PHP has released two simultaneous release candidates, 8.5.9 RC1 and 8.4.24 RC1, aimed at addressing JIT bugs and enhancing security. The 8.5.9 RC1 build focuses on improving JIT stability and patching critical issues, including readonly property mutations and buffer overflows in PDO_ODBC. The 8.4.24 RC1 inherits many of these fixes along with some targeted patches, ensuring that both versions receive necessary security updates. These release candidates are available for community testing before the final stable versions are released, emphasizing the importance of correcting regressions and enhancing engine reliability

PHP Drops 8.5.9 RC1 and 8.4.24 RC1 Builds to Patch JIT Bugs and Security Flaws

PHP just shipped simultaneous release candidates for the 8.5 and 8.4 branches. Right on schedule. The 8.5.9 RC1 build goes straight for JIT stability and security hardening, patching critical tracing bugs, readonly property mutations, and four PDO_ODBC buffer overflows in one go. PHP 8.4.24 RC1 inherits most of these fixes under the project’s parallel maintenance model, with a couple of targeted patches for base64 encoding and getimagesize() integer overflows.

PHP Drops 8.5.9 RC1 and 8.4.24 RC1 Builds to Patch JIT Bugs and Security Flaws @ Linux Compatible