[pull] master from php:master - #1294

Merged

pull[bot] merged 46 commits into

turkdevops:masterfrom

Sep 22, 2026

Commits on Sep 18, 2026

Fix heap-buffer-overflow in convert stream filters with NUL in line-break-chars

geeknik
authored and
bukka
committed
b4e3397
Fix GHSA-62xp-839h-2637: FastCGI allowed_clients compared only 96 bits of IPv6 addresses

alexandre-daubois
authored and
bukka
committed
dcdfcf8
Fix GHSA-vvx9-73fr-5jjx: do not fall back to CN if the cert has a service ID
bukka
committed
0bb308e
Fix GHSA-xr7j-rvgx-xq5p: OOB read in php_openssl_matches_wildcard_name()
bukka
committed
78cc82b
Fix GHSA-r6x9-5r99-36j7: Various packet overreads in mysqlnd wireprotocol

bukka
and
ndossche
committed
114dbb7
Fix GHSA-fpwc-w8rq-cr92: strip credentials from user headers on cross-origin redirects

alexandre-daubois
and
bukka
committed
5af9465
Fix GHSA-rgrp-mwpx-f6rm: unbounded recursion in ext/soap XML parsing and decoding

alexandre-daubois
authored and
bukka
committed
3655b79
Fix GHSA-cj93-vc83-wgqv

ndossche
and
bukka
committed
b11bd1d
Fix GHSA-j3wh-g957-2m85: phar tar entry injection
bukka
committed
0994e2e
Fix GHSA-9f67-6fw4-hpfp

shivammathur
and
bukka
committed
f785c3f
Fix GHSA-ch8v-r6jh-4vvr: encode 0xFF in FILTER_SANITIZE_ENCODED

iliaal
authored and
bukka
committed
7ac9700
[http] Fix out-of-bounds read on empty Location header

iliaal
authored and
bukka
committed
547566f
ext/standard: Fix 1-char relative Location redirects after GH-23467

jordikroon
authored and
bukka
committed
6466475
Add NEWS entries
bukka
committed
a14181c
ext/soap: make GHSA-cj93-vc83-wgqv test lean and reliable
bukka
committed
3aedde0

Commits on Sep 22, 2026

Fix GH-11662: Skip multicast test when unavailable

prateekbhujel
authored and
devnexen
committed
a1a7bd4
Merge branch 'PHP-8.4' into PHP-8.5
devnexen
committed
247ae24
Merge branch 'PHP-8.5'
devnexen
committed
fdc4aa9
Merge branch 'PHP-8.2' into PHP-8.3
bukka
committed
f9e0418
Merge branch 'PHP-8.3' into PHP-8.4
bukka
committed
2cd1675
Skip bz2 GH-20807 test when less than 13 GiB of memory is available
bukka
committed
7d4f779
Merge branch 'PHP-8.4' into PHP-8.5
bukka
committed
2ef7525
Merge branch 'PHP-8.5'
bukka
committed
48e53b0
Enable the TAILCALL VM when building with --disable-gcc-global-regs on GCC >= 16 (#23603)
henderkes
authored
5efde93
master is now for PHP 8.7.0-dev
mbeccati
committed
7f8a74f
CI updates after forking 8.6
mbeccati
committed
5a6c223
ext/intl: Reject unconstructed Collator in attribute and strength methods
iliaal
committed
6301283
Merge branch 'PHP-8.4' into PHP-8.5
iliaal
committed
b800171
Merge branch 'PHP-8.5' into PHP-8.6
iliaal
committed
fe96b7a
Merge branch 'PHP-8.6'
iliaal
committed
a99cf8e
CI updates after forking 8.6
mbeccati
committed
95c29bb
Merge branch 'PHP-8.4' into PHP-8.5
mbeccati
committed
9a3e7f3
Merge branch 'PHP-8.5' into PHP-8.6
mbeccati
committed
742d4f6
Merge branch 'PHP-8.6'
mbeccati
committed
0220772
PHP 8.3 is now for PHP 8.3.36
bukka
committed
68d84fa
Merge branch 'PHP-8.3' into PHP-8.4
bukka
committed
77541b3
Merge branch 'PHP-8.4' into PHP-8.5
bukka
committed
2b5a22f
Merge branch 'PHP-8.5' into PHP-8.6
bukka
committed
aefec40
CI updates after forking 8.6
mbeccati
committed
5714009
Merge branch 'PHP-8.6'
bukka
committed
5eaff70
Fix GHSA-fpwc-w8rq-cr92: do not cut the request short when stripping the last user header
bukka
committed
795440a
Merge branch 'PHP-8.5' into PHP-8.6
bukka
committed
bf40d5f
Merge branch 'PHP-8.6'
bukka
committed
6388614
Merge branch 'PHP-8.4' into PHP-8.5
mbeccati
committed
8f9a9f3
Merge branch 'PHP-8.5' into PHP-8.6
mbeccati
committed
72769be
Merge branch 'PHP-8.6'
mbeccati
committed
a26f9e5