PHP 8.5.7 Release Candidate 1 has been released, focusing on stabilizing the Opcache tracing JIT and fixing two security vulnerabilities in the URI extension. The update addresses critical issues that have been causing segmentation faults and crashes on production servers, particularly during high traffic. Additionally, it corrects behavior in version comparisons, date handling, custom XPath queries, and ensures compatibility with OpenSSL 4.0. Developers are encouraged to test this release candidate in staging environments to avoid unexpected downtime with the final stable version
PHP 8.5.7 RC1 released
PHP 8.5.7 Release Candidate 1 targets the notoriously finicky Opcache tracing JIT by patching multiple segmentation faults that routinely crash production servers under load. The update also closes two security holes in the URI extension where pointer truncation and false path matching could break routing logic or expose memory vulnerabilities. Beyond the critical fixes, developers get corrected behavior for version comparisons, date overflow handling, custom XPath queries, and OpenSSL 4.0 compatibility. Testing this candidate on staging environments before the final release drops will save teams from unexpected downtime when the stable build finally ships.
