Official changelog

Core

• Sync Boost.Context assembly with 1.91.0. (kn1g78)
• Fixed bug GH-22387 (AST pretty-printing drops meaningful parentheses around RHS of instanceof). (timwolla)
• Fixed bug GH-15672 and GH-15911 (Stack overflow when an internal function recurses through zend_call_function, such as a self-attached SPL iterator). (iliaal)
• Lock unmodified readonly properties for modification after clone-with. (NickSdot)
• abort() instead of exit() on hard OOM. (realFlowControl)
• perf: ZTS: move AG and SCNG into native __thread storage. (henderkes)

Calendar

• Fixed bug GH-22602 (gregoriantojd() and juliantojd() integer overflow with INT_MAX year). (arshidkv12)

Curl

• Added CURLOPT_SEEKFUNCTION and the CURL_SEEKFUNC_OK, CURL_SEEKFUNC_FAIL and CURL_SEEKFUNC_CANTSEEK constants, letting libcurl rewind a streamed request body to resend it on a redirect, multi-pass authentication or a retried reused connection. (GrahamCampbell)

Date

• Update timelib to 2022.17. (Derick)
• Fixed bug GH-19803 (Parsing a string with a single white space does create an error). (Derick)
• Fixed Unix timestamps in February of the year 0 are misparsed with @-notation. (LukasGelbmann)
• Fixed bug GH-11368 (idate() doesn't work for the year -1). (Derick)
• Fixed bug GH-11310 (__debugInfo does nothing on userland classes extending Date classes). (Derick)

DBA

• Fixed OOB read on malformed length field in dba flatfile handler. (alhudz)

DOM

• Fixed bug GH-22570 (Stack overflow when serializing a deeply nested Dom\XMLDocument). (iliaal)
• Fixed Dom\DtdNamedNodeMap integer dimension access so negative indexes return NULL and indexes outside the int range throw ValueError instead of returning the first entity or notation. (Weilin Du)
• Fixed bug GH-22623 (use after free with namespace nodes from XSLTProcessor::registerFunctions())/ (David Carlier)
• Fixed bug GH-22554 (use-after-free with XPath callback returning a node from a foreign document). (David Carlier)

Exif

• Fixed bug GH-11020 (exif_read_data() emits a spurious "Illegal IFD size" warning when an IFD is not followed by a next-IFD offset). (Eyüp Can Akman)

GMP

• Fixed bug GH-22549 (Assertion failure / UB on a compound GMP power or shift assignment with a negative exponent). (iliaal)

Intl

• Fixed NumberFormatter::parse() and NumberFormatter::parseCurrency() to reject offset values outside the 32-bit range instead of silently truncating them. (Weilin Du)
• IntlDateFormatter::parse()/datefmt_parse() and IntlDateFormatter::localtime()/datefmt_localtime() now raise TypeError when the offset argument is not of type int. (Weilin Du)

JSON

• Report unterminated JSON strings as syntax errors. (timwolla)
• Improve performance error position tracking during JSON decoding. (henderkes)
• Fixed bug GH-22514 (Incorrect error column in PHP 8.6 JSON parser). (henderkes, timwolla)

Opcache

• Fixed bug GH-21770 (Infinite recursion in property hook getter in opcache preloaded trait). (iliaal)

OpenSSL

• Fixed timeout for supplemental read at end of a blocking stream in SSL stream wrapper. (ilutov)
• Fixed stream_socket_get_crypto_status() after supplemental read. (ilutov)

PDO_ODBC

• Fixed bug GH-20726 (Crash with ODBC connection pooling when the DSN carries no credentials). (iliaal)

PHPDBG

• Fixed fleaked lowercased lookup keys in phpdbg_resolve_opline_break. (jorgsowa)
• Fixed off-by-one in phpdbg_safe_class_lookup() causing class lookups to always fail during phpdbg's signal-safe interruption path. (jorgsowa)

Reflection

• Fixed bug GH-22683 (Reflection(Class)Constant::__toString() should not warn on NAN conversions). (Khaled Alam)
• Fixed bug GH-22681 (Reflection*::__toString() truncates on null bytes). (DanielEScherzer)

Session

• Fixed bug GH-21314 (Different session garbage collector behavior between PHP 8.3 and PHP 8.5). (jorgsowa)

SOAP

• Fixed bug GH-22585 (OOM on bailout with uninitialized do_request() parameters). (David Carlier)
• Fixed xsd:hexBinary decoding to reject odd-length values instead of silently truncating the last nibble. (Weilin Du)
• Made SOAP encoding errors report the affected type or failing operation instead of the generic "Violation of encoding rules" message. (Weilin Du)

Standard

• Fixed sleep() and usleep() to reject values that overflow the underlying unsigned int timeout. (Weilin Du)
• Fixed bug GH-22671 (assert.bail aborts the process when the assert callback throws an exception whose reporting re-throws). (iliaal)
• Fixed bug GH-22678 (Use-after-free in array_multisort() when the comparator mutates the array being sorted). (azchin, iliaal)

Streams

• Fixed bug GH-21468 (Segfault in file_get_contents w/ a https URL and a proxy set). (CVE-2026-12184) (ndossche)

URI

• Fixed bug GH-22628 (Percent-encoding of caret in WHATWG URL paths is not performed). (kocsismate)
• Fixed bug GH-22629 (WHATWG Validation error incorrect with empty host and non-empty userinfo). (kocsismate)

Zip

• Fixed bug GH-22649 (ZipArchive::setCommentName() and setCommentIndex() could crash after overwriting an entry and resetting its inherited unchanged comment). (Weilin Du)
• Fixed bug GH-21705 (ZipArchive::getFromIndex() ignores ZipArchive::FL_UNCHANGED for deleted entries). (Weilin Du)
• Fixed bug GH-22176 (memory leak with ZipArchive::registerCancelBack() is used with reference returning function during shutdown). (David Carlier)
• ZipArchive::addGlob() and ZipArchive::addPattern() now raise a TypeError for invalid "remove_all_path", "comp_method", "comp_flags", and "enc_method" options instead of emitting a warning. (David Carlier)

Source: php.net · php-src NEWS file · NEWS · Official announcement · Downloads · PHP Releases