PHP 8.5.5: Downloads, Changelog, News

Release Information

Release
8.5.5
PHP Version
PHP 8.5
Release Date
Release Type
Bug Fix Release
Release Status
Latest
Branch Status
Supported (Latest)

Latest PHP release in the latest version.
PHP 8.5 continues to receive bug fixes and security fixes until 2027-12-31.

Downloads

Source Code

Git Clone
Use Git to clone the 8.5.5 tag from the PHP Git repository.
git clone https://github.com/php/php-src.git --depth 1 --branch php-8.5.5
How to compile PHP
PHP can be compiled by setting up the dependencies, building the configure script (./buildconf), configuring the build ./configure, and running make.
Detailed articles on how to compile PHP are available for Ubuntu/Debian based systems and Fedora/RHEL based systems.

Docker/Podman Containers

PHP CLI
PHP CLI Containers images only include the PHP CLI, and no FPM or Apache modules. The Alpine builds are lightweight, but may introduce incompatibilities due to their musl builds. Albeit their larger size, the Debian-based (without the "-alpine" suffix) images are more complete, and widely used.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.5.5-cli-alpine

Debian-based: More compatible with other components, complete, and are widely used.
docker pull php:8.5.5-cli
PHP CLI + Web Server Integration
These container images include PHP CLI, and a web server integration. FPM container images can be integrated with web servers such as Nginx, Caddy, and Apache with Event MPM. The Apache container images include Apache web server, integrating PHP as an Apache module.

Alpine-based: Lightweight, but may introduce incompatibilities due to their musl builds.
docker pull php:8.5.5-fpm-alpine

Debian-based ZTS Apache: Includes Apache web server integrating PHP as an Apache module.
docker pull php:8.5.5-apache

Debian-based NTS FPM: PHP-FPM, can be integrated with Nginx, Caddy, and other web servers over Fast CGI.
docker pull php:8.5.5-fpm

ChangeLog

Core

  • Fixed bug GH-20672 (Incorrect property_info sizing for locally shadowed trait properties).
  • Fixed bugs GH-20875, GH-20873, GH-20854 (Propagate IN_GET guard in get_property_ptr_ptr for lazy proxies).

Bz2

  • Fix truncation of total output size causing erroneous errors.

DOM

  • Fixed bug GH-21486 (Dom\HTMLDocument parser mangles xml:space and xml:lang attributes).

FFI

  • Fixed resource leak in FFI::cdef() onsymbol resolution failure.

GD

  • Fixed bug GH-21431 (phpinfo() to display libJPEG 10.0 support).

Opcache

  • Fixed bug GH-21052 (Preloaded constant erroneously propagated to file-cached script).
  • Fixed bug GH-20838 (JIT compiler produces wrong arithmetic results).
  • Fixed bug GH-21267 (JIT tracing: infinite loop on FETCH_OBJ_R with IS_UNDEF property in polymorphic context).
  • Fixed bug GH-21395 (uaf in jit).

OpenSSL

  • Fixed bug GH-21083 (Skip private_key_bits validation for EC/curve-based keys).
  • Fix missing error propagation for BIO_printf() calls.

PCNTL

  • Fixed signal handler installation on AIX by bumping the storage size of the num_signals global.

PCRE

  • Fixed re-entrancy issue on php_pcre_match_impl, php_pcre_replace_impl, php_pcre_split_impl, and php_pcre_grep_impl.

Phar

  • Fixed bug GH-21333 (use after free when unlinking entries during iteration of a compressed phar).

SNMP

  • Fixed bug GH-21336 (SNMP::setSecurity() undefined behavior with NULL arguments).

SOAP

  • Fixed Set-Cookie parsing bug wrong offset while scanning attributes.

SPL

  • Fixed bug GH-21454 (missing write lock validation in SplHeap).

Standard

  • Fixed bug GH-20906 (Assertion failure when messing up output buffers).
  • Fixed bug GH-20627 (Cannot identify some avif images with getimagesize).

Sysvshm

  • Fix memory leak in shm_get_var() when variable is corrupted.

