PHP versions 8.5.10 and 8.4.25 were released on August 27, 2026, providing critical security and stability updates, including stack overflow hardening and JIT compiler adjustments. The updates address serious vulnerabilities, such as out-of-bounds writes and SQL injection flaws, necessitating immediate upgrades for users of the older 8.4 branch, which is now limited to security-only fixes. Key enhancements include protections against crashes caused by deeply nested data structures and improvements to JIT stability and engine functionality in the 8.5 branch. Users are urged to upgrade to the latest versions to benefit from these patches and enhancements

PHP 8.5.10 and 8.4.25 Released: Critical CVE Patches and Stack Overflow Fixes

PHP 8.5.10 and 8.4.25 officially shipped on August 27, 2026, delivering cumulative security and stability patches to both active branches. The updates prioritize stack overflow hardening against deeply nested arrays and DOM documents, alongside targeted JIT compiler adjustments in the 8.5 line. With PHP 8.4 now locked to security-only fixes, users must upgrade immediately to resolve serious vulnerabilities like the bccomp out-of-bounds write and the pgsql SQL injection flaw. Developers running untrusted nested data or Opcache-dependent workloads should patch right away to lock in the new crash protections.

PHP 8.5.10 and 8.4.25 Released: Critical CVE Patches and Stack Overflow Fixes @ Linux Compatible