6c4eaa8bf2e40ae11466140309496aa5d5a19204272fb2596fd11dd', + 'tar.xz' => '58910198d19e873048fe87cdfe16bc790025417ede3d1651bfa1c4b533d573f2', ] ]; diff --git a/releases/8_5_8.php b/releases/8_5_8.php new file mode 100644 index 0000000000..d0cfbe35b5 --- /dev/null +++ b/releases/8_5_8.php @@ -0,0 +1,16 @@ +<?php +$_SERVER['BASE_PAGE'] = 'releases/8_5_8.php'; +include_once __DIR__ . '/../include/prepend.inc'; +site_header('PHP 8.5.8 Release Announcement'); +?> +<h1>PHP 8.5.8 Release Announcement</h1> + +<p>The PHP development team announces the immediate availability of PHP 8.5.8. This is a security release.</p> + +<p>All PHP 8.5 users are encouraged to upgrade to this version.</p> + +<p>For source downloads of PHP 8.5.8 please visit our <a href="https://www.php.net/downloads.php">downloads page</a>, +Windows source and binaries can also be found <a href="https://www.php.net/downloads.php?os=windows&amp;version=8.5">there</a>. +The list of changes is recorded in the <a href="https://www.php.net/ChangeLog-8.php#8.5.8">ChangeLog</a>. +</p> +<?php site_footer();