Official changelog

BCMath

• Fixed BcMath\Number results that truncate to zero keeping a negative sign and comparing less than zero. (Ilia Alshanetsky)

BZ2

• Fixed double close of the descriptor and use-after-free of the inner stream when bzopen() is given a stream resource. (Jakub Zelenka) - CLI
• Fix GH-22567 (Windows ZTS CLI SAPI should refresh its TSRMLS cache during request activation). (matyhtf)
• Fixed bug GH-23764 (Built-in server leaks a file descriptor on every HEAD request for a static file). (jakubskopal)
• Fixed crash in the built-in server when a client is reset before being accepted. (David Carlier)
• Fixed the built-in server truncating an error page and leaking its unsent part after a partial socket write. (Ilia Alshanetsky) - Core
• Fixed bug GH-23644 (Optimizer leaves a constant-vs-constant comparison unfolded, crashing the VM in zval_undefined_cv). (ndossche)
• Fixed OSS-Fuzz 532353396 (assertion failure with static type). (Girgias)
• Fix GH-23662 (Avoid NAN warning in print_r()). (CodedByManish)
• Fix GH-21999: GC inconsistency with lazy object, var_dump(), and object comparison. (Arnaud)
• Fixed OSS-Fuzz #536440507 (Immutable class incorrect assertion). (ndossche)
• Fixed bug GH-23628 (Tracing JIT reads undefined property slots of lazy proxy objects instead of forwarding to the real instance). (lisachenko)
• Fixed bug GH-23882 (array_map() optimization is incorrect for strict_types=1). (timwolla)
• Fixed OSS-Fuzz #565486253 (coerced arg with '...' on non-variadic function). (ndossche)
• Fixed AVX being reported as supported when the OS has not enabled AVX state. (Ilia Alshanetsky)
• Fixed OSS-Fuzz #552682112 (assertion failure wrt zp_arg_must_be_sent_by_ref()). (ndossche)
• Fixed GH-23921 (Fibers start with error_reporting = 0 when the error_reporting INI directive is not set). (Girgias)
• Fixed GH-23980 (ZEND_ASSERT violation @ ZEND_INCLUDE_OR_EVAL). (ndossche)
• Deprecated using "let" or "is" as the name of a class, function, or constant, and as an alias in class_alias() and use declarations. (Girgias)
• Deprecated using "_" as a constant name and as an alias for a class or constant in use declarations. (Girgias)
• Switch the POSIX high resolution timer back to CLOCK_MONOTONIC from CLOCK_MONOTONIC_RAW. (nicolas-grekas)
• Fixed array_map optimization with non-literal function or non-literal args. (Arnaud)
• Fixed use-after-free when a dl()-loaded extension declares a frameless function and a later request calls it. (Ilia Alshanetsky)
• Fixed System V shared memory emulation for Windows attaching segments past the end of their mapping. (Ilia Alshanetsky)
• Fixed exception thrown by destructor during GC in a Fiber not being rethrown into the frame that triggered the GC. (Nicolas Grekas)

DOM

• Fixed DOMXPath and Dom\XPath losing the context node and in-scope namespaces of an evaluation after a php:function() callback evaluated another expression on the same object. (Ilia Alshanetsky)

FFI

• Fixed crashes with FFI callbacks created from __call() trampolines and array callables whose object is released. (Ilia Alshanetsky)

Intl

• Fixed grapheme_strstr() and grapheme_stristr() returning incorrect substrings when supplementary characters precede the match. (Weilin Du)
• Fixed grapheme_strstr() and grapheme_strpos() missing canonically equivalent matches, and grapheme searches reporting ICU errors for empty haystacks. (Weilin Du)
• Fixed grapheme_strrpos() and grapheme_strripos() skipping overlapping matches when using a negative offset. (Weilin Du)
• Fixed IntlDateFormatter::parse(), localtime() and parseToCalendar() treating the offset as UTF-16 code units instead of bytes. (Ilia Alshanetsky)

Lexbor

• Merge patches lexbor/lexbor@859f100, lexbor/lexbor@a36e09a, lexbor/lexbor@b0f7412, lexbor/lexbor@1b215a8, lexbor/lexbor@385afff, lexbor/lexbor@e6c068f, lexbor/lexbor@327a8b6, lexbor/lexbor@917742f and lexbor/lexbor@e89c258, fixing dropped usernames containing an at sign, uninitialized memory in IDNA buffer growth, the encoding of a space before a query or fragment in an opaque path, a query or fragment lost after a dot segment in a path, replacement file drive paths, the output encoding used for percent-encoding, the URLSearchParams tail pointer and fragment serialization without a query. (alexandre-daubois)

MySQLnd

• Fixed field_count not resetting on OK packet. (Kamil Tekiela)
• Fixed memory leak when closing a prepared statement after its connection was killed. (Kamil Tekiela)

