PHP Core
PHP 8.5.11 Patches 11 CVEs, Including a SOAP Server Crash
PHP 8.5.11, 8.3.35, and 8.2.34 fix 11 CVEs, including an unauthenticated SoapServer crash and HTTP redirects that leak Authorization headers.
Eric L. Barnes
PHP 8.5
Every story tagged #php-85.
PHP Core
PHP 8.5.10 Fixes Stack Overflows on Deeply Nested Arrays
PHP 8.5.10 turns seven stack overflow crashes into catchable errors, forbids \C in UTF-8 regex patterns, and fixes PDO_PGSQL lazy fetching and four JIT bugs.
Eric L. Barnes
PHP Core
PHP 8.5.9 Fixes a Postgres SQL Injection and Three More CVEs
PHP 8.5.9 is a security release patching a Postgres SQL injection in pg_insert(), a BCMath out-of-bounds write, and Phar and GD CVEs.
Eric L. Barnes
PHP Core
PHP 8.5.8 Fixes an OpenSSL CVE and a SOAP Regression
PHP 8.5.8 patches a memory corruption CVE in openssl_encrypt with AES-WRAP-PAD, restores SoapServer::handle() without raw input, and fixes three Opcache bugs.
Eric L. Barnes