Calendar
- Fixed jdtogregorian overflow.
- Fixed cal_to_jd julian_days argument overflow.
COM
- Fixed bug GH-16991 (Getting typeinfo of non DISPATCH variant segfaults).
Core
- Fail early in *nix configuration build script.
- Fixed bug GH-16727 (Opcache bad signal 139 crash in ZTS bookworm (frankenphp)).
- Fixed bug GH-16799 (Assertion failure at Zend/zend_vm_execute.h:7469).
- Fixed bug GH-16630 (UAF in lexer with encoding translation and heredocs).
- Fix is_zend_ptr() huge block comparison.
- Fixed potential OOB read in zend_dirname() on Windows.
Curl
- Fix various memory leaks in curl mime handling.
FPM
- Fixed GH-16432 (PHP-FPM 8.2 SIGSEGV in fpm_get_status).
GD
- Fixed GH-16776 (imagecreatefromstring overflow).
GMP
- Revert gmp_pow() overly restrictive overflow checks.
Hash
- Fixed GH-16711: Segfault in mhash().
Opcache
OpenSSL
- Prevent unexpected array entry conversion when reading key.
- Fix various memory leaks related to openssl exports.
- Fix memory leak in php_openssl_pkey_from_zval().
PDO
- Fixed memory leak of `setFetchMode()`.
Phar
- Fixed bug GH-16695 (phar:// tar parser and zero-length file header blocks).
PHPDBG
- Fixed bug GH-15208 (Segfault with breakpoint map and phpdbg_clear()).
SAPI
- Fixed bug GH-16998 (UBSAN warning in rfc1867).
SimpleXML
- Fixed bug GH-16808 (Segmentation fault in RecursiveIteratorIterator ->current() with a xml element input).
SNMP
- Fixed bug GH-16959 (snmget modifies the object_id array).
Standard
- Fixed bug GH-16905 (Internal iterator functions can't handle UNDEF properties).
Streams
- Fixed network connect poll interuption handling.
Windows
- Fixed bug GH-16849 (Error dialog causes process to hang).