XSL

  • Fix GH-21357 (XSLTProcessor works with DOMDocument, but fails with Dom\XMLDocument).
  • Fixed bug GH-21496 (UAF in dom_objects_free_storage). (David Carlier/ndossche)

Commit List

Calvin Buckley

  • ext/pcntl: Bump num_signals to uint16_t in GH-21347

Daniel Scherzer

  • Fix missed php_version changes in 022793ee5a
  • php_version.h: remove trailing whitespace in 90cb181844

David Carlier

  • ext/pcre: preg_match() fix memory leak with invalid regexes in 6c45f7a000
  • ext/pcre: fix memory leaks on error paths in 78702fa470
  • ext/pcre: fix new pcre2 test in e64e8b0117
  • ext/pcre: drop negative-length match tests in 27e12b50f4
  • ext/pcre: fix mdata_used race conditions in PCRE functions in f8114f554c
  • ext/pcntl: add new tests to ver invalid signals handling in cf9d6f454a
  • Fix GH-21336: undefined behavior in snmp setSecurity in 41458c6ad6
  • Fix GH-21333: use-after-free when unlinking entries during iteration of a compressed phar in 449361afbf
  • ext/soap: Fix wrong cookie options offset calculation, using separator offset instead in 1b61d555fb
  • ext/gd: phpinfo() to be able to display libjpeg 10.0 support in e257c086bb
  • ext/ffi: Fix resource leak in FFI::cdef() on symbol resolution failure in 97bb48ec2e

Derick Rethans

Dmitry Stogov

Gina Peter Banyard

  • ext/session: Fix memory leak due to multiple exception happening during session abort in 0acde11945

Ilia Alshanetsky

Ilija Tovilo

  • Fix preloaded constant erroneously propagated to file-cached script in ec5a1e001d
  • Make one linux job run function jit on push in a5a5e3acdd
  • Add RUN_RESOURCE_HEAVY_TESTS env var in 3a57b4ced5
  • Fix enabling of opcache in benchmark job in older branches in 7324cd7f21
  • Backport .github changes for Solaris in c21af8c598
  • Fix incorrect property_info sizing for locally shadowed trait properties in ff3f59b5a7
  • Fix expected output for bug52820.phpt in b8b5fb074d
  • Fix Laravel build for PHP 8.2 in 183d2a617f
  • Use default branch for symfony/laravel when possible in 272cf1fb2d

Jakub Zelenka

  • Add back FPM_RUN_RESOURCE_HEAVY_TESTS in 71a01794cc
  • Remove XFAIL for proc-idle-timeout.phpt in 04023e5e72

Máté Kocsis

  • Add support for generating the namespace for the manual in GH-21313
  • Fix replacement of class signatures when a packagesynopsis element is present in 6932260386

ndossche

  • Fix GH-20906: Assertion failure when messing up output buffers in 1709689256
  • Revert "ext/session: Fix memory leak due to multiple exception happening during session abort" in 3073948885
  • Fix memory leak in shm_get_var() when variable is corrupted in ea8aab9220
  • soap: Fix const-generic compile warning in ae0bf447b4
  • soap: Fix const violation in c4c1261196
  • Fix GH-21357: XSLTProcessor works with DOMDocument, but fails with Dom\XMLDocument in 284fd7779d
  • ext/zip: Fix const-generic compile warning in b95f0ebc47
  • Fix GH-21454: Missing write lock validation in SplHeap in 8796d75365
  • openssl: Fix missing error propagation for BIO_printf() calls in f92d54b6b5
  • Fix GH-21486: Dom\HTMLDocument parser mangles xml:space and xml:lang attributes in c920daa7ec

Niels Dossche

  • bz2: Fix truncation of total output size causing erroneous errors in 4ee95fc2f3

Nora Dossche

  • Fix pcre leak test in GH-21327
  • Fix compile warnings under GCC 15.2.1 in GH-21320

Rasmus Lerdorf

  • Fix GH-21411: opcache_compile_file() fails to early-bind classes without parents in GH-21412

Remi Collet

Volker Dusch

Yannis

武田 憲太郎

  • ext/pgsql: Fix preprocessor guard typo that silently disabled a feature in 35d98cb6ce
Subscribe to PHP.Watch newsletter for monthly updates

You will receive an email on last Wednesday of every month and on major PHP releases with new articles related to PHP, upcoming changes, new features and what's changing in the language. No marketing emails, no selling of your contacts, no click-tracking, and one-click instant unsubscribe from any email you receive.