PHP 8.5.10 and 8.4.25 Now Available on deb.sury.org With Critical uriparser and GD Fixes
Ondřej Surý has published PHP 8.5.10 and 8.4.25 to deb.sury.org, delivering immediate security patches for Debian and Ubuntu that address four uriparser vulnerabilities and a memory safety flaw in the GD library. The August 28 build specifically targets URI parsing logic in PHP 8.5's new URI extension, making the update essential for applications that validate authorization tokens or sanitize user-supplied URLs. PHP 8.4 continues its security-only lifecycle through December 2026, with this release capping the roadmap via patches for PDO memory leaks, OpenSSL timeout tweaks, and XSL use-after-free conditions. Developers running mixed stacks can pull the coordinated packages today through a standard apt upgrade, bypassing the months-long wait for official distribution repositories to sync with upstream releases.
PHP 8.5.10 and 8.4.25 Now Available on deb.sury.org With Critical uriparser and GD Fixes
PHP versions 8.5.10 and 8.4.25 have been released by Ondřej Surý on deb.sury.org, featuring critical security patches for Debian and Ubuntu that address vulnerabilities in the uriparser and GD library. The updates include fixes for four uriparser vulnerabilities which are important for applications that validate authorization tokens or sanitize URLs, as well as a memory safety flaw in the GD library. PHP 8.4 continues to receive security updates until December 2026, with this release providing maintenance fixes for various issues. Developers can easily upgrade their systems using apt to access these coordinated packages without waiting for official distribution repository updates
