PHPphp@fosstodon.org
May 7, 2026, 7:54 PM📣 Available now:
- PHP 8.2.31
- PHP 8.3.31
- PHP 8.4.21
- PHP 8.5.6
‼️ Security fixes:
- DoS in DOMNode::C14N()
- Integer overflow in metaphone()
- SQL injection in pdo_firebird (NUL in query strings)
- Buffer over-read in mb_convert_encoding()
- OOB read in urldecode()
- UAF/RCE in SOAP
- XSS in PHP-FPM status page
- NULL/UAF in Mbstring and SOAP
📝 https://www.php.net/ChangeLog-8.php
🎁 https://www.php.net/downloads
:windows8: Windows: https://www.php.net/downloads.php?os=windows