Opcache

• Fix zend_analyze_calls() call_stack buffer overrun. (Mrmaxmeier)
• Fixed bug GH-23679 (Tracing JIT writes a parent private property into a child's shadowing public property). (Ilia Alshanetsky)
• Fix multiple incorrect DCE due to unsound escape analysis. (ndossche, arnaud-lb)
• Fixed bug GH-24063 (OPcache optimizer folds `$cond ? -0.0 : 0.0` into a single `-0.0` constant). (lazerg)
• Fixed crash when a file cache is reused with a different set of extensions declaring frameless functions. (Ilia Alshanetsky)
• Fixed bug GH-23991 (JIT generates invalid IR for multiple recursive calls). (ndossche)
• Fix SCCP evaluation of isset()/empty() on dimension of non-escaping object. (ndossche)

OpenSSL

• Fixed stream_socket_enable_crypto() leaving the socket non-blocking after a handshake timeout. (Ilia Alshanetsky)
• Fix memory leak by doing early salt validation. (adapik)
• Fixed openssl_sign() using the maximum RSA-PSS salt length by default instead of the OpenSSL default. (adapik)
• Fixed feof() on a TLS stream staying false after a close_notify on Windows. (Jakub Zelenka)

PCNTL

• Fixed pcntl_signal_dispatch() dropping the queued signals when it runs while an exception is pending. (nicolas-grekas)
• Fixed pcntl_signal_dispatch() dropping the signals queued behind a handler that throws. (nicolas-grekas)
• Fixed bug GH-23986 (/proc/self paths resolve to the parent process after pcntl_fork()). (Lazizbek Ergashev)

PDO

• Fixed PDO::setAttribute() installing a PDO::ATTR_STATEMENT_CLASS class whose constructor arguments it rejects. (Ilia Alshanetsky)
• Fixed PDO::ATTR_STATEMENT_CLASS constructor_args type errors reporting "array given" regardless of the value passed. (Ilia Alshanetsky)
• Fixed PDOStatement::bindParam() and bindColumn() leaking the driver options value. (Ilia Alshanetsky)
• Fixed PDOStatement not reporting its bound parameters and columns to the cycle collector. (Ilia Alshanetsky)
• Fixed PDOStatement::setFetchMode() not applying changes atomically. (Ilia Alshanetsky)
• Fixed PDOStatement::execute() leaving the previous result available after a failed execution. (Ilia Alshanetsky)
• Fixed a use-after-free when bindValue()/execute()/closeCursor() is called from a bound parameter's __toString() during execute(). (Ilia Alshanetsky)

PDO_DBLIB

• Fixed bug GH-23741 (segfault after a failed query inside a PDO transaction). Errors raised by beginTransaction(), commit(), rollBack() and lastInsertId() are now reported instead of being dropped. (Ilia Alshanetsky)

PDO_PGSQL

• Fixed crash when a persistent connection fails. (KentarouTakeda)

Reflection

• Fixed bug GH-23842 (ReflectionProperty::skipLazyInitialization() copies invalid constant defaults with OPcache). (DirkTrunkstar, Lazizbek Ergashev)

SimpleXML

• Fixed reconstructing a SimpleXMLElement freeing a child element that another variable still references. (Ilia Alshanetsky)

SOAP

• Fixed bug GH-22895 (Heap use-after-free while encoding a Traversable with an illegal key). (David Carlier)
• Fixed memory leak when load_wsdl_ex() failed to load. (DanielEScherzer)

Standard

• Fixed sha1_file() returning a digest for incomplete data after a stream read failure. (Ilia Alshanetsky)
• Fixed iptcembed() corrupting JPEG headers when called recursively from an output handler. (Ilia Alshanetsky)
• Fixed proc_open() leaking descriptor zero when descriptor setup fails. (Ilia Alshanetsky)
• Fixed StreamPollHandle changing unread_bytes of a TLS stream when it is added to an Io\Poll\Context. (Jakub Zelenka)
• Fix wordwrap() ignoring an existing break at the end of the string (Nicolas Grekas)
• Fixed convert.quoted-printable-decode decoding lowercase hex digits to the wrong byte. (Ilia Alshanetsky)

Tidy

• Fixed a use-after-free when a tidyNode is used after its document is reparsed. (Ilia Alshanetsky)

Zip

• Fixed bug GH-23899 (Assertion failure when a cancel callback returns an invalid type during shutdown). (Weilin Du)

Official downloads

• php-8.6.0RC3.tar.bz2 08 October 2026
  sha256: 12d024eba9fa4bf379693c045a544eec2144de2d7de71f31a6ed4496717e0307 Copy
• php-8.6.0RC3.tar.gz 08 October 2026
  sha256: a40085cef8bfb560ed3649cd83879e768ab22fe4cee467aa56b1b795c92e057d Copy
• php-8.6.0RC3.tar.xz 08 October 2026
  sha256: 131f87a206bdd90c178d8e44e80243ae0c333c4cee8531f63d1caa9acdd8696a Copy

Source: php.net · php-src NEWS file · NEWS · Official announcement · Downloads · PHP Releases